LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Samba

10 CVEs published in the last four months. Exploited flaws first.

Critical1
High9
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-537919.1criticalrsyncrsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attacke69d ago
CVE-2026-704618.2highrsyncrsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated atta69d ago
CVE-2026-436188.1highrsyncRsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32155d ago
CVE-2026-537958.1highrsyncrsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the69d ago
CVE-2026-704638.1highrsyncrsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing.69d ago
CVE-2026-538037.8highrsyncrsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary f69d ago
CVE-2026-704557.5highrsyncrsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system 69d ago
CVE-2026-538027.1highrsyncrsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to69d ago
CVE-2026-537847.1highrsyncrsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the 69d ago
CVE-2026-295187highrsyncRsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling154d ago

Filter the full tracker by Samba →