{"schemaVersion":3,"id":"CVE-2026-12505","aliases":["MGASA-2026-0291","SUSE-SU-2026:22888-1","SUSE-SU-2026:2699-1","SUSE-SU-2026:2700-1","RHSA-2026:32990","RHSA-2026:39575","RHSA-2026:39576","UBUNTU-CVE-2026-12505","USN-8496-3","DEBIAN-CVE-2026-12505"],"status":"published","duplicateOf":null,"title":null,"description":"A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker's controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.","dates":{"published":"2026-06-18T03:34:22.719Z","modified":"2026-10-14T16:38:10.433Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00157,"percentile":0.04394,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00157},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00157,"percentile":0.04394}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00157,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00157,"percentile":0.04394}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-250","name":"Execution with Unnecessary Privileges","description":"The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/250.html"}],"affected":[{"vendor":"debian","product":"cifs-utils","name":"cifs-utils","label":"cifs-utils","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/cifs-utils","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2:7.4-1+deb13u1","noFixRecorded":false,"fixedIn":null},{"text":"< 2:7.8-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2:7.4-1+deb13u1 | < 2:7.8-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"cifs-utils","name":"cifs-utils","label":"cifs-utils","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/cifs-utils","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2:6.14-1ubuntu0.6","noFixRecorded":false,"fixedIn":null},{"text":"< 2:7.0-2ubuntu0.5","noFixRecorded":false,"fixedIn":null},{"text":"< 2:7.4-1ubuntu0.26.04.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2:6.14-1ubuntu0.6 | < 2:7.0-2ubuntu0.5 | < 2:7.4-1ubuntu0.26.04.3","eol":null,"hubHref":null},{"vendor":"mageia","product":"cifs-utils","name":"cifs-utils","label":"cifs-utils","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/cifs-utils","purlType":"rpm","versions":[{"text":"< 7.5-1.1.mga10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5-1.1.mga10","eol":null,"hubHref":null},{"vendor":"mageia","product":"cifs-utils","name":"cifs-utils","label":"cifs-utils","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/cifs-utils","purlType":"rpm","versions":[{"text":"< 7.0-1.2.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0-1.2.mga9","eol":null,"hubHref":null},{"vendor":"redhat","product":"cifs-utils","name":"cifs-utils","label":"cifs-utils","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cifs-utils","purlType":"rpm","versions":[{"text":"< 0:7.6-1.el10_2","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.0-5.el8_10","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.6-2.el9_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.6-1.el10_2 | < 0:7.0-5.el8_10 | < 0:7.6-2.el9_8","eol":null,"hubHref":null},{"vendor":"redhat","product":"cifs-utils-debuginfo","name":"cifs-utils-debuginfo","label":"cifs-utils-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cifs-utils-debuginfo","purlType":"rpm","versions":[{"text":"< 0:7.6-1.el10_2","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.0-5.el8_10","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.6-2.el9_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.6-1.el10_2 | < 0:7.0-5.el8_10 | < 0:7.6-2.el9_8","eol":null,"hubHref":null},{"vendor":"redhat","product":"cifs-utils-debugsource","name":"cifs-utils-debugsource","label":"cifs-utils-debugsource","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cifs-utils-debugsource","purlType":"rpm","versions":[{"text":"< 0:7.6-1.el10_2","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.0-5.el8_10","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.6-2.el9_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.6-1.el10_2 | < 0:7.0-5.el8_10 | < 0:7.6-2.el9_8","eol":null,"hubHref":null},{"vendor":"redhat","product":"cifs-utils-devel","name":"cifs-utils-devel","label":"cifs-utils-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/cifs-utils-devel","purlType":"rpm","versions":[{"text":"< 0:7.6-1.el10_2","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.0-5.el8_10","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.6-2.el9_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.6-1.el10_2 | < 0:7.0-5.el8_10 | < 0:7.6-2.el9_8","eol":null,"hubHref":null},{"vendor":"redhat","product":"pam_cifscreds","name":"pam_cifscreds","label":"pam_cifscreds","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/pam_cifscreds","purlType":"rpm","versions":[{"text":"< 0:7.6-1.el10_2","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.0-5.el8_10","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.6-2.el9_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.6-1.el10_2 | < 0:7.0-5.el8_10 | < 0:7.6-2.el9_8","eol":null,"hubHref":null},{"vendor":"redhat","product":"pam_cifscreds-debuginfo","name":"pam_cifscreds-debuginfo","label":"pam_cifscreds-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/pam_cifscreds-debuginfo","purlType":"rpm","versions":[{"text":"< 0:7.6-1.el10_2","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.0-5.el8_10","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.6-2.el9_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.6-1.el10_2 | < 0:7.0-5.el8_10 | < 0:7.6-2.el9_8","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise Micro 5.3","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise Micro 5.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise Micro 5.3","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise Micro 5.4","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise Micro 5.4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise Micro 5.4","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise Micro 5.5","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise Micro 5.5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise Micro 5.5","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 6.9-13.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.9-13.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","purlType":"rpm","versions":[{"text":"< 6.15-150400.3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.15-150400.3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","purlType":"rpm","versions":[{"text":"< 6.9-13.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.9-13.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"cifs-utils&distro=SUSE Linux Micro 6.1","name":"cifs-utils","label":"cifs-utils&distro=SUSE Linux Micro 6.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cifs-utils&distro=SUSE Linux Micro 6.1","purlType":"rpm","versions":[{"text":"< 7.0-slfo.1.1_4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0-slfo.1.1_4.1","eol":null,"hubHref":null}],"affectedCount":27,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:32990","label":"access.redhat.com/errata/RHSA-2026:32990","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:39575","label":"access.redhat.com/errata/RHSA-2026:39575","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:39576","label":"access.redhat.com/errata/RHSA-2026:39576","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:44232","label":"access.redhat.com/errata/RHSA-2026:44232","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-12505","label":"access.redhat.com/security/cve/CVE-2026-12505","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT","REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2489805","label":"bugzilla.redhat.com/show_bug.cgi?id=2489805","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT","REPORT"]},{"url":"https://git.samba.org/?p=cifs-utils.git;a=commit;h=972c5b5ff95e3e812bc8daa72d0383654ab0dba7","label":"git.samba.org?p=cifs-utils.git;a=commit;h=972c5b5ff95e3e812bc8daa72d0383654ab0dba7","hostname":"git.samba.org","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12505.json","label":"security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12505.json","hostname":"security.access.redhat.com","tags":["X Sadp Csaf Vex"]},{"url":"https://advisories.mageia.org/MGASA-2026-0291.html","label":"advisories.mageia.org/MGASA-2026-0291.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35813","label":"bugs.mageia.org/show_bug.cgi?id=35813","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-8496-1","label":"ubuntu.com/security/notices/USN-8496-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8496-2","label":"ubuntu.com/security/notices/USN-8496-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8496-3","label":"ubuntu.com/security/notices/USN-8496-3","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622888-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-202622888-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1267389","label":"bugzilla.suse.com/1267389","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12505","label":"www.suse.com/security/cve/CVE-2026-12505","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262699-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20262699-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262700-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20262700-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_32990.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_32990.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-12505","label":"www.cve.org/CVERecord?id=CVE-2026-12505","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12505","label":"nvd.nist.gov/vuln/detail/CVE-2026-12505","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://issues.redhat.com/browse/RHEL-80397","label":"issues.redhat.com/browse/RHEL-80397","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39575.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39575.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39576.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39576.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-12505","label":"ubuntu.com/security/CVE-2026-12505","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-12505","label":"security-tracker.debian.org/tracker/CVE-2026-12505","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["USN-8496-1","USN-8496-2"]},"timeline":[{"kind":"published","date":"2026-06-18T03:34:22.719Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-14T16:38:10.433Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T12:04:46.332Z","stale":false,"partial":false}}