https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:52:34.618659+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:5082 ALSA-2021:5082 — Important: samba security update 2026-10-03T05:52:34.799944+00:00

Affected: AlmaLinux:8: libsmbclient-devel, AlmaLinux:8: libwbclient-devel, AlmaLinux:8: samba-devel, AlmaLinux:8: samba-vfs-iouring

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: Active Directory (AD) domain user could become root on domain members (CVE-2020-25717)

* samba: SMB1 client connections can be downgraded to plaintext authentication (CVE-2016-2124)

* samba: Subsequent DCE/RPC fragment injection vulnerability (CVE-2021-23192)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05707 bdu:2022-05707 2026-10-03T05:52:34.800022+00:00 bdu:2022-05707 https://cve.radiocsirt.org/vuln/certfr-2021-avi-857 certfr-2021-avi-857 — De multiples vulnérabilités ont été découvertes dans Samba. Certaines d'entre elles permettent à un attaquant de provoq… 2026-10-03T05:52:34.800041+00:00 certfr-2021-avi-857 https://cve.radiocsirt.org/vuln/cnvd-2021-87030 cnvd-2021-87030 2026-10-03T05:52:34.800058+00:00 cnvd-2021-87030 https://cve.radiocsirt.org/vuln/euvd-2026-23377 EUVD-2026-23377 2026-10-03T05:52:34.800070+00:00 EUVD-2026-23377 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23192 fkie_cve-2021-23192 2026-10-03T05:52:34.800081+00:00

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.

 https://cve.radiocsirt.org/vuln/ghsa-vffc-r23p-p6rq GHSA-vffc-r23p-p6rq 2026-10-03T05:52:34.800120+00:00

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.

 https://cve.radiocsirt.org/vuln/gsd-2021-23192 gsd-2021-23192 2026-10-03T05:52:34.800147+00:00 gsd-2021-23192 https://cve.radiocsirt.org/vuln/msrc_cve-2021-23192 msrc_CVE-2021-23192 — A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request… 2026-10-03T05:52:34.800173+00:00 msrc_CVE-2021-23192 https://cve.radiocsirt.org/vuln/rhsa-2021:4843 RHSA-2021:4843 — Red Hat Security Advisory: samba security update 2026-10-03T05:52:34.800198+00:00

samba: SMB1 client connections can be downgraded to plaintext authentication samba: Active Directory (AD) domain user could become root on domain members samba: Subsequent DCE/RPC fragment injection vulnerability

 https://cve.radiocsirt.org/vuln/rhsa-2021:5082 RHSA-2021:5082 — Red Hat Security Advisory: samba security update 2026-10-03T05:52:34.800220+00:00

samba: SMB1 client connections can be downgraded to plaintext authentication samba: Active Directory (AD) domain user could become root on domain members samba: Subsequent DCE/RPC fragment injection vulnerability

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-23192 UBUNTU-CVE-2021-23192 2026-10-03T05:52:34.800240+00:00

Affected: Ubuntu:20.04:LTS: samba, Ubuntu:22.04:LTS: samba

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator… 2026-10-03T05:52:34.800262+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.