CVE-2026-25706

HighCVSS 7.5/10Last modified Sep 2, 2026

Description

Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root on a machine being joined to that domain. This issue affects yast2-samba-client through 5.0.4.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 1, 2026
Last modified
Sep 2, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-257078.8A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplCVE-2026-25714.3The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'reviewUserSCVE-2026-257107.0The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmaCVE-2026-257117.5The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the CVE-2026-257127.5Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs for hidden members and private organizationCVE-2026-257137.8A heap-based buffer overflow vulnerability exists in the ID3v2 parsing functionality of MediaInfoLib (version(s): 26.01). A specially crafteCVE-2026-257144.3Gitea versions up to and including 1.26.1 do not apply public-only token filtering consistently to the user organization API, leaving an incCVE-2026-257159.8The web management interface of the device allows the administrator username and password to be set to blank values. Once applied, the devCVE-2026-257167.1Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUserManager) allows any authenticated user without speCVE-2026-257189.1Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write CVE-2026-257205.4A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sCVE-2026-257218.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote co
CVE-2026-25706: High severity, CVSS 7.5 | Vulnix