CVE-2026-3012

EUVD-2026-32211

27.05.2026, 11:16

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8 HIGH	ADJACENT_NETWORK	HIGH	NONE	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 17%

Affected Products (NVD)

Vendor	Product	Version
redhat	openshift_container_platform	4.0
samba	samba	4.16.0 ≤ 𝑥 < 4.21.0
redhat	enterprise_linux	7.0
redhat	enterprise_linux	9.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

samba

bookworm	vulnerable
bookworm (security)	2:4.17.12+dfsg-0+deb12u4 fixed
bullseye	vulnerable
bullseye (security)	vulnerable
forky	2:4.24.3+dfsg-1 fixed
sid	2:4.24.4+dfsg-1 fixed
trixie	vulnerable
trixie (security)	2:4.22.8+dfsg-0+deb13u2 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

ctdb

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

ldb-tools

RHEL 9

0:4.23.5-10.el9_8

fixed

libldb

RHEL 9

0:4.23.5-10.el9_8

fixed

libldb-devel

RHEL 9

0:4.23.5-10.el9_8

fixed

libnetapi

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libnetapi-devel

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libsmbclient

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libsmbclient-devel

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libwbclient

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libwbclient-devel

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

python3-ldb

RHEL 9

0:4.23.5-10.el9_8

fixed

python3-samba

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

python3-samba-dc

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

python3-samba-devel

RHEL 8

0:4.19.4-16.el8_10

fixed

python3-samba-test

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-client

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-client-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-common

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-common-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-common-tools

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-dc-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-dcerpc

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-devel

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-gpupdate

RHEL 9

0:4.23.5-10.el9_8

fixed

samba-krb5-printing

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-ldb-ldap-modules

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-pidl

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-test

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-test-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-tools

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-usershares

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-vfs-iouring

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winbind

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winbind-clients

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winbind-krb5-locator

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winbind-modules

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winexe

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

Amazon Linux Releases

Amazon Package

Release

libnetapi

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

libnetapi-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

libnetapi-devel

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

libsmbclient

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

libsmbclient-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

libsmbclient-devel

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

libwbclient

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

libwbclient-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

libwbclient-devel

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

python3-samba

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

python3-samba-dc

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

python3-samba-dc-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

python3-samba-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

python3-samba-devel

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

python3-samba-test

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-client

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-client-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-client-libs

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-client-libs-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-common

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-common-libs

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-common-libs-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-common-tools

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-common-tools-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-dc-libs

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-dc-libs-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-dcerpc

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-dcerpc-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-debugsource

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-devel

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-krb5-printing

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-krb5-printing-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-ldb-ldap-modules

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-ldb-ldap-modules-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-libs

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-libs-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-pidl

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-test

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-test-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-test-libs

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-test-libs-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-tools

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-usershares

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-vfs-iouring

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-vfs-iouring-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-winbind

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-winbind-clients

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-winbind-clients-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-winbind-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-winbind-krb5-locator

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-winbind-krb5-locator-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-winbind-modules

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

samba-winbind-modules-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.5

fixed

Common Weakness Enumeration

CWE-345 - Insufficient Verification of Data Authenticity
The software does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References

https://access.redhat.com/errata/RHSA-2026:22644

https://access.redhat.com/errata/RHSA-2026:22963

https://access.redhat.com/errata/RHSA-2026:25049

https://access.redhat.com/errata/RHSA-2026:25979

https://access.redhat.com/errata/RHSA-2026:28053

https://access.redhat.com/errata/RHSA-2026:28054

https://access.redhat.com/errata/RHSA-2026:28055

https://access.redhat.com/errata/RHSA-2026:28056

https://access.redhat.com/errata/RHSA-2026:28057

https://access.redhat.com/errata/RHSA-2026:29863

https://access.redhat.com/security/cve/CVE-2026-3012

https://bugzilla.redhat.com/show_bug.cgi?id=2447319

https://bugzilla.samba.org/show_bug.cgi?id=16003

https://access.redhat.com/errata/RHSA-2026:22644

https://access.redhat.com/errata/RHSA-2026:22963

https://access.redhat.com/errata/RHSA-2026:25049

https://access.redhat.com/errata/RHSA-2026:25979

https://access.redhat.com/errata/RHSA-2026:28053

https://access.redhat.com/errata/RHSA-2026:28054

https://access.redhat.com/errata/RHSA-2026:28055

https://access.redhat.com/errata/RHSA-2026:28056

https://access.redhat.com/errata/RHSA-2026:28057

https://access.redhat.com/errata/RHSA-2026:29863

https://access.redhat.com/security/cve/CVE-2026-3012

https://bugzilla.redhat.com/show_bug.cgi?id=2447319

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3012.json