CVE-2026-4480

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-4480
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-4480.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-4480
Downstream
ALPINE (1)
AZL (1)
CLSA (9)
DEBIAN (1)
ECHO (1)
OESA (4)
openSUSE (3)
RHSA (11)
RLSA (3)
SUSE (11)
UBUNTU (1)
Related
ALSA (3)
openSUSE (3)
SUSE (11)
Published
2026-05-26T13:56:32Z
Modified
2026-10-24T10:30:28Z
Severity
  • 9.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Samba: samba: remote code execution in printing subsystem via unescaped job description
Details

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-78"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4480.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "0:4.23.5-109.el10_2"
                        },
                        {
                            "fixed":  "0:4.21.3-114.el10_0.1"
                        },
                        {
                            "fixed":  "0:4.10.16-26.el7_9.1"
                        },
                        {
                            "fixed":  "0:4.10.16-26.el7_9.1"
                        },
                        {
                            "fixed":  "0:4.19.4-16.el8_10"
                        },
                        {
                            "fixed":  "0:4.19.4-16.el8_10"
                        },
                        {
                            "fixed":  "0:4.13.3-12.el8_4.1"
                        },
                        {
                            "fixed":  "0:4.13.3-12.el8_4.1"
                        },
                        {
                            "fixed":  "0:4.15.5-16.el8_6.1"
                        },
                        {
                            "fixed":  "0:4.15.5-16.el8_6.1"
                        },
                        {
                            "fixed":  "0:4.17.5-7.el8_8.1"
                        },
                        {
                            "fixed":  "0:4.17.5-7.el8_8.1"
                        },
                        {
                            "fixed":  "0:4.23.5-10.el9_8"
                        },
                        {
                            "fixed":  "0:4.23.5-10.el9_8"
                        },
                        {
                            "fixed":  "0:4.17.5-105.el9_2.5"
                        },
                        {
                            "fixed":  "0:4.19.4-105.el9_4.4"
                        },
                        {
                            "fixed":  "0:4.21.3-14.el9_6.1"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/samba-team/samba

Affected ranges

Type
GIT
Repo
https://github.com/samba-team/samba
Events
Introduced
a6fb418be7adccdd583a3b489b58023cfdd392ef
Fixed
c2633a95a88f5f777fc94a25a07f1faa47420fc5
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.1.0"
                },
                {
                    "fixed":  "4.2.1"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-4480.json"