⤷ Title: Critical Step CA Flaw (CVE-2025-44005, CVSS 10.0) Allows Unauthenticated Bypass to Issue Fraudulent Certificates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 06 Dec 2025 00:06:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ACME #Authentication Bypass #CA Infrastructure #Critical Vulnerability #CVE_2025_44005 #SCEP #Step CA
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 06 Dec 2025 00:06:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ACME #Authentication Bypass #CA Infrastructure #Critical Vulnerability #CVE_2025_44005 #SCEP #Step CA
Daily CyberSecurity
Critical Step CA Flaw (CVE-2025-44005, CVSS 10.0) Allows Unauthenticated Bypass to Issue Fraudulent Certificates
A Catastrophic (CVSS 10.0) Auth Bypass flaw (CVE-2025-44005) in Step CA's ACME/SCEP provisioners allows unauthenticated attackers to issue fraudulent certificates and access restricted infrastructure. Update to v0.29.0.