Skip to content
Threat Feed
Subscribe

Vendor

Samba

3 briefs RSS
critical threat

CVE-2026-4408: Samba Remote Command Execution via Misconfigured Password Check Script

CVE-2026-4408 describes a remote command execution vulnerability in Samba file servers and classic domain controllers where a misconfigured 'check password script' feature, using the %u substitution character without proper escaping, allows attackers to execute arbitrary commands.

Samba cve rce
2r 1t 1c
medium advisory

Samba NTFS Reparse Point Vulnerability (CVE-2026-1933)

CVE-2026-1933 describes a vulnerability in Samba's handling of NTFS-style reparse points on read-only shares, allowing authenticated users with filesystem write permissions to modify reparse point metadata and potentially alter SMB-visible file behavior.

Samba cve cve-2026-1933 reparse point privilege escalation smb
2r 1t 1c
high advisory

Samba Certificate Auto-Enrollment Vulnerability (CVE-2026-3012)

CVE-2026-3012 describes a vulnerability in Samba's certificate auto-enrollment Group Policy handling, where retrieval of CA certificates over unencrypted HTTP connections without proper verification could allow attackers to supply malicious certificates, leading to interception or spoofing of trusted communications.

samba certificate-enrollment man-in-the-middle cve-2026-3012
2r 1t 1c