A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
CVSS Details
- CVSS 3.1 Base Score: 10
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 10, 2025 | Nov 7, 2025 |
| Debian | — | Upgrade samba | Jan 12, 2026 | Jan 12, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-common-toolsUpgrade libwbclientUpgrade samba-clientUpgrade samba-commonUpgrade samba-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-winbind-clients | Dec 12, 2025 | Dec 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade samba-winbindUpgrade samba-client-libsUpgrade sambaUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade libwbclientUpgrade samba-common | Dec 12, 2025 | Dec 11, 2025 |
| Samba | — | Upgrade to Samba 4.22.5 or later.Upgrade to Samba 4.21.9 or later.Upgrade to Samba 4.23.2 or later. | Apr 3, 2026 | Nov 7, 2025 |
| Suse | — | Upgrade libsamba-policy0-python3Upgrade samba-client-libsUpgrade samba-client-libs-32bitUpgrade libldb2-32bitUpgrade samba-client-32bitUpgrade samba-libsUpgrade samba-cephUpgrade samba-testUpgrade ctdbUpgrade samba-dsdb-modulesUpgrade samba-libs-python3-32bitUpgrade ldb-toolsUpgrade samba-devel-32bitUpgrade python3-ldbUpgrade libldb2Upgrade samba-winbind-libs-32bitUpgrade libsamba-policy-develUpgrade samba-libs-python3Upgrade samba-clientUpgrade samba-ldb-ldapUpgrade samba-develUpgrade samba-gpupdateUpgrade samba-winbindUpgrade libldb-develUpgrade samba-python3Upgrade samba-libs-32bitUpgrade sambaUpgrade samba-toolUpgrade samba-docUpgrade samba-ad-dc-libsUpgrade libsamba-policy0-python3-32bitUpgrade samba-ad-dc-libs-32bitUpgrade libsamba-policy-python3-develUpgrade samba-dcerpcUpgrade ctdb-pcp-pmdaUpgrade samba-winbind-libs | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Oct 21, 2025 | Oct 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub