VulnerabilityModified

CVE-2026-4480

A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters.

CRITICAL 9.0EPSS 13.9%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 13.9%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.

CVSS 3.1: 9.0 CRITICALCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS: 13.93% probability · 97th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-78
Affected: redhat/openshift container platform · samba/samba · redhat/enterprise linux
Source: secalert@redhat.com

EPSS trend

EPSS moved from 4.3% on 24 September 2026 to 13.9% on 27 October 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.