A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
CVSS Details
- CVSS 3.1 Base Score: 10
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 10, 2025 | Nov 7, 2025 |
| Debian | — | Upgrade samba | Jan 12, 2026 | Jan 12, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba-clientUpgrade samba-common | Dec 12, 2025 | Dec 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade sambaUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade libwbclientUpgrade samba-libsUpgrade samba-winbindUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-common | Dec 12, 2025 | Dec 11, 2025 |
| Samba | — | Upgrade to Samba 4.23.2 or later.Upgrade to Samba 4.22.5 or later.Upgrade to Samba 4.21.9 or later. | Apr 3, 2026 | Nov 7, 2025 |
| Suse | — | Upgrade samba-libs-32bitUpgrade samba-python3Upgrade libldb-develUpgrade samba-winbind-libs-32bitUpgrade samba-winbind-libsUpgrade ctdb-pcp-pmdaUpgrade samba-dcerpcUpgrade libldb2Upgrade samba-ad-dc-libs-32bitUpgrade libsamba-policy0-python3-32bitUpgrade sambaUpgrade samba-develUpgrade samba-ldb-ldapUpgrade samba-clientUpgrade libsamba-policy-develUpgrade samba-winbindUpgrade libsamba-policy-python3-develUpgrade samba-gpupdateUpgrade samba-ad-dc-libsUpgrade samba-libs-python3Upgrade samba-docUpgrade samba-toolUpgrade samba-client-libs-32bitUpgrade samba-libs-python3-32bitUpgrade samba-cephUpgrade libldb2-32bitUpgrade samba-client-32bitUpgrade samba-dsdb-modulesUpgrade ctdbUpgrade samba-libsUpgrade python3-ldbUpgrade samba-devel-32bitUpgrade ldb-toolsUpgrade samba-testUpgrade samba-client-libsUpgrade libsamba-policy0-python3 | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Oct 21, 2025 | Oct 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub