CVE-2026-4408

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-4408
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-4408.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-4408
Downstream
ALPINE (1)
AZL (1)
CLSA (13)
DEBIAN (1)
ECHO (1)
OESA (4)
openSUSE (3)
RHSA (11)
RLSA (3)
SUSE (11)
UBUNTU (1)
Related
ALSA (3)
openSUSE (3)
SUSE (11)
Published
2026-05-28T07:25:27Z
Modified
2026-10-28T02:30:41Z
Severity
  • 9.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Samba: remote code execution in samr
Details

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-78"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4408.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "0:4.23.5-109.el10_2"
                        },
                        {
                            "fixed":  "0:4.21.3-114.el10_0.1"
                        },
                        {
                            "fixed":  "0:4.10.16-26.el7_9.1"
                        },
                        {
                            "fixed":  "0:4.10.16-26.el7_9.1"
                        },
                        {
                            "fixed":  "0:4.19.4-16.el8_10"
                        },
                        {
                            "fixed":  "0:4.19.4-16.el8_10"
                        },
                        {
                            "fixed":  "0:4.13.3-12.el8_4.1"
                        },
                        {
                            "fixed":  "0:4.13.3-12.el8_4.1"
                        },
                        {
                            "fixed":  "0:4.15.5-16.el8_6.1"
                        },
                        {
                            "fixed":  "0:4.15.5-16.el8_6.1"
                        },
                        {
                            "fixed":  "0:4.17.5-7.el8_8.1"
                        },
                        {
                            "fixed":  "0:4.17.5-7.el8_8.1"
                        },
                        {
                            "fixed":  "0:4.23.5-10.el9_8"
                        },
                        {
                            "fixed":  "0:4.23.5-10.el9_8"
                        },
                        {
                            "fixed":  "0:4.17.5-105.el9_2.5"
                        },
                        {
                            "fixed":  "0:4.19.4-105.el9_4.4"
                        },
                        {
                            "fixed":  "0:4.21.3-14.el9_6.1"
                        },
                        {
                            "fixed":  "412.86.202608241157-0"
                        },
                        {
                            "fixed":  "413.92.202609080414-0"
                        },
                        {
                            "fixed":  "414.92.202608172040-0"
                        },
                        {
                            "fixed":  "415.92.202608180329-0"
                        },
                        {
                            "fixed":  "416.94.202608150307-0"
                        },
                        {
                            "fixed":  "417.94.202608250221-0"
                        },
                        {
                            "fixed":  "418.94.202608142238-0"
                        },
                        {
                            "fixed":  "4.19.9.6.202606241344-0"
                        },
                        {
                            "fixed":  "4.20.9.6.202606241928-0"
                        },
                        {
                            "fixed":  "4.21.9.6.202606241859-0"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/samba-team/samba

Affected ranges

Type
GIT
Repo
https://github.com/samba-team/samba
Events
Introduced
a6fb418be7adccdd583a3b489b58023cfdd392ef
Fixed
1c7d4b5b388ae2647732ed54834d5547a8c1357a
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.1.0"
                },
                {
                    "fixed":  "4.21.0"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-4408.json"