A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sambaUpgrade python3-samba-testUpgrade samba-gpupdateUpgrade samba-test-libsUpgrade samba-commonUpgrade samba-clientUpgrade python3-samba-dcUpgrade samba-winexeUpgrade libldbUpgrade samba-develUpgrade ldb-toolsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libnetapi-develUpgrade samba-common-libsUpgrade samba-pidlUpgrade samba-dc-libsUpgrade ctdbUpgrade samba-toolsUpgrade samba-usersharesUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-vfs-iouringUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade python3-ldbUpgrade samba-testUpgrade libwbclient-develUpgrade python3-samba-develUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade python3-sambaUpgrade samba-ldb-ldap-modulesUpgrade libsmbclient-develUpgrade samba-libsUpgrade libldb-develUpgrade libnetapiUpgrade samba-winbind-krb5-locatorUpgrade samba-dcerpc | Jun 3, 2026 | Jun 2, 2026 |
| Alpine Linux | — | Upgrade samba | May 29, 2026 | May 27, 2026 |
| Amazon_linux_2023 | — | Upgrade samba-dcerpc-debuginfoUpgrade samba-krb5-printingUpgrade samba-develUpgrade samba-usersharesUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade python3-sambaUpgrade samba-winbind-debuginfoUpgrade samba-libsUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbindUpgrade samba-testUpgrade samba-test-debuginfoUpgrade samba-common-toolsUpgrade samba-client-debuginfoUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-libs-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-vfs-iouringUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libnetapiUpgrade python3-samba-dcUpgrade libwbclientUpgrade samba-ldb-ldap-modulesUpgrade sambaUpgrade samba-common-libsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-debugsourceUpgrade samba-ldb-ldap-modules-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade python3-samba-develUpgrade samba-test-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-dcerpcUpgrade samba-dc-libsUpgrade libnetapi-develUpgrade samba-test-libsUpgrade samba-dc-libs-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-pidlUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-client-libs-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-commonUpgrade libwbclient-develUpgrade samba-toolsUpgrade libnetapi-debuginfoUpgrade python3-samba-testUpgrade samba-debuginfoUpgrade samba-common-tools-debuginfo | Jul 8, 2026 | May 27, 2026 |
| Debian | — | Upgrade samba | May 27, 2026 | May 27, 2026 |
| Oracle_linux | — | Upgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade ctdbUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-ldb-ldap-modulesUpgrade samba-vfs-glusterfsUpgrade python3-samba-develUpgrade samba-toolsUpgrade samba-testUpgrade samba-client-libsUpgrade libnetapi-develUpgrade sambaUpgrade libsmbclient-develUpgrade samba-dcerpcUpgrade samba-develUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-commonUpgrade libsmbclientUpgrade samba-clientUpgrade libwbclient-develUpgrade samba-usersharesUpgrade samba-vfs-iouringUpgrade samba-libsUpgrade libnetapiUpgrade samba-winexeUpgrade samba-common-toolsUpgrade python3-samba-dcUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-dc-libsUpgrade python3-samba-test | Jun 5, 2026 | May 27, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | May 27, 2026 |
| Redhat_linux | — | Upgrade samba-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-winbind-clientsUpgrade samba-winbind-modules-debuginfoUpgrade sambaUpgrade samba-client-debuginfoUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-libs-debuginfoUpgrade samba-winbind-modulesUpgrade ctdbUpgrade libsmbclient-develUpgrade samba-winbind-debuginfoUpgrade samba-toolsUpgrade samba-client-libsUpgrade samba-winbind-clients-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-clientUpgrade libnetapiUpgrade ldb-tools-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-krb5-printing-debuginfoUpgrade libwbclient-develUpgrade samba-dc-libs-debuginfoUpgrade samba-dc-libsUpgrade samba-dcerpc-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-libsUpgrade samba-usersharesUpgrade python3-samba-dcUpgrade libldb-debuginfoUpgrade samba-vfs-iouringUpgrade samba-commonUpgrade libldb-develUpgrade samba-develUpgrade samba-dcerpcUpgrade samba-winexeUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade ctdb-debuginfoUpgrade samba-krb5-printingUpgrade samba-test-debuginfoUpgrade libwbclientUpgrade libnetapi-develUpgrade python3-samba-debuginfoUpgrade samba-pidlUpgrade samba-common-tools-debuginfoUpgrade samba-winexe-debuginfoNo solution existsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-test-libsUpgrade python3-samba-develUpgrade libnetapi-debuginfoUpgrade python3-ldb-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-common-libs-debuginfoUpgrade libldbUpgrade python3-sambaUpgrade libwbclient-debuginfoUpgrade ldb-toolsUpgrade samba-testUpgrade python3-samba-dc-debuginfoUpgrade samba-gpupdateUpgrade samba-debugsourceUpgrade python3-ldb | Jun 4, 2026 | May 27, 2026 |
| Rocky_linux | — | Upgrade sambaUpgrade samba-dcerpc-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-libsUpgrade samba-winbind-modules-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade libwbclientUpgrade samba-test-debuginfoUpgrade samba-winexeUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-winbind-clients-debuginfoUpgrade samba-develUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-samba-testUpgrade python3-ldb-debuginfoUpgrade python3-samba-dcUpgrade samba-libs-debuginfoUpgrade samba-winbind-debuginfoUpgrade python3-sambaUpgrade python3-ldbUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade libnetapiUpgrade samba-client-debuginfoUpgrade samba-winbindUpgrade samba-usersharesUpgrade samba-testUpgrade samba-client-libs-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-debugsourceUpgrade libsmbclient-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade libwbclient-develUpgrade ldb-tools-debuginfoUpgrade ctdbUpgrade samba-test-libsUpgrade libnetapi-develUpgrade libsmbclientUpgrade samba-vfs-iouring-debuginfoUpgrade samba-vfs-iouringUpgrade libldbUpgrade ctdb-debuginfoUpgrade samba-winbind-modulesUpgrade libldb-debuginfoUpgrade samba-dcerpcUpgrade samba-dc-libsUpgrade samba-test-libs-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade libwbclient-debuginfoUpgrade python3-samba-develUpgrade ldb-toolsUpgrade libnetapi-debuginfoUpgrade samba-debuginfoUpgrade samba-common-libsUpgrade samba-common-tools-debuginfoUpgrade libldb-develUpgrade samba-winexe-debuginfoUpgrade samba-toolsUpgrade samba-common-libs-debuginfo | Jun 17, 2026 | Jun 13, 2026 |
| Suse | — | Upgrade samba-dsdb-modulesUpgrade samba-client-libs-32bitUpgrade samba-toolUpgrade samba-libs-python3-32bitUpgrade libldb2-32bitUpgrade samba-libsUpgrade samba-gpupdateUpgrade samba-testUpgrade samba-devel-32bitUpgrade ldb-toolsUpgrade libsamba-policy-python3-develUpgrade samba-clientUpgrade python3-ldbUpgrade libsamba-policy0-python3Upgrade samba-client-32bitUpgrade samba-winbind-libs-langUpgrade libldb2Upgrade samba-client-langUpgrade samba-client-libsUpgrade ctdb-pcp-pmdaUpgrade samba-python3Upgrade sambaUpgrade libsamba-policy0-python3-32bitUpgrade samba-winbind-libsUpgrade libsamba-policy-develUpgrade samba-winbind-libs-32bitUpgrade samba-ad-dc-libsUpgrade samba-ad-dcUpgrade samba-libs-python3Upgrade samba-ldb-ldapUpgrade libldb-develUpgrade samba-dcerpcUpgrade samba-winbindUpgrade samba-libs-32bitUpgrade samba-develUpgrade samba-docUpgrade samba-cephUpgrade ctdb | May 27, 2026 | May 27, 2026 |
| Ubuntu | — | Upgrade samba | May 27, 2026 | May 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub