https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:08:30 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:22963 <p><strong>Affected:</strong> AlmaLinux:10: ldb-tools, AlmaLinux:10: libldb, AlmaLinux:10: libldb-devel, AlmaLinux:10: libnetapi, AlmaLinux:10: libnetapi-devel, AlmaLinux:10: libsmbclient, AlmaLinux:10: libsmbclient-devel, AlmaLinux:10: libwbclient, AlmaLinux:10: libwbclient-devel, AlmaLinux:10: python3-ldb and 27 more</p> <p>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.</p> <p>Security Fix(es):</p> <p>* samba: Missing access check on reparse point operations (CVE-2026-1933) * samba: vfs_worm does not block directory modification (CVE-2026-2340) * samba: group policy certificate enrollment uses &lt;http://&gt; without validation (CVE-2026-3012) * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480) * ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170) * samba: Remote Code Execution in SAMR (CVE-2026-4408)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: ldb-tools, AlmaLinux:10: libldb, AlmaLinux:10: libldb-devel, AlmaLinux:10: libnetapi, AlmaLinux:10: libnetapi-devel, AlmaLinux:10: libsmbclient, AlmaLinux:10: libsmbclient-devel, AlmaLinux:10: libwbclient, AlmaLinux:10: libwbclient-devel, AlmaLinux:10: python3-ldb and 27 more</p> <p>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.</p> <p>Security Fix(es):</p> <p>* samba: Missing access check on reparse point operations (CVE-2026-1933) * samba: vfs_worm does not block directory modification (CVE-2026-2340) * samba: group policy certificate enrollment uses &lt;http://&gt; without validation (CVE-2026-3012) * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480) * ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170) * samba: Remote Code Execution in SAMR (CVE-2026-4408)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:22963 https://cve.radiocsirt.org/vuln/bdu:2026-07419 bdu:2026-07419 https://cve.radiocsirt.org/vuln/bdu:2026-07419 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0651 certfr-2026-avi-0651 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0651 https://cve.radiocsirt.org/vuln/euvd-2026-371795 EUVD-2026-371795 https://cve.radiocsirt.org/vuln/euvd-2026-371795 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1933 <p>A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.</p> <p>A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1933 https://cve.radiocsirt.org/vuln/ghsa-c866-5hw6-cqf9 <p>A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.</p> <p>A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.</p> https://cve.radiocsirt.org/vuln/ghsa-c866-5hw6-cqf9 https://cve.radiocsirt.org/vuln/rhsa-2026:22644 <p>samba: Missing access check on reparse point operations samba: vfs_worm does not block directory modification samba: group policy certificate enrollment uses http:// without validation samba: Remote Code Execution in SAMR samba: Samba: Remote Code Execution in printing subsystem via unescaped job description</p> <p>samba: Missing access check on reparse point operations samba: vfs_worm does not block directory modification samba: group policy certificate enrollment uses http:// without validation samba: Remote Code Execution in SAMR samba: Samba: Remote Code Execution in printing subsystem via unescaped job description</p> https://cve.radiocsirt.org/vuln/rhsa-2026:22644 https://cve.radiocsirt.org/vuln/rhsa-2026:28053 <p>samba: Missing access check on reparse point operations samba: vfs_worm does not block directory modification samba: group policy certificate enrollment uses http:// without validation samba: Remote Code Execution in SAMR samba: Samba: Remote Code Execution in printing subsystem via unescaped job description</p> <p>samba: Missing access check on reparse point operations samba: vfs_worm does not block directory modification samba: group policy certificate enrollment uses http:// without validation samba: Remote Code Execution in SAMR samba: Samba: Remote Code Execution in printing subsystem via unescaped job description</p> https://cve.radiocsirt.org/vuln/rhsa-2026:28053 https://cve.radiocsirt.org/vuln/rlsa-2026:22644 <p><strong>Affected:</strong> Rocky Linux:8: samba</p> <p>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.</p> <p>Security Fix(es):</p> <p>* samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)</p> <p>* samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)</p> <p>* samba: Remote Code Execution in SAMR (CVE-2026-4408)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:8: samba</p> <p>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.</p> <p>Security Fix(es):</p> <p>* samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)</p> <p>* samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)</p> <p>* samba: Remote Code Execution in SAMR (CVE-2026-4408)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:22644 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1933 <p><strong>Affected:</strong> Ubuntu:25.10: samba, Ubuntu:26.04:LTS: samba</p> <p>A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.</p> <p><strong>Affected:</strong> Ubuntu:25.10: samba, Ubuntu:26.04:LTS: samba</p> <p>A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1933 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1686 <p>Ein Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1686