← Back to browse · API

CVE-2025-44005

Severity
CRITICAL
CVSS
10.0
EPSS
0.03318
Risk score
41.16
CISA KEV
No
PoC
Yes
Published
2025-12-17
Modified
2025-12-17
First seen
2026-08-07
Aliases
EUVD-2025-201012, GHSA-H8CP-697H-8C8P
Products
linux, smallstep:Step-CA 0.28.4, smallstep:Step-CA v0.28.3, suse
Sources
packetstorm e760ebd193aaec6c0d4acb9c|CVE-2025-44005
euvd EUVD-2025-201012

Description

An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks.

References