https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:45:58.492166+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:22644 ALSA-2026:22644 — Important: samba security update 2026-10-03T02:45:58.878338+00:00

Affected: AlmaLinux:8: ctdb, AlmaLinux:8: libnetapi, AlmaLinux:8: libnetapi-devel, AlmaLinux:8: libsmbclient, AlmaLinux:8: libsmbclient-devel, AlmaLinux:8: libwbclient, AlmaLinux:8: libwbclient-devel, AlmaLinux:8: python3-samba, AlmaLinux:8: python3-samba-dc, AlmaLinux:8: python3-samba-devel and 24 more

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: group policy certificate enrollment uses <http://> without validation (CVE-2026-3012) * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480) * samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-07317 bdu:2026-07317 2026-10-03T02:45:58.878451+00:00 bdu:2026-07317 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0651 certfr-2026-avi-0651 — De multiples vulnérabilités ont été découvertes dans Samba. Certaines d'entre elles permettent à un attaquant de provoq… 2026-10-03T02:45:58.878469+00:00 certfr-2026-avi-0651 https://cve.radiocsirt.org/vuln/euvd-2026-362260 EUVD-2026-362260 2026-10-03T02:45:58.878486+00:00 EUVD-2026-362260 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4480 fkie_cve-2026-4480 2026-10-03T02:45:58.878498+00:00

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.

 https://cve.radiocsirt.org/vuln/ghsa-hwwh-4hhw-h9jf GHSA-hwwh-4hhw-h9jf 2026-10-03T02:45:58.878522+00:00

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.

 https://cve.radiocsirt.org/vuln/oesa-2026-2574 OESA-2026-2574 — samba security update 2026-10-03T02:45:58.878539+00:00

Affected: openEuler:22.03-LTS-SP4: samba

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es):

A flaw was found in Samba&apos;s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.(CVE-2026-3012)

[&apos;-------- Forwarded Message --------&apos;, &apos;Date: Tue, 26 May 2026 14:29:50 +0200&apos;, &apos;Reply-To: Stefan Metzmacher &lt;metze () samba org&gt;&apos;, &apos;Release Announcements\n---------------------\n\nThis is a security release in order to address the following defects:\n\no CVE-2026-1933: Missing access checks on reparse point operations\n\n On a share marked &quot;read only = yes&quot; and\n on file handles opened R/O users can set\n or delete the reparse point xattrs on files\n that the user has write-access in the file\n system for.&apos;, &apos;o CVE-2026-2340: WORM vfs module does not block overwrites\n\n The WORM (Write-Once, Read Many) vfs module\n is supposed to lock write access to shared\n fil…

 https://cve.radiocsirt.org/vuln/rhsa-2026:22644 RHSA-2026:22644 — Red Hat Security Advisory: samba security update 2026-10-03T02:45:58.878592+00:00

samba: Missing access check on reparse point operations samba: vfs_worm does not block directory modification samba: group policy certificate enrollment uses http:// without validation samba: Remote Code Execution in SAMR samba: Samba: Remote Code Execution in printing subsystem via unescaped job description

 https://cve.radiocsirt.org/vuln/rhsa-2026:28053 RHSA-2026:28053 — Red Hat Security Advisory: samba security update 2026-10-03T02:45:58.878621+00:00

samba: Missing access check on reparse point operations samba: vfs_worm does not block directory modification samba: group policy certificate enrollment uses http:// without validation samba: Remote Code Execution in SAMR samba: Samba: Remote Code Execution in printing subsystem via unescaped job description

 https://cve.radiocsirt.org/vuln/rlsa-2026:22644 RLSA-2026:22644 — Important: samba security update 2026-10-03T02:45:58.878644+00:00

Affected: Rocky Linux:8: samba

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)

* samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)

* samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4480 UBUNTU-CVE-2026-4480 2026-10-03T02:45:58.878669+00:00

Affected: Ubuntu:Pro:14.04:LTS: samba, Ubuntu:Pro:16.04:LTS: samba, Ubuntu:Pro:18.04:LTS: samba, Ubuntu:Pro:20.04:LTS: samba, Ubuntu:22.04:LTS: samba, Ubuntu:24.04:LTS: samba, Ubuntu:25.10: samba, Ubuntu:26.04:LTS: samba

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1686 WID-SEC-W-2026-1686 — Samba: Mehrere Schwachstellen 2026-10-03T02:45:58.878699+00:00

Ein Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.