VDB

CVE-2026-4480

CVE-2026-4480 PUBLISHED CVSS 9 CRITICAL

Reported by redhat · Published May 26, 2026

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.

Risk Scores

CVSS 3.1
9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red HatRed Hat Enterprise Linux 100:4.23.5-109.el10_2
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support0:4.21.3-114.el10_0.1
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support0:4.10.16-26.el7_9.1
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support0:4.10.16-26.el7_9.1
Red HatRed Hat Enterprise Linux 80:4.19.4-16.el8_10
Red HatRed Hat Enterprise Linux 80:4.19.4-16.el8_10
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support0:4.13.3-12.el8_4.1
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On0:4.13.3-12.el8_4.1
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support0:4.15.5-16.el8_6.1
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On0:4.15.5-16.el8_6.1
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service0:4.17.5-7.el8_8.1
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions0:4.17.5-7.el8_8.1
Red HatRed Hat Enterprise Linux 90:4.23.5-10.el9_8
Red HatRed Hat Enterprise Linux 90:4.23.5-10.el9_8
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0:4.17.5-105.el9_2.5
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions0:4.19.4-105.el9_4.4
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support0:4.21.3-14.el9_6.1
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat Enterprise Linux 6
Red HatRed Hat OpenShift Container Platform 4

…and 57 more

Exploit Intelligence

…and 79 more exploits

Timeline

  • May 26, 2026 CVE Published
  • May 27, 2026 EPSS Score
  • May 28, 2026 EPSS Score
  • May 28, 2026 Security Advisory
  • May 29, 2026 EPSS Score
  • May 30, 2026 EPSS Score
  • May 31, 2026 EPSS Score
  • Jun 1, 2026 EPSS Score
  • Jun 3, 2026 Distribution Patch
  • Jun 3, 2026 Security Advisory
  • Jun 4, 2026 Distribution Patch
  • Jun 4, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›