samba4 vulnerabilities
CVEs whose affected-version data names the samba4 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-109411High· 8.1Samba: access control bypass via vfs_ceph_rgw case-insensitive open
An access control bypass flaw was identified in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs_…
▾ TwilightSamba · sambaEPSS 0.65%via CVEORG
CVE-2020-25720High· 7.5Samba: check attribute access rights for ldap adds of computers
A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-sensitive attributes, even after the obj…
▾ TwilightRed Hat · sambaEPSS 0.49%via CVEORG