CVE-2026-59260CWE-269privilege-escalation

CVE-2026-59260

High · published July 12, 2026

CVSS v3.1

8.8

EPSS

Percentile

58.5

In the wild

Unconfirmed

What it is

OpenWrt luci-app-samba4 read ACL grants file.exec permission on /usr/sbin/smbd, allowing authenticated delegated users to execute the Samba daemon with caller-controlled command-line arguments. Attackers can pass arbitrary Samba global options such as message command to a root smbd process, triggering command execution when SMB protocol messages are processed.

The record

Technical detail

CVSS v3.1: 8.8 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00875 · 58.5th percentile
Weakness: CWE-269 · Improper Privilege Management
Published: 2026-07-12T16:16Z

References (3)

https://github.com/openwrt/luci/security/advisories/GHSA-vx64-mmp7-h36c · [email protected]https://www.vulncheck.com/advisories/openwrt-luci-app-samba4-read-acl-remote-code-execution-via-smbd · [email protected]https://github.com/openwrt/luci/security/advisories/GHSA-vx64-mmp7-h36c · 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS history

Timeline

12 JUL 12:06Z
OpenWrt luci-app-samba4 read ACL remote code execution via smbd
cvelistv5