Junglewise Threat Intelligence

CVE-2026-30836: GO-2026-4775 - step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates

CVE-2026-30836 · Severity: low · CVSS 3.1 · Published 2026-03-23

Technologies: github.com/smallstep/certificates (Go). Vendors: Go.

Executive brief

step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates

Affected products

  • Go github.com/smallstep/certificates

Related threats