Vendor
Samba vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 34 vulnerabilities in Samba: 0 in the last 7 days and 1 in the last 90 days, 5 of them critical and 1 exploited in the wild. The most recent, CVE-2026-109411, was published on 28 October 2026. 1 vulnerability in the last four weeks, up from none in the four before. 2 technologies have a page of their own.
- Last 7 days
- 0
- Last 90 days
- 1
- Critical, all time
- 5
- Exploited in the wild
- 1
About Samba
Samba is an Open Source/Free Software suite that provides seamless file and print services to SMB/CIFS clients.
Samba technologies
- Samba Rsync17
- Samba16
Latest Samba vulnerabilities
- CVE-2026-109411: Samba access control bypass in vfs_ceph_rgwhighCVSS 8.1
- CVE-2026-58224: A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of…mediumCVSS 6.5EPSS 0.3%
- CVE-2026-70463: rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses…highCVSS 8.1EPSS 0.4%
- CVE-2026-70461: rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated…highCVSS 8.2EPSS 0.6%
- CVE-2026-70459: rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows…mediumCVSS 5.3EPSS 0.7%
- CVE-2026-70457: rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is…mediumCVSS 6.5EPSS 0.4%
- CVE-2026-70455: rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system…highCVSS 7.5EPSS 0.6%
- CVE-2026-53803: rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files…highCVSS 7.8EPSS 0.2%
- CVE-2026-53802: rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the…highCVSS 7.1EPSS 0.2%
- CVE-2026-53801: rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that…mediumCVSS 5.9EPSS 0.3%
- CVE-2026-53800: rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows…mediumCVSS 4.7EPSS 0.1%
- CVE-2026-53799: rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply…mediumCVSS 6.3EPSS 0.1%
- CVE-2026-53798: rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that…mediumCVSS 5.3EPSS 0.4%
- CVE-2026-53797: rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows…mediumCVSS 4.7EPSS 0.1%
- CVE-2026-53795: rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the…highCVSS 8.1EPSS 0.4%
- CVE-2026-53791: rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers…criticalCVSS 9.1EPSS 0.5%
- CVE-2026-53789: rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope…mediumCVSS 6.5EPSS 0.4%
- CVE-2026-53786: rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override…mediumCVSS 6.5EPSS 0.4%
- CVE-2026-53784: rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the…highCVSS 7.1EPSS 0.2%
- CVE-2026-58216: Samba KDC out-of-bounds read in kpasswd servicemediumCVSS 5.3
- CVE-2026-58218: Samba internal DNS server denial of service via TKEY cache exhaustionmediumCVSS 5.3
- CVE-2026-15779: Samba pam_winbind denial of service via root directory chownmediumCVSS 6.1
- CVE-2026-12505: Samba cifs-utils privilege escalation in cifs.upcallhighCVSS 7.8EPSS 0.1%
- CVE-2026-3238: Samba WINS server NULL pointer dereference in Active Directory Domain ControllerhighCVSS 7.5
- CVE-2026-4408: Samba command injection in check password scriptcriticalCVSS 9
Most severe Samba vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2017-7494: Samba Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2025-10230: Samba command injection in WINS hook handlingcriticalCVSS 10EPSS 39.0%
- CVE-1999-0182: Samba buffer overflow in password handlingcriticalCVSS 10
- CVE-2026-53791: rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers…criticalCVSS 9.1EPSS 0.5%
- CVE-2026-4408: Samba command injection in check password scriptcriticalCVSS 9
- CVE-2026-4480: Samba remote code execution in printing subsystemhighCVSS 8.5
- CVE-2026-70461: rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated…highCVSS 8.2EPSS 0.6%
- CVE-2026-53795: rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the…highCVSS 8.1EPSS 0.4%
- CVE-2026-70463: rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses…highCVSS 8.1EPSS 0.4%
- CVE-2026-109411: Samba access control bypass in vfs_ceph_rgwhighCVSS 8.1
Vulnerabilities per week
1 vulnerability in the last four weeks, up from none in the four before. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 1 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Samba vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/samba)<a href="https://junglewise.ai/threats/vendors/samba"><img src="https://junglewise.ai/threats/vendors/samba/badge.svg" alt="Samba vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/samba.json, and this page as text at https://junglewise.ai/threats/vendors/samba.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Samba vulnerabilities", https://junglewise.ai/threats/vendors/samba, 13 November 2026.