Vulnerability Report

CVE-2026-58224

Title: CVE-2026-58224

Arbitrary File Access

Proof Of Concept

No public PoC currently indexed for CVE-2026-58224.

CWE Category CWE-353

Published Date Aug 14, 2026

Modified Date Sep 23, 2026

Exploit Status Not Found

Score 6.5 CVSS v3.1

Exploit Probability (EPSS)

0.33%

Vulnerability Summary

CVE-2026-58224: A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Impacted Vendors

samba 1

Reference Links

https://access.redhat.com/security/cve/CVE-2026-58224 https://bugzilla.redhat.com/show_bug.cgi?id=2502720 https://bugzilla.samba.org/show_bug.cgi?id=16085 https://www.samba.org/samba/security/CVE-2026-58224-advisory.html

CVSS v3.1

Source Entity [email protected]

Severity MEDIUM

6.5

Attack Vector

ADJACENT_NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns