Orta CVSS 6.5

CVE-2026-2340: Samba: güvenlik açığı

Yayın: 27 Mayıs 2026 17:16 · Güncelleme: 6 Kasım 2026 21:45

Açıklama (NVD)

A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.

Özet bilgiler

Ürün: Samba Samba
CVSS v3.1: 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS: %0,94 (yüzdelik 61)
CWE: CWE-280
Yama: Geçici çözüm

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
samba-samba	4.20.0	—	4.22.10
samba-samba	4.23.0	—	4.23.8
samba-samba	4.24.0	—	4.24.3
redhat-openshift-container-platform	4.12	—	4.12.97
redhat-openshift-container-platform	4.13	—	4.13.71
redhat-openshift-container-platform	4.14	—	4.14.72
redhat-openshift-container-platform	4.15	—	4.15.68
redhat-openshift-container-platform	4.16	—	4.16.69
redhat-openshift-container-platform	4.17	—	4.17.57
redhat-openshift-container-platform	4.18	—	4.18.54
redhat-openshift-container-platform	4.19	—	4.19.36
redhat-enterprise-linux	7.0	7.0	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—
redhat-enterprise-linux	10.0	10.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları