529 matches found
SUSE SLED15 / SLES15 Security Update : cifs-utils (SUSE-SU-2026:4819-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4819-1 advisory. This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS...
SUSE CVE-2026-104715
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : cifs-utils vulnerability (USN-8938-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has a package installed that is affected by a vulnerability as referenced in the USN-8938-1 advisory. It was discovered that cifs-utils incorrectly handled credentials files used by privileged mount.cifs invocations. A local attacke...
Fedora 43 : cifs-utils (2026-c2b21d3979)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c2b21d3979 advisory. Fix for CVE-2026-104715. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...
Fedora 44 : cifs-utils (2026-7d3c824798)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7d3c824798 advisory. Fix for CVE-2026-104715. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...
USN-8938-1: cifs-utils vulnerability
It was discovered that cifs-utils incorrectly handled credentials files used by privileged mount.cifs invocations. A local attacker could possibly use this issue to inject arbitrary mount options into a privileged mount, resulting in a privilege escalation...
[SECURITY] [DSA 6567-1] cifs-utils security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6567-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 16, 2026 https://www.debian.org/security/faq -...
DEBIAN-CVE-2026-104715
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...
CVE-2026-104715
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...
CVE-2026-104715
A flaw in cifs-utils (versions 7.0 through 7.6) allows an unprivileged local user to achieve privilege escalation to root. The vulnerability exists because the open_cred_file() function in mount.cifs.c fails to sanitize the username= value in a credentials file, allowing an attacker to inject una...
CVE-2026-104715
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...
CVE-2026-104715 Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...
EUVD-2026-102803
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...
CVE-2026-104715
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...
CVE-2026-104715
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...
Debian dsa-6567 : cifs-utils - security update
The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6567 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6567-1 [email protected] https://www.debian.org/securit...
PT-2026-115483
Name of the Vulnerable Software and Affected Versions cifs-utils affected versions not specified Description A flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file...
CVE-2026-104715: Improper Neutralization of Argument Delimiters in a Command
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...
Linux Distros Unpatched Vulnerability : CVE-2026-104715
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet...
