Samba Printing Subsystem - Remote Code Execution
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system. References: https://github.com/Vusal777/CVE-2026-4480-exploit-poc https://www.samba.org/samba/security/CVE-2026-4480.html https://nvd.nist.gov/vuln/detail/CVE-2026-4480 Remediation: Upgrade Samba to version 4.22.10, 4.23.8, or 4.24.3 or later, or as a workaround add single quotes directly around %J in the print command smb.conf entry or remove %J completely from the configuration.
9 assets checked · domain, subdomain, ipv4