CVE-2025-3026

The vulnerability exists in the EJBCA service, version 8.0 Enterprise. Not tested in higher versions. By modifying the ‘Host’ header in an HTTP request, it is possible to manipulate the generated links and thus redirect the client to a different base URL. In this way, an attacker could insert his own server for the client to send HTTP requests, provided he succeeds in exploiting it.

• CWE-74

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-ejbcaThird Party Advisory

Published

Mar 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-30254An unauthenticated attacker can obtain a serial number of a …6.9
• CVE-2025-30255Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi S…8.3
• CVE-2025-30256A denial of service vulnerability exists in the HTTP Header …7.5
• CVE-2025-30257Unauthenticated attackers can retrieve serial number of smar…6.9
• CVE-2025-30258In GnuPG before 2.5.5, if a user chooses to import a certifi…4.7
• CVE-2025-30259The WhatsApp cloud service before late 2024 did not block ce…3.5
• CVE-2025-30260An allocation of resources without limits or throttling vuln…6.5
• CVE-2025-30261An allocation of resources without limits or throttling vuln…6.5
• CVE-2025-30262A NULL pointer dereference vulnerability has been reported t…6.5
• CVE-2025-30263A NULL pointer dereference vulnerability has been reported t…6.5
• CVE-2025-30264A command injection vulnerability has been reported to affec…8.8
• CVE-2025-30265A buffer overflow vulnerability has been reported to affect …6.5