https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:41:49.668371+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07423 bdu:2026-07423 2026-10-03T02:41:49.809640+00:00 bdu:2026-07423 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0651 certfr-2026-avi-0651 — De multiples vulnérabilités ont été découvertes dans Samba. Certaines d'entre elles permettent à un attaquant de provoq… 2026-10-03T02:41:49.809678+00:00 certfr-2026-avi-0651 https://cve.radiocsirt.org/vuln/euvd-2026-362261 EUVD-2026-362261 2026-10-03T02:41:49.809698+00:00 EUVD-2026-362261 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3238 fkie_cve-2026-3238 2026-10-03T02:41:49.809711+00:00

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.

 https://cve.radiocsirt.org/vuln/ghsa-gpff-px68-36rh GHSA-gpff-px68-36rh 2026-10-03T02:41:49.809743+00:00

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.

 https://cve.radiocsirt.org/vuln/oesa-2026-2574 OESA-2026-2574 — samba security update 2026-10-03T02:41:49.809762+00:00

Affected: openEuler:22.03-LTS-SP4: samba

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es):

A flaw was found in Samba's certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.(CVE-2026-3012)

['-------- Forwarded Message --------', 'Date: Tue, 26 May 2026 14:29:50 +0200', 'Reply-To: Stefan Metzmacher <metze () samba org>', 'Release Announcements\n---------------------\n\nThis is a security release in order to address the following defects:\n\no CVE-2026-1933: Missing access checks on reparse point operations\n\n On a share marked "read only = yes" and\n on file handles opened R/O users can set\n or delete the reparse point xattrs on files\n that the user has write-access in the file\n system for.', 'o CVE-2026-2340: WORM vfs module does not block overwrites\n\n The WORM (Write-Once, Read Many) vfs module\n is supposed to lock write access to shared\n fil…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-3238 UBUNTU-CVE-2026-3238 2026-10-03T02:41:49.809816+00:00

Affected: Ubuntu:Pro:14.04:LTS: samba, Ubuntu:Pro:16.04:LTS: samba, Ubuntu:Pro:18.04:LTS: samba, Ubuntu:Pro:20.04:LTS: samba, Ubuntu:22.04:LTS: samba, Ubuntu:24.04:LTS: samba, Ubuntu:25.10: samba, Ubuntu:26.04:LTS: samba

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1686 WID-SEC-W-2026-1686 — Samba: Mehrere Schwachstellen 2026-10-03T02:41:49.809849+00:00

Ein Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.