https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:55:13.895539+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01292 bdu:2021-01292 2026-10-03T21:55:14.030929+00:00 bdu:2021-01292 https://cve.radiocsirt.org/vuln/cnvd-2016-02261 cnvd-2016-02261 2026-10-03T21:55:14.030974+00:00 cnvd-2016-02261 https://cve.radiocsirt.org/vuln/euvd-2026-82825 EUVD-2026-82825 2026-10-03T21:55:14.030989+00:00 EUVD-2026-82825 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2114 fkie_cve-2016-2114 2026-10-03T21:55:14.031001+00:00

The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.

 https://cve.radiocsirt.org/vuln/ghsa-qg5v-7xq3-qwf4 GHSA-qg5v-7xq3-qwf4 2026-10-03T21:55:14.031033+00:00

The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.

 https://cve.radiocsirt.org/vuln/gsd-2016-2114 gsd-2016-2114 2026-10-03T21:55:14.031051+00:00 gsd-2016-2114 https://cve.radiocsirt.org/vuln/rhsa-2016:0612 RHSA-2016:0612 — Red Hat Security Advisory: samba and samba4 security, bug fix, and enhancement update 2026-10-03T21:55:14.031062+00:00

samba: crash in dcesrv_auth_bind_ack due to missing error check samba: Man-in-the-middle attacks possible with NTLMSSP authentication samba: Spoofing vulnerability when domain controller is configured samba: Missing downgrade detection samba: Server certificates not validated at client side samba: Samba based active directory domain controller does not enforce smb signing samba: Smb signing not required by default when smb client connection is used for ipc usage samba: SAMR and LSA man in the middle attacks

 https://cve.radiocsirt.org/vuln/rhsa-2016:0614 RHSA-2016:0614 — Red Hat Security Advisory: samba security, bug fix, and enhancement update 2026-10-03T21:55:14.031092+00:00

samba: crash in dcesrv_auth_bind_ack due to missing error check samba: Man-in-the-middle attacks possible with NTLMSSP authentication samba: Spoofing vulnerability when domain controller is configured samba: Missing downgrade detection samba: Server certificates not validated at client side samba: Samba based active directory domain controller does not enforce smb signing samba: Smb signing not required by default when smb client connection is used for ipc usage samba: SAMR and LSA man in the middle attacks

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2114 UBUNTU-CVE-2016-2114 2026-10-03T21:55:14.031119+00:00

Affected: Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: samba

The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.