https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T00:57:18.514105+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-0620 CVE-2025-0620 — Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session 2026-09-29T00:57:18.583720+00:00

Affected: samba, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4

A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.

 https://vulnerability.circl.lu/vuln/usn-7564-1 USN-7564-1 — samba vulnerability 2026-09-29T00:57:18.583863+00:00

Affected: Ubuntu:25.04: samba

It was discovered that Samba incorrectly handled certain group membership changes when using Kerberos authentication. A remote user could possibly use this issue to continue to access resources after being removed by an administrator.