[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-58224":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":392,"aliases":393,"duplicate_of":9,"upstream":396,"downstream":397,"duplicates":424,"related":425,"reserved_at":9,"published_at":441,"modified_at":442,"state":443,"summary":444,"references_raw":453,"kevs":498,"epss":499,"epss_history":502,"metrics":611,"affected":623},"CVE-2026-58224","A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-353","Missing Support for Integrity Check","The product uses a transmission protocol that does not include a mechanism for verifying the integrity of the data during transmission, such as a checksum.","weakness","Draft","Base","Medium",[20,204,208,212,216,384,388],{"id":21,"name":22,"techniques":23},"CAPEC-13","Subverting Environment Variable Values",[24,122,164],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1562.003","Impair Command History Logging",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0005","Stealth",[35,40,45,50,55,60,65,69,73,77,81,86,90,94,98,102,106,110,114,118],{"id":36,"name":37,"tactic":38},"D3-RF","Restore File",{"name":39},"Restore",{"id":41,"name":42,"tactic":43},"D3-CQ","Content Quarantine",{"name":44},"Isolate",{"id":46,"name":47,"tactic":48},"D3-CI","Configuration Inventory",{"name":49},"Model",{"id":51,"name":52,"tactic":53},"D3-DF","Decoy File",{"name":54},"Deceive",{"id":56,"name":57,"tactic":58},"D3-FA","File Analysis",{"name":59},"Detect",{"id":61,"name":62,"tactic":63},"D3-DRA","Disable Remote Access",{"name":64},"Harden",{"id":66,"name":67,"tactic":68},"D3-ACH","Application Configuration Hardening",{"name":64},{"id":70,"name":71,"tactic":72},"D3-RC","Restore Configuration",{"name":39},{"id":74,"name":75,"tactic":76},"D3-FE","File Encryption",{"name":64},{"id":78,"name":79,"tactic":80},"D3-FIM","File Integrity Monitoring",{"name":59},{"id":82,"name":83,"tactic":84},"D3-RKD","Registry Key Deletion",{"name":85},"Evict",{"id":87,"name":88,"tactic":89},"D3-DA","Dynamic Analysis",{"name":59},{"id":91,"name":92,"tactic":93},"D3-CF","Content Filtering",{"name":44},{"id":95,"name":96,"tactic":97},"D3-LFP","Local File Permissions",{"name":44},{"id":99,"name":100,"tactic":101},"D3-FEV","File Eviction",{"name":85},{"id":103,"name":104,"tactic":105},"D3-EFA","Emulated File Analysis",{"name":59},{"id":107,"name":108,"tactic":109},"D3-RFAM","Remote File Access Mediation",{"name":44},{"id":111,"name":112,"tactic":113},"D3-CM","Content Modification",{"name":44},{"id":115,"name":116,"tactic":117},"D3-EAL","Executable Allowlisting",{"name":44},{"id":119,"name":120,"tactic":121},"D3-EDL","Executable Denylisting",{"name":44},{"id":123,"name":124,"tactics":125,"countermeasures":137},"T1574.006","Dynamic Linker Hijacking",[126,129,132,133,134],{"id":127,"name":128},"TA0110","Persistence",{"id":130,"name":131},"TA0111","Privilege Escalation",{"id":29,"name":30},{"id":32,"name":33},{"id":135,"name":136},"TA0104","Execution",[138,140,142,144,148,150,152,154,156,158,160,162],{"id":111,"name":112,"tactic":139},{"name":44},{"id":99,"name":100,"tactic":141},{"name":85},{"id":56,"name":57,"tactic":143},{"name":59},{"id":145,"name":146,"tactic":147},"D3-SFA","System File Analysis",{"name":59},{"id":36,"name":37,"tactic":149},{"name":39},{"id":91,"name":92,"tactic":151},{"name":44},{"id":95,"name":96,"tactic":153},{"name":44},{"id":74,"name":75,"tactic":155},{"name":64},{"id":107,"name":108,"tactic":157},{"name":44},{"id":41,"name":42,"tactic":159},{"name":44},{"id":51,"name":52,"tactic":161},{"name":54},{"id":78,"name":79,"tactic":163},{"name":59},{"id":165,"name":166,"tactics":167,"countermeasures":173},"T1574.007","Path Interception by PATH Environment Variable",[168,169,170,171,172],{"id":127,"name":128},{"id":130,"name":131},{"id":29,"name":30},{"id":32,"name":33},{"id":135,"name":136},[174,176,178,180,182,184,186,188,190,192,194,196,198,200,202],{"id":111,"name":112,"tactic":175},{"name":44},{"id":56,"name":57,"tactic":177},{"name":59},{"id":51,"name":52,"tactic":179},{"name":54},{"id":91,"name":92,"tactic":181},{"name":44},{"id":99,"name":100,"tactic":183},{"name":85},{"id":78,"name":79,"tactic":185},{"name":59},{"id":95,"name":96,"tactic":187},{"name":44},{"id":74,"name":75,"tactic":189},{"name":64},{"id":115,"name":116,"tactic":191},{"name":44},{"id":87,"name":88,"tactic":193},{"name":59},{"id":107,"name":108,"tactic":195},{"name":44},{"id":119,"name":120,"tactic":197},{"name":44},{"id":103,"name":104,"tactic":199},{"name":59},{"id":41,"name":42,"tactic":201},{"name":44},{"id":36,"name":37,"tactic":203},{"name":39},{"id":205,"name":206,"techniques":207},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":209,"name":210,"techniques":211},"CAPEC-389","Content Spoofing Via Application API Manipulation",[],{"id":213,"name":214,"techniques":215},"CAPEC-39","Manipulating Opaque Client-based Data Tokens",[],{"id":217,"name":218,"techniques":219},"CAPEC-665","Exploitation of Thunderbolt Protection Flaws",[220,251,287],{"id":221,"name":222,"tactics":223,"countermeasures":226},"T1211","Exploitation for Stealth",[224,225],{"id":29,"name":30},{"id":32,"name":33},[227,231,235,239,243,247],{"id":228,"name":229,"tactic":230},"D3-PSEP","Process Segment Execution Prevention",{"name":64},{"id":232,"name":233,"tactic":234},"D3-MBT","Memory Boundary Tracking",{"name":59},{"id":236,"name":237,"tactic":238},"D3-PCSV","Process Code Segment Verification",{"name":59},{"id":240,"name":241,"tactic":242},"D3-SFCV","Stack Frame Canary Validation",{"name":64},{"id":244,"name":245,"tactic":246},"D3-SSC","Shadow Stack Comparisons",{"name":59},{"id":248,"name":249,"tactic":250},"D3-SAOR","Segment Address Offset Randomization",{"name":64},{"id":252,"name":253,"tactics":254,"countermeasures":258},"T1542.002","Component Firmware",[255,256,257],{"id":29,"name":30},{"id":32,"name":33},{"id":127,"name":128},[259,263,267,271,275,279,283],{"id":260,"name":261,"tactic":262},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":59},{"id":264,"name":265,"tactic":266},"D3-FV","Firmware Verification",{"name":59},{"id":268,"name":269,"tactic":270},"D3-FBA","Firmware Behavior Analysis",{"name":59},{"id":272,"name":273,"tactic":274},"D3-SU","Software Update",{"name":64},{"id":276,"name":277,"tactic":278},"D3-SWI","Software Inventory",{"name":49},{"id":280,"name":281,"tactic":282},"D3-RS","Restore Software",{"name":39},{"id":284,"name":285,"tactic":286},"D3-AVE","Asset Vulnerability Enumeration",{"name":49},{"id":288,"name":289,"tactics":290,"countermeasures":299},"T1556","Modify Authentication Process",[291,292,295,296],{"id":29,"name":30},{"id":293,"name":294},"TA0112","Defense Impairment",{"id":127,"name":128},{"id":297,"name":298},"TA0031","Credential Access",[300,302,306,308,312,316,318,322,324,328,332,336,338,340,342,344,346,348,352,354,356,360,364,366,368,372,376,380],{"id":95,"name":96,"tactic":301},{"name":44},{"id":303,"name":304,"tactic":305},"D3-HBPI","Hardware-based Process Isolation",{"name":44},{"id":99,"name":100,"tactic":307},{"name":85},{"id":309,"name":310,"tactic":311},"D3-HS","Host Shutdown",{"name":85},{"id":313,"name":314,"tactic":315},"D3-PSMD","Process Self-Modification Detection",{"name":59},{"id":41,"name":42,"tactic":317},{"name":44},{"id":319,"name":320,"tactic":321},"D3-ABPI","Application-based Process Isolation",{"name":44},{"id":145,"name":146,"tactic":323},{"name":59},{"id":325,"name":326,"tactic":327},"D3-PT","Process Termination",{"name":85},{"id":329,"name":330,"tactic":331},"D3-SCF","System Call Filtering",{"name":44},{"id":333,"name":334,"tactic":335},"D3-AM","Access Modeling",{"name":49},{"id":70,"name":71,"tactic":337},{"name":39},{"id":74,"name":75,"tactic":339},{"name":64},{"id":51,"name":52,"tactic":341},{"name":54},{"id":78,"name":79,"tactic":343},{"name":59},{"id":91,"name":92,"tactic":345},{"name":44},{"id":56,"name":57,"tactic":347},{"name":59},{"id":349,"name":350,"tactic":351},"D3-WSAM","Web Session Access Mediation",{"name":44},{"id":46,"name":47,"tactic":353},{"name":49},{"id":36,"name":37,"tactic":355},{"name":39},{"id":357,"name":358,"tactic":359},"D3-PSA","Process Spawn Analysis",{"name":59},{"id":361,"name":362,"tactic":363},"D3-PLA","Process Lineage Analysis",{"name":59},{"id":107,"name":108,"tactic":365},{"name":44},{"id":111,"name":112,"tactic":367},{"name":44},{"id":369,"name":370,"tactic":371},"D3-NTPM","Network Traffic Policy Mapping",{"name":49},{"id":373,"name":374,"tactic":375},"D3-KBPI","Kernel-based Process Isolation",{"name":44},{"id":377,"name":378,"tactic":379},"D3-PS","Process Suspension",{"name":85},{"id":381,"name":382,"tactic":383},"D3-HR","Host Reboot",{"name":85},{"id":385,"name":386,"techniques":387},"CAPEC-74","Manipulating State",[],{"id":389,"name":390,"techniques":391},"CAPEC-75","Manipulating Writeable Configuration Files",[],[],[394,395],"UBUNTU-CVE-2026-58224","DEBIAN-CVE-2026-58224",[],[398,400,402,404,406,408,410,412,414,416,418,420,422],{"_key":399},"SUSE-SU-2026:22977-1",{"_key":401},"SUSE-SU-2026:23003-1",{"_key":403},"SUSE-SU-2026:3362-1",{"_key":405},"SUSE-SU-2026:3363-1",{"_key":407},"SUSE-SU-2026:3364-1",{"_key":409},"SUSE-SU-2026:3365-1",{"_key":411},"SUSE-SU-2026:3366-1",{"_key":413},"SUSE-SU-2026:3367-1",{"_key":415},"OPENSUSE-SU-2026:11431-1",{"_key":417},"OPENSUSE-SU-2026:21475-1",{"_key":419},"OPENSUSE-SU-2026:21540-1",{"_key":421},"SUSE-SU-2026:23129-1",{"_key":423},"SUSE-SU-2026:23152-1",[],[426,427,428,429,430,431,432,433,434,435,436,437,438,439],{"_key":399},{"_key":401},{"_key":403},{"_key":405},{"_key":407},{"_key":409},{"_key":411},{"_key":413},{"_key":415},{"_key":417},{"_key":419},{"_key":421},{"_key":423},{"_key":440},"USN-8621-1","2026-08-14T14:38:51.439Z","2026-08-31T11:34:44.062Z","Analyzed",{"cisa_kev":445,"cisa_ransomware":445,"cisa_vendor":9,"epss_severity":446,"epss_score":447,"severity":448,"severity_score":449,"severity_version":450,"severity_source":451,"severity_vector":452,"severity_status":443},false,"low",0.0029,"medium",6.5,"v3.1","cve.org","CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[454,460,464,469,474,482,487,493],{"url":455,"sources":456,"tags":458},"https://ubuntu.com/security/CVE-2026-58224",[457],"osv_ubuntu",[459],"REPORT",{"url":461,"sources":462,"tags":463},"https://www.cve.org/CVERecord?id=CVE-2026-58224",[457],[459],{"url":465,"sources":466,"tags":467},"https://ubuntu.com/security/notices/USN-8621-1",[457],[468],"Advisory",{"url":470,"sources":471,"tags":473},"https://security-tracker.debian.org/tracker/CVE-2026-58224",[472],"osv_debian",[468],{"url":475,"sources":476,"tags":478},"https://access.redhat.com/security/cve/CVE-2026-58224",[451,477],"nvd",[479,480,481],"VDB Entry","X Refsource REDHAT","Third Party Advisory",{"url":483,"sources":484,"tags":485},"https://bugzilla.redhat.com/show_bug.cgi?id=2502720",[451,477],[486,480,481],"Issue Tracking",{"url":488,"sources":489,"tags":490},"https://bugzilla.samba.org/show_bug.cgi?id=16085",[451,477],[486,491,492],"Vendor Advisory","Mitigation",{"url":494,"sources":495,"tags":496},"https://www.samba.org/samba/security/CVE-2026-58224-advisory.html",[451,477],[491,497],"Mailing List",[],{"date":500,"score":447,"percentile":501},"2026-09-19",0.21805,[503,507,510,513,516,519,522,525,528,531,535,538,541,544,547,550,553,556,559,562,565,568,571,574,577,580,583,586,589,592,595,598,601,604,607,610],{"date":504,"score":505,"percentile":506},"2026-08-15",0.00405,0.33704,{"date":508,"score":505,"percentile":509},"2026-08-16",0.3373,{"date":511,"score":505,"percentile":512},"2026-08-17",0.33661,{"date":514,"score":505,"percentile":515},"2026-08-18",0.33684,{"date":517,"score":505,"percentile":518},"2026-08-19",0.3387,{"date":520,"score":505,"percentile":521},"2026-08-20",0.33928,{"date":523,"score":505,"percentile":524},"2026-08-21",0.33959,{"date":526,"score":505,"percentile":527},"2026-08-22",0.3397,{"date":529,"score":505,"percentile":530},"2026-08-23",0.3391,{"date":532,"score":533,"percentile":534},"2026-08-24",0.00263,0.17733,{"date":536,"score":533,"percentile":537},"2026-08-25",0.1775,{"date":539,"score":533,"percentile":540},"2026-08-26",0.17815,{"date":542,"score":447,"percentile":543},"2026-08-27",0.21013,{"date":545,"score":447,"percentile":546},"2026-08-28",0.21036,{"date":548,"score":447,"percentile":549},"2026-08-29",0.21054,{"date":551,"score":447,"percentile":552},"2026-08-30",0.21087,{"date":554,"score":447,"percentile":555},"2026-08-31",0.21071,{"date":557,"score":447,"percentile":558},"2026-09-01",0.21095,{"date":560,"score":447,"percentile":561},"2026-09-02",0.21117,{"date":563,"score":447,"percentile":564},"2026-09-03",0.21124,{"date":566,"score":447,"percentile":567},"2026-09-04",0.21154,{"date":569,"score":447,"percentile":570},"2026-09-05",0.21183,{"date":572,"score":447,"percentile":573},"2026-09-06",0.21217,{"date":575,"score":447,"percentile":576},"2026-09-07",0.21221,{"date":578,"score":447,"percentile":579},"2026-09-08",0.2123,{"date":581,"score":447,"percentile":582},"2026-09-09",0.21352,{"date":584,"score":447,"percentile":585},"2026-09-10",0.21356,{"date":587,"score":447,"percentile":588},"2026-09-11",0.21367,{"date":590,"score":447,"percentile":591},"2026-09-12",0.21477,{"date":593,"score":447,"percentile":594},"2026-09-13",0.21431,{"date":596,"score":447,"percentile":597},"2026-09-14",0.21456,{"date":599,"score":447,"percentile":600},"2026-09-15",0.21528,{"date":602,"score":447,"percentile":603},"2026-09-16",0.21614,{"date":605,"score":447,"percentile":606},"2026-09-17",0.21659,{"date":608,"score":447,"percentile":609},"2026-09-18",0.21802,{"date":500,"score":447,"percentile":501},[612,617,619,621],{"source":451,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":613,"cvss_v4_0":9},{"baseScore":449,"baseSeverity":614,"vectorString":452,"impactScore":615,"exploitabilityScore":616},"MEDIUM",6,7.2,{"source":477,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":618,"cvss_v4_0":9},{"baseScore":449,"baseSeverity":614,"vectorString":452,"impactScore":615,"exploitabilityScore":616},{"source":472,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":620,"cvss_v4_0":9},{"baseScore":449,"baseSeverity":9,"vectorString":452,"impactScore":615,"exploitabilityScore":616},{"source":457,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":622,"cvss_v4_0":9},{"baseScore":449,"baseSeverity":9,"vectorString":452,"impactScore":615,"exploitabilityScore":616},[624,642,656,667],{"ecosystem":625,"name":626,"vendor":627,"product":626,"cpe_part":9,"purl_type":628,"purl_namespace":627,"purl_name":626,"source":9,"versions":629},"Debian","samba","debian","deb",[630,634,635,639],{"version":631,"is_range":632,"range_type":633,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"version":631,"is_range":632,"range_type":633,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":636,"is_range":632,"range_type":633,"version_start":9,"version_start_type":9,"version_end":637,"version_end_type":638,"fixed_in":9},"lt2:4_22_10+dfsg_0+deb13u2","2:4.22.10+dfsg-0+deb13u2","excluding",{"version":640,"is_range":632,"range_type":633,"version_start":9,"version_start_type":9,"version_end":641,"version_end_type":638,"fixed_in":9},"lt2:4_24_5+dfsg_1","2:4.24.5+dfsg-1",{"ecosystem":643,"name":626,"vendor":644,"product":626,"cpe_part":9,"purl_type":628,"purl_namespace":644,"purl_name":626,"source":9,"versions":645},"Ubuntu","ubuntu",[646,647,650,653],{"version":631,"is_range":632,"range_type":633,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":648,"is_range":632,"range_type":633,"version_start":9,"version_start_type":9,"version_end":649,"version_end_type":638,"fixed_in":9},"lt2:4_15_13+dfsg_0ubuntu1_13","2:4.15.13+dfsg-0ubuntu1.13",{"version":651,"is_range":632,"range_type":633,"version_start":9,"version_start_type":9,"version_end":652,"version_end_type":638,"fixed_in":9},"lt2:4_19_5+dfsg_4ubuntu9_7","2:4.19.5+dfsg-4ubuntu9.7",{"version":654,"is_range":632,"range_type":633,"version_start":9,"version_start_type":9,"version_end":655,"version_end_type":638,"fixed_in":9},"lt2:4_23_6+dfsg_1ubuntu2_2","2:4.23.6+dfsg-1ubuntu2.2",{"ecosystem":9,"name":657,"vendor":658,"product":659,"cpe_part":660,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":661},"enterprise linux","redhat","enterprise_linux","o",[662,665],{"version":663,"is_range":445,"range_type":664,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0","cpe",{"version":666,"is_range":445,"range_type":664,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0",{"ecosystem":9,"name":668,"vendor":626,"product":626,"cpe_part":669,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":670},"Samba","a",[671],{"version":672,"is_range":632,"range_type":664,"version_start":9,"version_start_type":9,"version_end":673,"version_end_type":674,"fixed_in":9},"lte4.2","4.2","including"]