https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:51:53.238815+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01767 bdu:2021-01767 2026-10-04T12:51:53.419786+00:00 bdu:2021-01767 https://cve.radiocsirt.org/vuln/certfr-2020-avi-048 certfr-2020-avi-048 — De multiples vulnérabilités ont été découvertes dans Samba. Elles permettent à un attaquant de provoquer un contourneme… 2026-10-04T12:51:53.419834+00:00 certfr-2020-avi-048 https://cve.radiocsirt.org/vuln/euvd-2026-56720 EUVD-2026-56720 2026-10-04T12:51:53.419860+00:00 EUVD-2026-56720 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14907 fkie_cve-2019-14907 2026-10-04T12:51:53.419878+00:00

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).

 https://cve.radiocsirt.org/vuln/ghsa-qw9p-wf2h-j96q GHSA-qw9p-wf2h-j96q 2026-10-04T12:51:53.419920+00:00

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).

 https://cve.radiocsirt.org/vuln/gsd-2019-14907 gsd-2019-14907 2026-10-04T12:51:53.419948+00:00 gsd-2019-14907 https://cve.radiocsirt.org/vuln/rhsa-2020:0943 RHSA-2020:0943 — Red Hat Security Advisory: samba security and bug fix update 2026-10-04T12:51:53.419965+00:00

samba: smb client vulnerable to filenames containing path separators samba: Crash after failed character conversion at log level 3 or above

 https://cve.radiocsirt.org/vuln/rhsa-2020:1878 RHSA-2020:1878 — Red Hat Security Advisory: samba security, bug fix, and enhancement update 2026-10-04T12:51:53.419995+00:00

samba: Combination of parameters and permissions can allow user to escape from the share path definition samba: smb client vulnerable to filenames containing path separators samba: Crash after failed character conversion at log level 3 or above

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14907 UBUNTU-CVE-2019-14907 2026-10-04T12:51:53.420025+00:00

Affected: Ubuntu:Pro:14.04:LTS: samba, Ubuntu:16.04:LTS: samba, Ubuntu:18.04:LTS: samba, Ubuntu:20.04:LTS: samba

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2365 WID-SEC-W-2023-2365 — Samba: Mehrere Schwachstellen 2026-10-04T12:51:53.420067+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.