Samba patches multiple vulnerabilities
ANSSI advises multiple Samba vulnerabilities allow remote denial of service, data confidentiality breach, and security policy bypass.
ANSSI (CERT-FR) has published an advisory covering multiple vulnerabilities in Samba, the open-source implementation of the SMB/CIFS networking protocol widely used for file and print services and interoperability with Windows environments. The flaws affect Samba versions 4.23.x prior to 4.23.9, 4.24.x prior to 4.24.4, and versions prior to 4.22.10.
The vulnerabilities, tracked under CVE-2026-58216, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58224, CVE-2026-6949, and CVE-2025-58218, could allow an attacker to trigger a remote denial of service, compromise data confidentiality, or bypass security policy enforcement. No active exploitation has been reported. Administrators are advised to apply the patches referenced in the official Samba security bulletins as soon as possible.
Mentioned in this report
Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0939
This is the public brief
Subscribers see the full picture: extracted IOCs, ready-to-deploy detections (Sigma, Splunk, KQL, Elastic, YARA, Suricata), the entity graph, TAXII 2.1 feed and real-time alerts matched to your sectors.
Start free