Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how samba compares to other vendors in security performance

View Risk Score →

oss-secFwd: Heads-up: Upcoming important Samba security leases on 2026-07-28

First published (updated )
https://seclists.org/oss-sec/2026/q3/229

Samba samba-winbind (pam_winbind)Samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation

Risk 41
Severity
6.1
First published (updated )
CVE-2026-15779

Samba samba-winbind (pam_winbind module)A flaw was found in samba's pam_winbind module. When pam_winbind.conf sets mkhomedir = yes, the modu…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2499991

Samba Samba Active Directory Domain Controller (WINS server)Null Pointer Dereference

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2486176

oss-secSamba 4.24.3, 4.23.8 and 4.22.10 Security leases aavailable for Download

First published (updated )
https://seclists.org/oss-sec/2026/q2/711
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

rsync rsyncRsync < 3.4.3 Authorization Bypass via Hostname Resolution

Risk 38
Severity
6.3
First published (updated )
CVE-2026-43617

rsync rsyncRsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls

Risk 52
Severity
7.2
First published (updated )
CVE-2026-43619

rsync rsyncRsync < 3.4.3 Out-of-Bounds Array Read via recv_files()

Risk 44
Severity
6.9
First published (updated )
CVE-2026-43620

rsync rsyncRsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy

Risk 21
Severity
2.1
First published (updated )
CVE-2026-45232

redhat Enterprise LinuxSamba: remote code execution in samr

Risk 90
Severity
9.8
First published (updated )
CVE-2026-4408
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Samba SambaSamba file servers and classic (non-AD) domain controllers offer the SamValidatePasswordChange and S…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2479762

rsync rsyncRsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write

Risk 72
Severity
7.3
First published (updated )
CVE-2026-29518

rsync rsyncRsync < 3.4.3 Integer Overflow Information Disclosure

Risk 64
Severity
6.1
First published (updated )
CVE-2026-43618

rsync rsyncUse After Free

Risk 73
Severity
7.8
First published (updated )
CVE-2026-41035

oss-secHeads-up: Upcoming Samba security leases (2026-04-09)

First published (updated )
https://seclists.org/oss-sec/2026/q2/52
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secHeads-up: Upcoming Samba security leases (2026-04-09)

First published (updated )
https://seclists.org/oss-sec/2026/q2/30

oss-secHeads-up: Upcoming Samba security leases (2026-04-09)

First published (updated )
https://seclists.org/oss-sec/2026/q2/22

redhat Enterprise LinuxSamba: samba: remote code execution in printing subsystem via unescaped job description

Risk 90
Severity
9.8
First published (updated )
CVE-2026-4480

Samba Samba printing subsystemSamba: Unauthenticated Remote Code Execution in Samba printing subsystem

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2452232

redhat Enterprise LinuxSamba: vfs_worm does not block directory modification

Risk 40
Severity
6.5
First published (updated )
CVE-2026-2340
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Enterprise LinuxSamba: group policy certificate enrollment uses http:// without validation

Risk 62
Severity
8
First published (updated )
CVE-2026-3012

redhat Enterprise LinuxSamba: missing access check on reparse point operations

Risk 51
Severity
7.1
First published (updated )
CVE-2026-1933

Samba SambaSamba: group policy certificate enrollment uses http:// without validation

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2447319

Samba SambaSamba: Missing access check on reparse point operations

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2447317

Samba Samba vfs_wormSamba: vfs_worm does not block directory modification

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2447318
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Samba security leases for CVE-2025-10230 and CVE-2025-9640

First published (updated )
https://seclists.org/oss-sec/2025/q4/53

Samba security leases for CVE-2025-10230 and CVE-2025-9640

First published (updated )
https://seclists.org/oss-sec/2025/q4/52

Samba security leases for CVE-2025-10230 and CVE-2025-9640

First published (updated )
https://seclists.org/oss-sec/2025/q4/50

Samba security leases for CVE-2025-10230 and CVE-2025-9640

First published (updated )
https://seclists.org/oss-sec/2025/q4/49

Samba security leases for CVE-2025-10230 and CVE-2025-9640

First published (updated )
https://seclists.org/oss-sec/2025/q4/48
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203