S
Vendor security profile
samba
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs46
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
46toplam CVE
Uncertain46 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
46Unknown
Latest vulnerabilities
8.1
CVE-2026-109411Samba: access control bypass via vfs_ceph_rgw case-insensitive open
Partial patchEPSS %1
6.5
CVE-2026-58224Samba: ctdb fails to do integrity checking of received packets
Patch status unknownEPSS %0
8.7
CVE-2026-70455rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion
Patch verifiedEPSS %1
8.3
CVE-2026-70457rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()
Patch verifiedEPSS %0
6.9
CVE-2026-70459rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry
Patch verifiedEPSS %1
8.8
CVE-2026-70461rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry
Patch verifiedEPSS %1
8.6
CVE-2026-70463rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing
Patch status unknown Public Exploits:1EPSS %0
8.2
CVE-2026-53801rsync < 3.5.0 Symlink Race Condition Directory Traversal
Patch status unknownEPSS %0
5.7
CVE-2026-53800rsync < 3.5.0 Symlink Race Condition via --remove-source-files
Patch status unknownEPSS %0
7.2
CVE-2026-53799rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application
Patch status unknownEPSS %0