10

CVE-2025-10230: samba OS Command Injection

CVSS: 10.0v3.1CriticalDeferred
AliasesALPINE-CVE-2025-10230UBUNTU-CVE-2025-10230DEBIAN-CVE-2025-10230
Published 07-11-2025Last modified 31-08-2026
Open JSON

Vulnerability summary

CVE-2025-10230 is a critical (CVSS 10.0) OS Command Injection vulnerability in samba. EPSS estimates a 39.77% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
10.0/10
010
Critical · v3.1 (CVE.org)
EPSS score
39.77%
0%100%
High · +0.12 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 13 · Related 12
MGASA-2026-0142OPENSUSE-SU-2025:15649-1OPENSUSE-SU-2025:20048-1SUSE-SU-2025:03603-1SUSE-SU-2025:03604-1SUSE-SU-2025:03612-1

Timeline

  1. 07-11-2025
    PublishedVulnerability first disclosed.
  2. 31-08-2026
    Last modifiedVulnerability information updated.

Description

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

39.77%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

+0.12 pp

From 39.65% on 19-09-2026

19-09-202619-10-2026
EPSS score
39.77%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Alpine1 product
  • samba< 4.21.9-r0
Debian1 product
  • samba< 2:4.17.12+dfsg-0+deb12u3 | < 2:4.22.6+dfsg-0+deb13u1 | < 2:4.23.2+dfsg-1
Ubuntu1 product
  • samba< 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15 | < 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4 | < 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3 | < 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1 | < 2:4.15.13+dfsg-0ubuntu1.10 | < 2:4.19.5+dfsg-4ubuntu9.4 | < 2:4.22.3+dfsg-4ubuntu2.1

3 vendors · 3 products

References

11 links
Show all 11 references