A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
CVSS Details
- CVSS 3.1 Base Score: 10
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 10, 2025 | Nov 7, 2025 |
| Debian | — | Upgrade samba | Jan 12, 2026 | Jan 12, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade sambaUpgrade libsmbclientUpgrade samba-winbindUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-libsUpgrade samba-common | Dec 12, 2025 | Dec 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade samba-commonUpgrade sambaUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade libsmbclientUpgrade samba-libsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-tools | Dec 12, 2025 | Dec 11, 2025 |
| Samba | — | Upgrade to Samba 4.22.5 or later.Upgrade to Samba 4.21.9 or later.Upgrade to Samba 4.23.2 or later. | Apr 3, 2026 | Nov 7, 2025 |
| Suse | — | Upgrade samba-libsUpgrade ctdbUpgrade python3-ldbUpgrade samba-devel-32bitUpgrade samba-client-32bitUpgrade samba-testUpgrade samba-cephUpgrade samba-client-libsUpgrade samba-libs-python3-32bitUpgrade samba-client-libs-32bitUpgrade libldb2-32bitUpgrade libsamba-policy0-python3Upgrade samba-dsdb-modulesUpgrade ldb-toolsUpgrade samba-dcerpcUpgrade samba-winbind-libsUpgrade libsamba-policy-python3-develUpgrade samba-libs-python3Upgrade libsamba-policy-develUpgrade samba-ad-dc-libsUpgrade sambaUpgrade samba-toolUpgrade samba-docUpgrade samba-clientUpgrade samba-gpupdateUpgrade samba-winbindUpgrade samba-develUpgrade libsamba-policy0-python3-32bitUpgrade samba-ldb-ldapUpgrade samba-ad-dc-libs-32bitUpgrade samba-python3Upgrade samba-libs-32bitUpgrade libldb-develUpgrade libldb2Upgrade samba-winbind-libs-32bitUpgrade ctdb-pcp-pmda | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Oct 21, 2025 | Oct 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub