CVE-2026-4408

EUVD-2026-32741

28.05.2026, 09:16

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

OS Command Injection

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9 CRITICAL	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 83.48%

Affected Products (NVD)

Vendor	Product	Version
redhat	openshift_container_platform	4.0
samba	samba	4.1.0 ≤ 𝑥 < 4.21.0
redhat	enterprise_linux	6.0
redhat	enterprise_linux	7.0
redhat	enterprise_linux	9.0

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Red Hat	Red Hat Enterprise Linux 10	0:4.23.5-109.el10_2 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	0:4.21.3-114.el10_0.1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	0:4.10.16-26.el7_9.1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8	0:4.19.4-16.el8_10 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	0:4.13.3-12.el8_4.1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	0:4.13.3-12.el8_4.1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	0:4.15.5-16.el8_6.1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	0:4.15.5-16.el8_6.1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	0:4.17.5-7.el8_8.1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	0:4.17.5-7.el8_8.1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	0:4.23.5-10.el9_8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	0:4.17.5-105.el9_2.5 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	0:4.19.4-105.el9_4.4 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	0:4.21.3-14.el9_6.1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.19	4.19.9.6.202606241344-0 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.20	4.20.9.6.202606241928-0 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenShift Container Platform 4.21	4.21.9.6.202606241859-0 ≤ 𝑥 < *	ADP

Debian Releases

Debian Product

Codename

samba

bookworm	2:4.17.12+dfsg-0+deb12u4 fixed
bookworm (security)	2:4.17.12+dfsg-0+deb12u4 fixed
bullseye	vulnerable
bullseye (security)	2:4.13.13+dfsg-1~deb11u8 fixed
forky	2:4.24.5+dfsg-1 fixed
sid	2:4.24.6+dfsg-1 fixed
trixie	2:4.22.10+dfsg-0+deb13u1 fixed
trixie (security)	2:4.22.10+dfsg-0+deb13u2 fixed

Ubuntu Releases

Ubuntu Product

Codename

samba

bionic	ignored
focal	Fixed 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2 released
jammy	Fixed 2:4.15.13+dfsg-0ubuntu1.12 released
noble	Fixed 2:4.19.5+dfsg-4ubuntu9.6 released
questing	Fixed 2:4.22.3+dfsg-4ubuntu2.4 released
resolute	Fixed 2:4.23.6+dfsg-1ubuntu2.1 released
trusty	ignored
xenial	ignored

Red Hat Enterprise Linux Releases

Red Hat Product

Release

ctdb

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

ctdb-tests

RHEL 8.4 AUS

0:4.13.3-12.el8_4.1

fixed

ldb-tools

RHEL 9

0:4.23.5-10.el9_8

fixed

libldb

RHEL 9

0:4.23.5-10.el9_8

fixed

libldb-devel

RHEL 9

0:4.23.5-10.el9_8

fixed

libnetapi

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libnetapi-devel

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libsmbclient

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libsmbclient-devel

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libwbclient

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libwbclient-devel

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

python3-ldb

RHEL 9

0:4.23.5-10.el9_8

fixed

python3-samba

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

python3-samba-dc

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

python3-samba-devel

RHEL 8

0:4.19.4-16.el8_10

fixed

python3-samba-test

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-client

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-client-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-common

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-common-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-common-tools

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-dc-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-dcerpc

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-devel

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-gpupdate

RHEL 9

0:4.23.5-10.el9_8

fixed

samba-krb5-printing

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-ldb-ldap-modules

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-pidl

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-test

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-test-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-tools

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-usershares

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-vfs-iouring

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winbind

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winbind-clients

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winbind-krb5-locator

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winbind-modules

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winexe

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.4 AUS	0:4.13.3-12.el8_4.1 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

Amazon Linux Releases

Amazon Package

Release

ctdb

Amazon Linux 2

0:4.10.16-24.amzn2.0.7

fixed

ctdb-tests

Amazon Linux 2

0:4.10.16-24.amzn2.0.7

fixed

libnetapi

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

libnetapi-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

libnetapi-devel

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

libsmbclient

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

libsmbclient-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

libsmbclient-devel

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

libwbclient

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

libwbclient-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

libwbclient-devel

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

python3-samba

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

python3-samba-dc

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

python3-samba-dc-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

python3-samba-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

python3-samba-devel

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

python3-samba-test

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-client

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-client-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-client-libs

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-client-libs-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-common

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-common-libs

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-common-libs-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-common-tools

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-common-tools-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-dc

Amazon Linux 2

0:4.10.16-24.amzn2.0.7

fixed

samba-dc-libs

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-dc-libs-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-dcerpc

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-dcerpc-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-debuginfo

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-debugsource

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-devel

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-krb5-printing

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-krb5-printing-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-ldb-ldap-modules

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-ldb-ldap-modules-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-libs

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-libs-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-pidl

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-python

Amazon Linux 2

0:4.10.16-24.amzn2.0.7

fixed

samba-python-test

Amazon Linux 2

0:4.10.16-24.amzn2.0.7

fixed

samba-test

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-test-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-test-libs

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-test-libs-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-tools

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-usershares

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-vfs-glusterfs

Amazon Linux 2

0:4.10.16-24.amzn2.0.7

fixed

samba-vfs-iouring

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-vfs-iouring-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-winbind

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-winbind-clients

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-winbind-clients-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-winbind-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-winbind-krb5-locator

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-winbind-krb5-locator-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

samba-winbind-modules

Amazon Linux 2	0:4.10.16-24.amzn2.0.7 fixed
Amazon Linux 2023	2:4.17.12-1.amzn2023.0.4 fixed

samba-winbind-modules-debuginfo

Amazon Linux 2023

2:4.17.12-1.amzn2023.0.4

fixed

Common Weakness Enumeration

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References

https://access.redhat.com/errata/RHSA-2026:22644

https://access.redhat.com/errata/RHSA-2026:22963

https://access.redhat.com/errata/RHSA-2026:25049

https://access.redhat.com/errata/RHSA-2026:25979

https://access.redhat.com/errata/RHSA-2026:28053

https://access.redhat.com/errata/RHSA-2026:28054

https://access.redhat.com/errata/RHSA-2026:28055

https://access.redhat.com/errata/RHSA-2026:28056

https://access.redhat.com/errata/RHSA-2026:28057

https://access.redhat.com/errata/RHSA-2026:28058

https://access.redhat.com/errata/RHSA-2026:28132

https://access.redhat.com/errata/RHSA-2026:29799

https://access.redhat.com/errata/RHSA-2026:29833

https://access.redhat.com/errata/RHSA-2026:29863

https://access.redhat.com/security/cve/CVE-2026-4408

https://bugzilla.redhat.com/show_bug.cgi?id=2479762

https://bugzilla.samba.org/show_bug.cgi?id=16034

https://access.redhat.com/errata/RHSA-2026:22644

https://access.redhat.com/errata/RHSA-2026:22963

https://access.redhat.com/errata/RHSA-2026:25049

https://access.redhat.com/errata/RHSA-2026:25979

https://access.redhat.com/errata/RHSA-2026:28053

https://access.redhat.com/errata/RHSA-2026:28054

https://access.redhat.com/errata/RHSA-2026:28055

https://access.redhat.com/errata/RHSA-2026:28056

https://access.redhat.com/errata/RHSA-2026:28057

https://access.redhat.com/errata/RHSA-2026:28058

https://access.redhat.com/errata/RHSA-2026:28132

https://access.redhat.com/errata/RHSA-2026:29799

https://access.redhat.com/errata/RHSA-2026:29833

https://access.redhat.com/errata/RHSA-2026:29863

https://access.redhat.com/security/cve/CVE-2026-4408

https://bugzilla.redhat.com/show_bug.cgi?id=2479762

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4408.json