FlawAtlas
Search the atlas
CVE-2026-4408 Not scored

Samba: remote code execution in samr

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Exploit probability 2.5%
Published May 28, 2026
Required by Not available
Last source change July 16, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

03 / CONNECTIONS

Connected vulnerabilities

related OPENSUSE-SU-2026:10884-1
related SUSE-SU-2026:2071-1
related SUSE-SU-2026:2072-1
related SUSE-SU-2026:2073-1
related SUSE-SU-2026:2074-1
related SUSE-SU-2026:2076-1
related SUSE-SU-2026:2108-1

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2026-4408

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

View original source

05 / REFERENCES

Further evidence