Vulnerabilities

TI-2026-03832 CVE-2026-4408 · GHSA-jg8v-92xc-cx65

Samba: remote code execution in samr

MEDIUM 48

A flaw was found in Samba.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02501 Published 2026-05-28 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +19 CWE-78

TI-2026-01597 CVE-2026-1933 · GHSA-c866-5hw6-cqf9

Samba: missing access check on reparse point operations

LOW 33

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00862 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +18 CWE-284

TI-2026-01978 CVE-2026-2340 · GHSA-m6w2-p258-gxqp

Samba: vfs_worm does not block directory modification

LOW 31

A flaw was found in Samba’s vfs_worm module.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00947 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-280

TI-2026-02601 CVE-2026-3012 · GHSA-59rx-q76w-hqrw

Samba: group policy certificate enrollment uses http:// without validation

LOW 36

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.

CVSS 3.1HIGH 8.0 Adjacent network No auth No interaction EPSS 0.00261 Published 2026-05-27 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-345

TI-2026-03891 CVE-2026-4480 · GHSA-hwwh-4hhw-h9jf

Samba: samba: remote code execution in printing subsystem via unescaped job description

HIGH 66

A flaw was found in the Samba printing subsystem.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.28691 Published 2026-05-26 Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +9 CWE-78