<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 29 May 2026 14:32:53 +0000</lastBuildDate>
    <item>
      <title>c423e86c-8cda-4c94-b662-9d80c288651c</title>
      <link>https://vulnerability.circl.lu/sighting/c423e86c-8cda-4c94-b662-9d80c288651c/export</link>
      <description>{"uuid": "c423e86c-8cda-4c94-b662-9d80c288651c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfym7jpe2x", "content": "7/9\n\nhttps://www.samba.org/samba/security/CVE-2026-3012.html\n    https://www.samba.org/samba/security/CVE-2026-3238.html\n    https://www.samba.org/samba/security/CVE-2026-4408.html\n    https://www.samba.org/samba/security/CVE-2026-4480.html\n  (* Security fix *)", "creation_timestamp": "2026-05-27T02:01:30.815945Z"}</description>
      <content:encoded>{"uuid": "c423e86c-8cda-4c94-b662-9d80c288651c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfym7jpe2x", "content": "7/9\n\nhttps://www.samba.org/samba/security/CVE-2026-3012.html\n    https://www.samba.org/samba/security/CVE-2026-3238.html\n    https://www.samba.org/samba/security/CVE-2026-4408.html\n    https://www.samba.org/samba/security/CVE-2026-4480.html\n  (* Security fix *)", "creation_timestamp": "2026-05-27T02:01:30.815945Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c423e86c-8cda-4c94-b662-9d80c288651c/export</guid>
      <pubDate>Wed, 27 May 2026 02:01:30 +0000</pubDate>
    </item>
    <item>
      <title>b2809583-c250-4d48-a77d-f76f0677dc23</title>
      <link>https://vulnerability.circl.lu/sighting/b2809583-c250-4d48-a77d-f76f0677dc23/export</link>
      <description>{"uuid": "b2809583-c250-4d48-a77d-f76f0677dc23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://www.acn.gov.it/portale/w/nuove-vulnerabilita-in-samba", "content": "", "creation_timestamp": "2026-05-27T02:24:19.000000Z"}</description>
      <content:encoded>{"uuid": "b2809583-c250-4d48-a77d-f76f0677dc23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://www.acn.gov.it/portale/w/nuove-vulnerabilita-in-samba", "content": "", "creation_timestamp": "2026-05-27T02:24:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b2809583-c250-4d48-a77d-f76f0677dc23/export</guid>
      <pubDate>Wed, 27 May 2026 02:24:19 +0000</pubDate>
    </item>
    <item>
      <title>d6d3e9ce-9785-4370-aa3e-801fc045966c</title>
      <link>https://vulnerability.circl.lu/sighting/d6d3e9ce-9785-4370-aa3e-801fc045966c/export</link>
      <description>{"uuid": "d6d3e9ce-9785-4370-aa3e-801fc045966c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4rm6nz2c", "content": "\ud83d\udd17 CVE : CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480, CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480", "creation_timestamp": "2026-05-27T14:35:22.500167Z"}</description>
      <content:encoded>{"uuid": "d6d3e9ce-9785-4370-aa3e-801fc045966c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4rm6nz2c", "content": "\ud83d\udd17 CVE : CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480, CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480", "creation_timestamp": "2026-05-27T14:35:22.500167Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d6d3e9ce-9785-4370-aa3e-801fc045966c/export</guid>
      <pubDate>Wed, 27 May 2026 14:35:22 +0000</pubDate>
    </item>
    <item>
      <title>fd5aab4d-8d84-47c8-8847-6bc111953846</title>
      <link>https://vulnerability.circl.lu/sighting/fd5aab4d-8d84-47c8-8847-6bc111953846/export</link>
      <description>{"uuid": "fd5aab4d-8d84-47c8-8847-6bc111953846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://t.me/bdufstecru/3200", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 check password script \u043c\u043e\u0434\u0443\u043b\u044f DCE/RPC SAMR server \u043f\u0430\u043a\u0435\u0442\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f Samba \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 %u. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e RPC-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\nBDU:2026-07316\nCVE-2026-4408\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Samba:\nhttps://www.samba.org/samba/security/CVE-2026-4408.html\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-4408\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 %u \u0432 \u0441\u043a\u0440\u0438\u043f\u0442\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f (\u043f\u0440\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0441\u0438\u043c\u0432\u043e\u043b %u \u0432 \u043e\u0434\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u043a\u0430\u0432\u044b\u0447\u043a\u0438);\n- \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u043b\u0443\u0436\u0431\u044b samba-dcerpcd \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u044b (\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 rpc start on demand helpers \u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (yes));\n- \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b SAMBA_CPS_ACCOUNT_NAME.", "creation_timestamp": "2026-05-27T14:39:25.000000Z"}</description>
      <content:encoded>{"uuid": "fd5aab4d-8d84-47c8-8847-6bc111953846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://t.me/bdufstecru/3200", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 check password script \u043c\u043e\u0434\u0443\u043b\u044f DCE/RPC SAMR server \u043f\u0430\u043a\u0435\u0442\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f Samba \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 %u. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e RPC-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\nBDU:2026-07316\nCVE-2026-4408\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Samba:\nhttps://www.samba.org/samba/security/CVE-2026-4408.html\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-4408\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 %u \u0432 \u0441\u043a\u0440\u0438\u043f\u0442\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f (\u043f\u0440\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0441\u0438\u043c\u0432\u043e\u043b %u \u0432 \u043e\u0434\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u043a\u0430\u0432\u044b\u0447\u043a\u0438);\n- \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u043b\u0443\u0436\u0431\u044b samba-dcerpcd \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u044b (\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 rpc start on demand helpers \u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (yes));\n- \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b SAMBA_CPS_ACCOUNT_NAME.", "creation_timestamp": "2026-05-27T14:39:25.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fd5aab4d-8d84-47c8-8847-6bc111953846/export</guid>
      <pubDate>Wed, 27 May 2026 14:39:25 +0000</pubDate>
    </item>
    <item>
      <title>0db1bf2d-4296-4c9a-81b8-0ef84f15bb96</title>
      <link>https://vulnerability.circl.lu/sighting/0db1bf2d-4296-4c9a-81b8-0ef84f15bb96/export</link>
      <description>{"uuid": "0db1bf2d-4296-4c9a-81b8-0ef84f15bb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4408", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmvnuwsyqa2c", "content": "CRITICAL: Samba flaw in Red Hat Enterprise Linux 10 (CVE-2026-4408) enables RCE if \"check password script\" uses %u. Audit configs &amp;amp; remove risky settings. https://radar.offseq.com/threat/cve-2026-4408-improper-neutralization-of-special-e-ffcecb34 #OffSeq #Linux #Samba", "creation_timestamp": "2026-05-28T09:00:31.507884Z"}</description>
      <content:encoded>{"uuid": "0db1bf2d-4296-4c9a-81b8-0ef84f15bb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4408", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmvnuwsyqa2c", "content": "CRITICAL: Samba flaw in Red Hat Enterprise Linux 10 (CVE-2026-4408) enables RCE if \"check password script\" uses %u. Audit configs &amp;amp; remove risky settings. https://radar.offseq.com/threat/cve-2026-4408-improper-neutralization-of-special-e-ffcecb34 #OffSeq #Linux #Samba", "creation_timestamp": "2026-05-28T09:00:31.507884Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0db1bf2d-4296-4c9a-81b8-0ef84f15bb96/export</guid>
      <pubDate>Thu, 28 May 2026 09:00:31 +0000</pubDate>
    </item>
    <item>
      <title>a13a348e-c325-4552-9091-559dd674c69f</title>
      <link>https://vulnerability.circl.lu/sighting/a13a348e-c325-4552-9091-559dd674c69f/export</link>
      <description>{"uuid": "a13a348e-c325-4552-9091-559dd674c69f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4408", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116651381800731106", "content": "\ud83d\udea8 CRITICAL: CVE-2026-4408 in Red Hat Enterprise Linux 10 via Samba misconfig enables remote command execution if \"check password script\" uses %u. Audit your configs now! Details: https://radar.offseq.com/threat/cve-2026-4408-improper-neutralization-of-special-e-ffcecb34 #OffSeq #Linux #Samba #Infosec", "creation_timestamp": "2026-05-28T09:00:45.419864Z"}</description>
      <content:encoded>{"uuid": "a13a348e-c325-4552-9091-559dd674c69f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4408", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116651381800731106", "content": "\ud83d\udea8 CRITICAL: CVE-2026-4408 in Red Hat Enterprise Linux 10 via Samba misconfig enables remote command execution if \"check password script\" uses %u. Audit your configs now! Details: https://radar.offseq.com/threat/cve-2026-4408-improper-neutralization-of-special-e-ffcecb34 #OffSeq #Linux #Samba #Infosec", "creation_timestamp": "2026-05-28T09:00:45.419864Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a13a348e-c325-4552-9091-559dd674c69f/export</guid>
      <pubDate>Thu, 28 May 2026 09:00:45 +0000</pubDate>
    </item>
    <item>
      <title>e3b27b6c-3697-4538-8d21-1785a76d672a</title>
      <link>https://vulnerability.circl.lu/sighting/e3b27b6c-3697-4538-8d21-1785a76d672a/export</link>
      <description>{"uuid": "e3b27b6c-3697-4538-8d21-1785a76d672a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvvgozt4a2n", "content": "CVE-2026-4408 - Samba: remote code execution in samr\nCVE ID : CVE-2026-4408\n \n Published : May 28, 2026, 9:16 a.m. | 50\u00a0minutes ago\n \n Description : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers...", "creation_timestamp": "2026-05-28T11:15:43.201092Z"}</description>
      <content:encoded>{"uuid": "e3b27b6c-3697-4538-8d21-1785a76d672a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvvgozt4a2n", "content": "CVE-2026-4408 - Samba: remote code execution in samr\nCVE ID : CVE-2026-4408\n \n Published : May 28, 2026, 9:16 a.m. | 50\u00a0minutes ago\n \n Description : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers...", "creation_timestamp": "2026-05-28T11:15:43.201092Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e3b27b6c-3697-4538-8d21-1785a76d672a/export</guid>
      <pubDate>Thu, 28 May 2026 11:15:43 +0000</pubDate>
    </item>
    <item>
      <title>ce2d2bfa-030a-4738-9ac8-710b19e00c18</title>
      <link>https://vulnerability.circl.lu/sighting/ce2d2bfa-030a-4738-9ac8-710b19e00c18/export</link>
      <description>{"uuid": "ce2d2bfa-030a-4738-9ac8-710b19e00c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://mastodon.social/ap/users/115755483699003887/statuses/116652797717768742", "content": "\ud83d\udd34 CVE-2026-4408 - Critical (9)\nA flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the \"check password script\" feature. If this script is configured with the %u substitution character, the cli...\n\ud83d\udd17 https://www.thehackerwire.com/vulnerability/CVE-2026-4408/\n#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack", "creation_timestamp": "2026-05-28T15:00:50.107378Z"}</description>
      <content:encoded>{"uuid": "ce2d2bfa-030a-4738-9ac8-710b19e00c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://mastodon.social/ap/users/115755483699003887/statuses/116652797717768742", "content": "\ud83d\udd34 CVE-2026-4408 - Critical (9)\nA flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the \"check password script\" feature. If this script is configured with the %u substitution character, the cli...\n\ud83d\udd17 https://www.thehackerwire.com/vulnerability/CVE-2026-4408/\n#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack", "creation_timestamp": "2026-05-28T15:00:50.107378Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ce2d2bfa-030a-4738-9ac8-710b19e00c18/export</guid>
      <pubDate>Thu, 28 May 2026 15:00:50 +0000</pubDate>
    </item>
    <item>
      <title>75f2a0bb-d7c7-4495-96a4-4550663a0ea6</title>
      <link>https://vulnerability.circl.lu/sighting/75f2a0bb-d7c7-4495-96a4-4550663a0ea6/export</link>
      <description>{"uuid": "75f2a0bb-d7c7-4495-96a4-4550663a0ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwc2ltyl22w", "content": "\ud83d\udd34 CVE-2026-4408 - Critical (9)\n\nA flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4408/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T15:01:36.125199Z"}</description>
      <content:encoded>{"uuid": "75f2a0bb-d7c7-4495-96a4-4550663a0ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwc2ltyl22w", "content": "\ud83d\udd34 CVE-2026-4408 - Critical (9)\n\nA flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4408/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T15:01:36.125199Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/75f2a0bb-d7c7-4495-96a4-4550663a0ea6/export</guid>
      <pubDate>Thu, 28 May 2026 15:01:36 +0000</pubDate>
    </item>
    <item>
      <title>d1d18228-34e0-46fa-b688-09c80e9b21a6</title>
      <link>https://vulnerability.circl.lu/sighting/d1d18228-34e0-46fa-b688-09c80e9b21a6/export</link>
      <description>{"uuid": "d1d18228-34e0-46fa-b688-09c80e9b21a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116656022189111580", "content": "Attention, elevated activities detected targeting Samba (CVE-2026-4408) https://vuldb.com/vuln/366748/cti", "creation_timestamp": "2026-05-29T04:40:35.976247Z"}</description>
      <content:encoded>{"uuid": "d1d18228-34e0-46fa-b688-09c80e9b21a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4408", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116656022189111580", "content": "Attention, elevated activities detected targeting Samba (CVE-2026-4408) https://vuldb.com/vuln/366748/cti", "creation_timestamp": "2026-05-29T04:40:35.976247Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d1d18228-34e0-46fa-b688-09c80e9b21a6/export</guid>
      <pubDate>Fri, 29 May 2026 04:40:35 +0000</pubDate>
    </item>
  </channel>
</rss>
