Known Vulnerabilities for Samba Server by Samba
Listed below are 1 of the newest known vulnerabilities associated with "Samba Server" by "Samba".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109411 json | An access control bypass flaw was identified in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user ... | Not Provided | 2026-10-28 | 2026-11-04 |
| CVE-2026-98684 json | In the Linux kernel, the following vulnerability has been resolved: smb: client: flush and commit data before querying alloc... | Not Provided | 2026-10-18 | 2026-11-10 |
| CVE-2026-3238 json | A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol ... | Not Provided | 2026-06-08 | 2026-09-01 |
| CVE-2023-42670 json | A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, c... | Not Provided | 2023-11-03 | 2026-11-07 |
| CVE-2023-42669 json | A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stac... | Not Provided | 2023-11-06 | 2026-11-07 |
| CVE-2023-34968 json | A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolu... | Not Provided | 2023-07-20 | 2026-11-06 |
| CVE-2023-3347 json | A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin confi... | Not Provided | 2023-07-20 | 2026-11-07 |
| CVE-2022-2127 json | An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When pe... | Not Provided | 2023-07-20 | 2026-11-05 |
| CVE-2007-2407 json | Not Provided | 2007-08-03 | 2026-04-23 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Samba | Samba Server | - |