https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:08:41.653946+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:22963 ALSA-2026:22963 — Critical: samba security update 2026-10-02T22:08:41.717858+00:00

Affected: AlmaLinux:10: ldb-tools, AlmaLinux:10: libldb, AlmaLinux:10: libldb-devel, AlmaLinux:10: libnetapi, AlmaLinux:10: libnetapi-devel, AlmaLinux:10: libsmbclient, AlmaLinux:10: libsmbclient-devel, AlmaLinux:10: libwbclient, AlmaLinux:10: libwbclient-devel, AlmaLinux:10: python3-ldb and 27 more

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: Missing access check on reparse point operations (CVE-2026-1933) * samba: vfs_worm does not block directory modification (CVE-2026-2340) * samba: group policy certificate enrollment uses <http://> without validation (CVE-2026-3012) * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480) * ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170) * samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-07419 bdu:2026-07419 2026-10-02T22:08:41.717980+00:00 bdu:2026-07419 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0651 certfr-2026-avi-0651 — De multiples vulnérabilités ont été découvertes dans Samba. Certaines d'entre elles permettent à un attaquant de provoq… 2026-10-02T22:08:41.717998+00:00 certfr-2026-avi-0651 https://cve.radiocsirt.org/vuln/euvd-2026-371795 EUVD-2026-371795 2026-10-02T22:08:41.718015+00:00 EUVD-2026-371795 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1933 fkie_cve-2026-1933 2026-10-02T22:08:41.718027+00:00

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.

 https://cve.radiocsirt.org/vuln/ghsa-c866-5hw6-cqf9 GHSA-c866-5hw6-cqf9 2026-10-02T22:08:41.718053+00:00

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.

 https://cve.radiocsirt.org/vuln/rhsa-2026:22644 RHSA-2026:22644 — Red Hat Security Advisory: samba security update 2026-10-02T22:08:41.718069+00:00

samba: Missing access check on reparse point operations samba: vfs_worm does not block directory modification samba: group policy certificate enrollment uses http:// without validation samba: Remote Code Execution in SAMR samba: Samba: Remote Code Execution in printing subsystem via unescaped job description

 https://cve.radiocsirt.org/vuln/rhsa-2026:28053 RHSA-2026:28053 — Red Hat Security Advisory: samba security update 2026-10-02T22:08:41.718096+00:00

samba: Missing access check on reparse point operations samba: vfs_worm does not block directory modification samba: group policy certificate enrollment uses http:// without validation samba: Remote Code Execution in SAMR samba: Samba: Remote Code Execution in printing subsystem via unescaped job description

 https://cve.radiocsirt.org/vuln/rlsa-2026:22644 RLSA-2026:22644 — Important: samba security update 2026-10-02T22:08:41.718116+00:00

Affected: Rocky Linux:8: samba

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)

* samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)

* samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1933 UBUNTU-CVE-2026-1933 2026-10-02T22:08:41.718141+00:00

Affected: Ubuntu:25.10: samba, Ubuntu:26.04:LTS: samba

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1686 WID-SEC-W-2026-1686 — Samba: Mehrere Schwachstellen 2026-10-02T22:08:41.718162+00:00

Ein Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.