CVE-2026-4480

The repository contains a functional exploit for CVE-2026-4480, a command injection vulnerability in the Samba printing subsystem. The exploit leverages improper sanitization of the print job description to achieve remote code execution via the `%J` substitution parameter.

Technical writeup detailing the exploitation of CVE-2026-4480, a critical Samba printing subsystem vulnerability enabling remote code execution (RCE). The document provides a full attack chain, including SMB misconfigurations (wide links, force user), systemd abuse for privilege escalation, and SUID exploitation to achieve root access on a HackTheBox Linux machine.

The repository contains a functional Python exploit for CVE-2026-4480, a command injection vulnerability in Samba's print job handling. The exploit leverages the `%J` macro in print commands to execute arbitrary shell commands, including a reverse shell payload.

This repository contains a functional exploit for CVE-2026-4480, leveraging Samba's print spooler service to achieve remote command execution via crafted print job submissions. The exploit uses Samba's Python bindings to interact with the spoolss RPC interface and injects commands through the document name field.

The repository contains a functional exploit for CVE-2026-4480, a command injection vulnerability in the Samba printing subsystem. The exploit leverages improper handling of the `%J` substitution parameter in print commands to achieve remote code execution.

This repository provides a detailed technical analysis of CVE-2026-4480, a critical command injection vulnerability in Samba's printing subsystem. It includes root cause analysis, affected versions, mitigation steps, and detection methods, but does not contain exploit code.

This repository contains a functional exploit for CVE-2026-4480, targeting a Samba Print Command Injection vulnerability. The exploit leverages the spoolss RPC interface to inject commands via the printer job name, achieving remote code execution.

This repository contains a functional exploit for CVE-2026-4480, demonstrating unauthenticated remote command execution in Samba's print subsystem via shell injection through the `%J` macro in the print command. The exploit leverages Samba's Python bindings to submit a crafted print job that triggers command execution.