smallstep

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

smallstep records in CISA KEV

No smallstep vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Step-ca · all components

TI-2026-23665 CVE-2026-30836 · GHSA-q4r8-xm5f-56gw

MEDIUM 49

Step CA is an online certificate authority for secure, automated certificate management for DevOps.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00308 Published 2026-03-19 Fixed in 0.30.0 CWE-287

TI-2026-28924 CVE-2026-40097 · GHSA-9qq8-cgcv-qmc9

LOW 17

Step CA is an online certificate authority for secure, automated certificate management for DevOps.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00188 Published 2026-04-10 Fixed in 0.30.0-rc3, 0.30.0 CWE-129