Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-4480

Samba: samba: remote code execution in printing subsystem via unescaped job description

Published
Last modified
published
Not listed in CISA KEV
8 proofs of concept on GitHub, 1 Nuclei template
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.

Timeline

  1. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  2. CVE published
  3. Record last updated
  4. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba

    Version range not reported

  • samba4

    Version range not reported

  • openshift/ose-rhel-coreos-8

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

References 23

access.redhat.com

bugzilla.redhat.com

bugzilla.samba.org

GitHub · projectdiscovery/nuclei-templates

GitHub · 0xBlackash/CVE-2026-4480

GitHub · AlanNewberry/CVE-2026-4480-samba-print-command-injection-rce

GitHub · ClearLotus-git/CVE-2026-4480-PoC

GitHub · TheCyberGeek/CVE-2026-4480-PoC

GitHub · Vusal777/CVE-2026-4480-exploit-poc

GitHub · robinxiang/CVE-2026-4480

GitHub · saitoken241/CVE-2026-4480-POC

GitHub · timgad794/Abducted-HTB-Writeup