Skip to content

CVE record · 1 source

CVE-2026-109411

CVSS 8.1

An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function.

Vendor: Samba, Red Hat
Product: Samba, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7
CVSS v3.1: 8.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS: 0.006 (p51)
Weakness: CWE-178
Exposure class: File transfer, Operating system, Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

24

CVE NVD 3d ago

An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function.

An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental…

CVSS 8.1 CVE-2026-109411 Samba Red Hat