Known Vulnerabilities for Certificates by Smallstep
Listed below are 10 of the newest known vulnerabilities associated with "Certificates" by "Smallstep".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65602 json | Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTC... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-62290 json | cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process o... | Not Provided | 2026-07-16 | 2026-07-18 |
| CVE-2026-59849 json | A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-56624 json | Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side and se... | Not Provided | 2026-07-20 | 2026-07-23 |
| CVE-2026-55964 json | Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA. Intermediate CA certificates are required to have th... | Not Provided | 2026-06-25 | 2026-06-26 |
| CVE-2026-53622 json | Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerability in Traefik's HTTP/3 (QU... | Not Provided | 2026-06-23 | 2026-07-15 |
| CVE-2026-48815 json | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, the documented certificateO... | Not Provided | 2026-07-14 | 2026-07-15 |
| CVE-2026-48697 json | FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. The execute_web_re... | Not Provided | 2026-05-26 | 2026-05-26 |
| CVE-2026-47107 json | Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where... | Not Provided | 2026-05-19 | 2026-07-14 |
| CVE-2026-46685 json | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, when RUSTFS_CORS_ALLOWED_ORIGINS is unset... | Not Provided | 2026-05-28 | 2026-05-28 |