A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
CVSS Details
- CVSS 3.1 Base Score: 10
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 10, 2025 | Nov 7, 2025 |
| Debian | — | Upgrade samba | Jan 12, 2026 | Jan 12, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-clientUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-commonUpgrade libwbclientUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba | Dec 12, 2025 | Dec 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade samba-commonUpgrade libsmbclientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-clientUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-common-tools | Dec 12, 2025 | Dec 11, 2025 |
| Samba | — | Upgrade to Samba 4.22.5 or later.Upgrade to Samba 4.21.9 or later.Upgrade to Samba 4.23.2 or later. | Apr 3, 2026 | Nov 7, 2025 |
| Suse | — | Upgrade sambaUpgrade samba-libs-32bitUpgrade libldb-develUpgrade samba-clientUpgrade samba-winbindUpgrade samba-gpupdateUpgrade samba-libs-python3Upgrade libsamba-policy-develUpgrade samba-python3Upgrade libsamba-policy0-python3-32bitUpgrade samba-develUpgrade samba-ldb-ldapUpgrade samba-winbind-libs-32bitUpgrade samba-docUpgrade samba-toolUpgrade samba-winbind-libsUpgrade samba-ad-dc-libs-32bitUpgrade samba-ad-dc-libsUpgrade libsamba-policy-python3-develUpgrade ctdb-pcp-pmdaUpgrade libldb2Upgrade samba-dcerpcUpgrade samba-dsdb-modulesUpgrade samba-client-libs-32bitUpgrade ctdbUpgrade ldb-toolsUpgrade samba-devel-32bitUpgrade python3-ldbUpgrade samba-libs-python3-32bitUpgrade libldb2-32bitUpgrade samba-client-32bitUpgrade samba-cephUpgrade samba-testUpgrade samba-client-libsUpgrade libsamba-policy0-python3Upgrade samba-libs | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Oct 21, 2025 | Oct 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub