EUVD-2026-58669
GHSA-ph76-744q-p8fh
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessIdentify unpatched Alpine samba instance
-
ExploitTrigger unspecified vulnerability
-
ImpactAchieve unknown impact
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A08:2025 - Software or Data Integrity Failures
ASVS 5.0
V15 - Secure Coding and Architecture Integrity check implementation
|
| Exploitation Conditions | Exploitation conditions cannot be determined - the CVE description contains only a fix version reference with no detail on required configuration, authentication, network exposure, or specific Samba feature. No CVSS vector is available to infer attack vector or privilege requirements. Authentication requirements are not confirmed from available data. Security teams should review the upstream Samba 4.23.10 release notes and the Alpine Linux advisory to identify whether exploitation requires authenticated access, a specific Samba role (file server, AD DC, print server), or particular configuration options. |
| Impact | Risk cannot be meaningfully assessed from the available intelligence. No CVSS vector, CVSS score, CWE, EPSS score, KEV status, or POC data was provided. The vulnerability is not listed in the CISA KEV catalog, and no public exploit has been identified. The sole confirmed signal is an Alpine Linux vendor advisory indicating a fix was shipped in samba 4.23.10-r0. Without knowing the attack vector, required privileges, affected component (smbd, winbind, AD DC, etc.), or potential impact (confidentiality, integrity, availability), assigning a risk tier would be speculative. Security teams should consult the upstream Samba release notes and the Alpine Linux security advisory for authoritative severity data before prioritizing remediation. |
| Exploit ScenarioDerived | An attack scenario cannot be constructed from the available data. The affected component within Samba, required attack vector, and impact are all unknown. No public exploit or proof-of-concept code has been identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Aug 05, 2026
Samba on Alpine Linux was patched in package version 4.23.10-r0, addressing an unspecified vulnerability. The nature of the flaw, affected attack surface, and potential impact are not derivable from the available data - only the fix version and affected platform (Alpine Linux) are confirmed. No CVSS score, CWE classification, or vulnerability description has been published at time of analysis, making risk characterization impossible without additional vendor disclosure.
RemediationAI
Upgrade the samba package on Alpine Linux to version 4.23.10-r0 or later using the standard Alpine package manager: 'apk upgrade samba'. This is the vendor-confirmed fix. No workarounds are documented in the available data. Because the vulnerability type is unknown, specific compensating controls cannot be responsibly recommended beyond standard Samba hardening: restrict SMB port exposure (TCP 139/445) to trusted network segments, enforce authentication on all shares, and disable unused Samba services (e.g., winbind, AD DC) if not required. Consult the Alpine Linux security advisories and the Samba project release notes for any additional mitigations specific to the patched issue.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Samba is the open-source implementation of the SMB/CIFS networking protocol, providing file sharing, printer sharing, and Active Directory domain controller capabilities on Unix-like systems. The affected package is the Alpine Linux distribution's samba build, versioned as 4.23.10-r0 (where '-r0' denotes the Alpine package revision). The root cause class (CWE) is not available in the provided data, and no CPE strings were supplied to further constrain the affected component within the Samba codebase.
Know when Samba gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from Vendor (vendor:alpine) · only source for this CVE.
CVSS VectorVendor: vendor:alpine
Lifecycle Timeline
1DescriptionCVE.org
Alpine Linux: samba fixed in 4.23.10-r0
Threat Intelligence Overview
NVD
CVE.org
EPSS
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Affected Products (CPE)CVE.org
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo
The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement valida
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1
The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x befor
Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.
NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to exec
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry Play
The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to c
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted S
A flaw was found in rsync which could be triggered when rsync compares file checksums. Rated high severity (CVSS 7.5), t
vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with cert
Exploit-DB