https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:40:59.739014+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:22963 ALSA-2026:22963 — Critical: samba security update 2026-10-03T01:40:59.963783+00:00

Affected: AlmaLinux:10: ldb-tools, AlmaLinux:10: libldb, AlmaLinux:10: libldb-devel, AlmaLinux:10: libnetapi, AlmaLinux:10: libnetapi-devel, AlmaLinux:10: libsmbclient, AlmaLinux:10: libsmbclient-devel, AlmaLinux:10: libwbclient, AlmaLinux:10: libwbclient-devel, AlmaLinux:10: python3-ldb and 27 more

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: Missing access check on reparse point operations (CVE-2026-1933) * samba: vfs_worm does not block directory modification (CVE-2026-2340) * samba: group policy certificate enrollment uses <http://> without validation (CVE-2026-3012) * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480) * ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170) * samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-07421 bdu:2026-07421 2026-10-03T01:40:59.963909+00:00 bdu:2026-07421 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0651 certfr-2026-avi-0651 — De multiples vulnérabilités ont été découvertes dans Samba. Certaines d'entre elles permettent à un attaquant de provoq… 2026-10-03T01:40:59.963930+00:00 certfr-2026-avi-0651 https://cve.radiocsirt.org/vuln/euvd-2026-380690 EUVD-2026-380690 2026-10-03T01:40:59.963946+00:00 EUVD-2026-380690 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2340 fkie_cve-2026-2340 2026-10-03T01:40:59.963957+00:00

A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.

 https://cve.radiocsirt.org/vuln/ghsa-m6w2-p258-gxqp GHSA-m6w2-p258-gxqp 2026-10-03T01:40:59.963982+00:00

A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.

 https://cve.radiocsirt.org/vuln/rhsa-2026:22644 RHSA-2026:22644 — Red Hat Security Advisory: samba security update 2026-10-03T01:40:59.963999+00:00

samba: Missing access check on reparse point operations samba: vfs_worm does not block directory modification samba: group policy certificate enrollment uses http:// without validation samba: Remote Code Execution in SAMR samba: Samba: Remote Code Execution in printing subsystem via unescaped job description

 https://cve.radiocsirt.org/vuln/rhsa-2026:28053 RHSA-2026:28053 — Red Hat Security Advisory: samba security update 2026-10-03T01:40:59.964026+00:00

samba: Missing access check on reparse point operations samba: vfs_worm does not block directory modification samba: group policy certificate enrollment uses http:// without validation samba: Remote Code Execution in SAMR samba: Samba: Remote Code Execution in printing subsystem via unescaped job description

 https://cve.radiocsirt.org/vuln/rlsa-2026:22644 RLSA-2026:22644 — Important: samba security update 2026-10-03T01:40:59.964048+00:00

Affected: Rocky Linux:8: samba

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)

* samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)

* samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-2340 UBUNTU-CVE-2026-2340 2026-10-03T01:40:59.964074+00:00

Affected: Ubuntu:22.04:LTS: samba, Ubuntu:24.04:LTS: samba, Ubuntu:25.10: samba, Ubuntu:26.04:LTS: samba

A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1686 WID-SEC-W-2026-1686 — Samba: Mehrere Schwachstellen 2026-10-03T01:40:59.964100+00:00

Ein Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.