Skip to main content

Samba CVE-2026-4408

| EUVDEUVD-2026-32741 CRITICAL
OS Command Injection (CWE-78)
N/A vendor:alpine GHSA-jg8v-92xc-cx65
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vuln.today AI
8.8 HIGH

Samba command-injection flaws historically require an authenticated SMB session to reach vulnerable helpers, so PR:L over PR:N; network reachable, low complexity, full CIA impact as smbd typically runs privileged.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

8
Analysis Updated
Jun 15, 2026 - 22:28 vuln.today
v5 (cvss_changed)
Analysis Updated
Jun 15, 2026 - 22:28 vuln.today
v4 (cvss_changed)
CVSS changed
Jun 15, 2026 - 22:22 NVD
9.0 (CRITICAL) 9.8 (CRITICAL)
Analysis Updated
May 28, 2026 - 09:28 vuln.today
v3 (cvss_changed)
Analysis Updated
May 28, 2026 - 09:27 vuln.today
v2 (cvss_changed)
Re-analysis Queued
May 28, 2026 - 09:22 vuln.today
cvss_changed
CVSS changed
May 28, 2026 - 09:22 NVD
9.0 (CRITICAL)
Analysis Generated
May 28, 2026 - 05:04 vuln.today

DescriptionNVD

Alpine Linux: samba fixed in 4.23.8-r0

AnalysisAI

Command injection in Samba (CWE-78) carries a critical CVSS 9.8 (AV:N/AC:L/PR:N/UI:N) and is fixed in Alpine Linux package samba 4.23.8-r0, with Red Hat shipping errata RHSA-2026:22644, 22963, 25049, and 25979 for Enterprise Linux 6/7/9 and OpenShift Container Platform 4.0. The flaw allows remote attackers to inject operating-system commands against vulnerable Samba deployments, yielding full confidentiality, integrity, and availability impact. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden

Vulnerability AssessmentAI

Exploitation Based on the supplied CVSS vector (AV:N/AC:L/PR:N/UI:N), exploitation requires only network reachability to the Samba service (typically TCP 445, also 139) with no authentication and no user interaction against default Samba deployments on Alpine, RHEL 6/7/9, and OpenShift Container Platform 4.0. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Signals are mixed and require honest interpretation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation On Alpine Linux, upgrade the samba package to 4.23.8-r0 or later via apk; on Red Hat Enterprise Linux 6, 7, and 9 and OpenShift Container Platform 4.0, apply the vendor-released patches from RHSA-2026:22644, RHSA-2026:22963, RHSA-2026:25049, and RHSA-2026:25979 (linked from https://access.redhat.com/security/cve/CVE-2026-4408), and on other distributions install the patched upstream Samba build referenced in Samba Bugzilla 16034. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Inventory all Samba deployments and document current software versions. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

CVE-2019-11043 CRITICAL POC
9.8 Oct 28

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it

CVE-2014-6271 CRITICAL POC
9.8 Sep 24

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

CVE-2021-40438 CRITICAL POC
9.0 Sep 16

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.4.4

CVE-2014-7169 CRITICAL POC
9.8 Sep 25

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

CVE-2023-44487 HIGH POC
7.5 Oct 10

Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour

CVE-2016-5195 HIGH POC
7.0 Nov 10

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

CVE-2023-4911 HIGH POC
7.8 Oct 03

Local privilege escalation in the GNU C Library (glibc) dynamic loader ld.so allows unprivileged local users on affected

CVE-2017-1000253 HIGH POC
7.8 Oct 05

Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb7

CVE-2017-5645 CRITICAL POC
9.8 Apr 17

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events

CVE-2015-0240 CRITICAL POC
10.0 Feb 24

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1

CVE-2016-6662 CRITICAL POC
9.8 Sep 20

Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.2

CVE-2025-32463 CRITICAL POC
9.3 Jun 30

Sudo before 1.9.17p1 contains a local root escalation vulnerability (CVE-2025-32463, CVSS 9.3) through the --chroot opti

Share

CVE-2026-4408 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy