🚨 A Samba printing flaw can turn a malicious print job name into remote code execution;…
This is a dev post classified by AGK Intelligence as Security (news), kept by the Dev Radar because it carries real work, not commentary.
🚨 A Samba printing flaw can turn a malicious print job name into remote code execution; CVE-2026-4480 PoC: https://github.com/0xBlackash/CVE-2026-4480 The vulnerability affects Samba’s printing subsystem when %J is used inside a custom print command. A client-controlled print job name can reach the shell without proper escaping, allowing shell metacharacters to alter the command being executed. Samba Printing | Command Injection RCE CVSS: 9.8 Critical Affected: Samba < 4.22.10, < 4.23.8, and < 4.24.3 Fixed: Samba 4.22.10, 4.23.8, and 4.24.3 Impact: Unauthenticated remote code execution und
Posted by Dark Web Informer (259.2k followers) 1 h ago · 14 likes · 3.5k views · view the original post on X. Kept by the Dev Radar as Security. Tools mentioned: cve-2026-4480.
More dev work like this
- 🚨 A PackageKit race condition can let a local unprivileged user gain root access on… — @DarkWebInformer
- 🚨 A filename overflow in the D-Link DIR-505 TFTP upload path can be chained into… — @DarkWebInformer
- 🚨 A Linux kernel vhost flaw can let a local attacker cross virtualization boundaries… — @DarkWebInformer
- The fastest way to shrink a vulnerability backlog is to stop it from filling up in the… — @chainguard_dev
- Resend is a launch partner in @trufflesec's secrets revocation program. Automatic secret… — @resend
- Vulnerabilities are easy to count. Meaningful risk is harder to measure. — @RedHat
- My new Offensive Security model, BaronLLM v3, is ready! 🔥 In this version, I used… — @AlicanKiraz0
- Join us tomorrow for a new episode of Builders Room! — @turnkeyhq
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.6k posts from 5k X accounts over the last 21 days, 9.3k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-11-05 00:17 UTC. Full method.