CVE-2026-4480 Scanner
CVE-2026-4480 Scanner - Remote Code Execution vulnerability in Samba
Used 5 times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-4480
9.0
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
red hat enterprise linux 10red hat enterprise linux 10.0 extended update supportred hat enterprise linux 7 extended lifecycle supportred hat enterprise linux 8red hat enterprise linux 8.4 advanced mission critical update supportred hat enterprise linux 8.4 extended update support long-life add-on
Updated Nov 6, 2026View on NVD →
S4E scanner
CVE history: red hat enterprise linux 10
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →