CVE-2026-4480
CRITICALSamba: samba: remote code execution in printing subsystem via unescaped job description
Title source: cnaExploitation Summary
EIP tracks 5 public exploits for CVE-2026-4480. PoCs published by CarlosEduardoPM, 0xBlackash, robinxiang.
AI-analyzed exploit summary The repository contains a functional exploit for CVE-2026-4480, a command injection vulnerability in the Samba printing subsystem. The exploit leverages improper sanitization of the print job description to achieve remote code execution via the `%J` substitution parameter.
Description
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.
Exploits (5)
The repository contains a functional exploit for CVE-2026-4480, a command injection vulnerability in the Samba printing subsystem. The exploit leverages improper sanitization of the print job description to achieve remote code execution via the `%J` substitution parameter.
The repository contains a functional exploit for CVE-2026-4480, a command injection vulnerability in the Samba printing subsystem. The exploit leverages improper handling of the `%J` substitution parameter in print commands to achieve remote code execution.
This repository provides a detailed technical analysis of CVE-2026-4480, a critical command injection vulnerability in Samba's printing subsystem. It includes root cause analysis, affected versions, mitigation steps, and detection methods, but does not contain exploit code.
This repository contains a functional exploit for CVE-2026-4480, targeting a Samba Print Command Injection vulnerability. The exploit leverages the spoolss RPC interface to inject commands via the printer job name, achieving remote code execution.
This repository contains a functional exploit for CVE-2026-4480, demonstrating unauthenticated remote command execution in Samba's print subsystem via shell injection through the `%J` macro in the print command. The exploit leverages Samba's Python bindings to submit a crafted print job that triggers command execution.
References (6)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H