CVE Watchtower


← Back to CVE List

CVE-2026-4480NVD

Vulnerability Summary

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J"
substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.
Severity Level
CRITICAL(9.0)
Published Date
May 26, 2026
Last Modified
Jul 24, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
13.93%Probability
Root Weakness (CWE)
The software constructs all or part of an OS command using externally-influenced input, but does not properly neutralize special elements.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredNone
User InteractionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh