[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-58216":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":27,"downstream":28,"duplicates":55,"related":56,"reserved_at":9,"published_at":72,"modified_at":73,"state":74,"summary":75,"references_raw":84,"kevs":125,"epss":126,"epss_history":129,"metrics":282,"affected":294},"CVE-2026-58216","An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[],[25,26],"UBUNTU-CVE-2026-58216","DEBIAN-CVE-2026-58216",[],[29,31,33,35,37,39,41,43,45,47,49,51,53],{"_key":30},"SUSE-SU-2026:22977-1",{"_key":32},"SUSE-SU-2026:23003-1",{"_key":34},"SUSE-SU-2026:3362-1",{"_key":36},"SUSE-SU-2026:3363-1",{"_key":38},"SUSE-SU-2026:3364-1",{"_key":40},"SUSE-SU-2026:3365-1",{"_key":42},"SUSE-SU-2026:3366-1",{"_key":44},"SUSE-SU-2026:3367-1",{"_key":46},"OPENSUSE-SU-2026:11431-1",{"_key":48},"OPENSUSE-SU-2026:21475-1",{"_key":50},"OPENSUSE-SU-2026:21540-1",{"_key":52},"SUSE-SU-2026:23129-1",{"_key":54},"SUSE-SU-2026:23152-1",[],[57,58,59,60,61,62,63,64,65,67,68,69,70,71],{"_key":30},{"_key":32},{"_key":34},{"_key":36},{"_key":38},{"_key":40},{"_key":42},{"_key":44},{"_key":66},"USN-8621-1",{"_key":46},{"_key":48},{"_key":50},{"_key":52},{"_key":54},"2026-07-30T15:40:11.673Z","2026-07-31T22:57:42.253Z","Awaiting Analysis",{"cisa_kev":76,"cisa_ransomware":76,"cisa_vendor":9,"epss_severity":77,"epss_score":78,"severity":79,"severity_score":80,"severity_version":81,"severity_source":82,"severity_vector":83,"severity_status":74},false,"low",0.00313,"medium",5.3,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",[85,92,97,101,105,111,115,120],{"url":86,"sources":87,"tags":89},"https://access.redhat.com/security/cve/CVE-2026-58216",[82,88],"nvd",[90,91],"VDB Entry","X Refsource REDHAT",{"url":93,"sources":94,"tags":95},"https://bugzilla.redhat.com/show_bug.cgi?id=2502721",[82,88],[96,91],"Issue Tracking",{"url":98,"sources":99,"tags":100},"https://bugzilla.samba.org/show_bug.cgi?id=16087",[82,88],[],{"url":102,"sources":103,"tags":104},"https://www.samba.org/samba/security/CVE-2026-58216.html",[82,88],[],{"url":106,"sources":107,"tags":109},"https://ubuntu.com/security/CVE-2026-58216",[108],"osv_ubuntu",[110],"REPORT",{"url":112,"sources":113,"tags":114},"https://www.cve.org/CVERecord?id=CVE-2026-58216",[108],[110],{"url":116,"sources":117,"tags":118},"https://ubuntu.com/security/notices/USN-8621-1",[108],[119],"Advisory",{"url":121,"sources":122,"tags":124},"https://security-tracker.debian.org/tracker/CVE-2026-58216",[123],"osv_debian",[119],[],{"date":127,"score":78,"percentile":128},"2026-09-19",0.24392,[130,134,137,140,143,146,149,152,155,158,161,164,167,170,173,176,179,182,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281],{"date":131,"score":132,"percentile":133},"2026-07-31",0.00515,0.41009,{"date":135,"score":132,"percentile":136},"2026-08-01",0.41019,{"date":138,"score":132,"percentile":139},"2026-08-02",0.41024,{"date":141,"score":132,"percentile":142},"2026-08-03",0.41032,{"date":144,"score":132,"percentile":145},"2026-08-04",0.4102,{"date":147,"score":132,"percentile":148},"2026-08-05",0.41006,{"date":150,"score":132,"percentile":151},"2026-08-06",0.41043,{"date":153,"score":132,"percentile":154},"2026-08-07",0.41088,{"date":156,"score":132,"percentile":157},"2026-08-08",0.41095,{"date":159,"score":132,"percentile":160},"2026-08-09",0.4108,{"date":162,"score":132,"percentile":163},"2026-08-10",0.41087,{"date":165,"score":132,"percentile":166},"2026-08-11",0.4117,{"date":168,"score":132,"percentile":169},"2026-08-12",0.41264,{"date":171,"score":132,"percentile":172},"2026-08-13",0.413,{"date":174,"score":132,"percentile":175},"2026-08-14",0.41368,{"date":177,"score":132,"percentile":178},"2026-08-15",0.41486,{"date":180,"score":132,"percentile":181},"2026-08-16",0.41513,{"date":183,"score":132,"percentile":184},"2026-08-17",0.41482,{"date":186,"score":132,"percentile":187},"2026-08-18",0.41508,{"date":189,"score":132,"percentile":190},"2026-08-19",0.41711,{"date":192,"score":132,"percentile":193},"2026-08-20",0.41768,{"date":195,"score":132,"percentile":196},"2026-08-21",0.41803,{"date":198,"score":132,"percentile":199},"2026-08-22",0.41819,{"date":201,"score":132,"percentile":202},"2026-08-23",0.41695,{"date":204,"score":78,"percentile":205},"2026-08-24",0.23437,{"date":207,"score":78,"percentile":208},"2026-08-25",0.23459,{"date":210,"score":78,"percentile":211},"2026-08-26",0.23519,{"date":213,"score":78,"percentile":214},"2026-08-27",0.2353,{"date":216,"score":78,"percentile":217},"2026-08-28",0.23522,{"date":219,"score":78,"percentile":220},"2026-08-29",0.23543,{"date":222,"score":78,"percentile":223},"2026-08-30",0.2361,{"date":225,"score":78,"percentile":226},"2026-08-31",0.23597,{"date":228,"score":78,"percentile":229},"2026-09-01",0.2362,{"date":231,"score":78,"percentile":232},"2026-09-02",0.23649,{"date":234,"score":78,"percentile":235},"2026-09-03",0.23671,{"date":237,"score":78,"percentile":238},"2026-09-04",0.237,{"date":240,"score":78,"percentile":241},"2026-09-05",0.23701,{"date":243,"score":78,"percentile":244},"2026-09-06",0.23768,{"date":246,"score":78,"percentile":247},"2026-09-07",0.23769,{"date":249,"score":78,"percentile":250},"2026-09-08",0.23784,{"date":252,"score":78,"percentile":253},"2026-09-09",0.23913,{"date":255,"score":78,"percentile":256},"2026-09-10",0.23923,{"date":258,"score":78,"percentile":259},"2026-09-11",0.2392,{"date":261,"score":78,"percentile":262},"2026-09-12",0.24022,{"date":264,"score":78,"percentile":265},"2026-09-13",0.23983,{"date":267,"score":78,"percentile":268},"2026-09-14",0.24002,{"date":270,"score":78,"percentile":271},"2026-09-15",0.24075,{"date":273,"score":78,"percentile":274},"2026-09-16",0.24174,{"date":276,"score":78,"percentile":277},"2026-09-17",0.24227,{"date":279,"score":78,"percentile":280},"2026-09-18",0.24381,{"date":127,"score":78,"percentile":128},[283,288,290,292],{"source":82,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":284,"cvss_v4_0":9},{"baseScore":80,"baseSeverity":285,"vectorString":83,"impactScore":286,"exploitabilityScore":287},"MEDIUM",6,4.1,{"source":88,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":289,"cvss_v4_0":9},{"baseScore":80,"baseSeverity":285,"vectorString":83,"impactScore":286,"exploitabilityScore":287},{"source":108,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":291,"cvss_v4_0":9},{"baseScore":80,"baseSeverity":9,"vectorString":83,"impactScore":286,"exploitabilityScore":287},{"source":123,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":293,"cvss_v4_0":9},{"baseScore":80,"baseSeverity":9,"vectorString":83,"impactScore":286,"exploitabilityScore":287},[295,313],{"ecosystem":296,"name":297,"vendor":298,"product":297,"cpe_part":9,"purl_type":299,"purl_namespace":298,"purl_name":297,"source":9,"versions":300},"Debian","samba","debian","deb",[301,305,306,310],{"version":302,"is_range":303,"range_type":304,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"version":302,"is_range":303,"range_type":304,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":307,"is_range":303,"range_type":304,"version_start":9,"version_start_type":9,"version_end":308,"version_end_type":309,"fixed_in":9},"lt2:4_22_10+dfsg_0+deb13u2","2:4.22.10+dfsg-0+deb13u2","excluding",{"version":311,"is_range":303,"range_type":304,"version_start":9,"version_start_type":9,"version_end":312,"version_end_type":309,"fixed_in":9},"lt2:4_24_5+dfsg_1","2:4.24.5+dfsg-1",{"ecosystem":314,"name":297,"vendor":315,"product":297,"cpe_part":9,"purl_type":299,"purl_namespace":315,"purl_name":297,"source":9,"versions":316},"Ubuntu","ubuntu",[317,318,321,324],{"version":302,"is_range":303,"range_type":304,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":319,"is_range":303,"range_type":304,"version_start":9,"version_start_type":9,"version_end":320,"version_end_type":309,"fixed_in":9},"lt2:4_15_13+dfsg_0ubuntu1_13","2:4.15.13+dfsg-0ubuntu1.13",{"version":322,"is_range":303,"range_type":304,"version_start":9,"version_start_type":9,"version_end":323,"version_end_type":309,"fixed_in":9},"lt2:4_19_5+dfsg_4ubuntu9_7","2:4.19.5+dfsg-4ubuntu9.7",{"version":325,"is_range":303,"range_type":304,"version_start":9,"version_start_type":9,"version_end":326,"version_end_type":309,"fixed_in":9},"lt2:4_23_6+dfsg_1ubuntu2_2","2:4.23.6+dfsg-1ubuntu2.2"]