PT-2026-65629

CVE-2026-58221

·

Published

2026-07-28

·

Updated

2026-08-13

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions samba (affected versions not specified)
Description Authenticated LDAP access to internal LDB special DNs (Distinguished Names) allows for a complete domain takeover. This occurs when an authenticated user can access specific internal database entries that should be restricted, enabling them to escalate privileges and gain full control over the domain.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
ECHO-AE6A-CB56-09E6
OESA-2026-3295
OESA-2026-3296
OESA-2026-3297
OESA-2026-3366
OESA-2026-3367
OPENSUSE-SU-2026:11431-1
OPENSUSE-SU-2026:21475-1
OPENSUSE-SU-2026:21540-1
SUSE-SU-2026:22977-1
SUSE-SU-2026:23003-1
SUSE-SU-2026:23129-1
SUSE-SU-2026:23152-1
SUSE-SU-2026:3362-1
SUSE-SU-2026:3363-1
SUSE-SU-2026:3364-1
SUSE-SU-2026:3365-1
SUSE-SU-2026:3366-1
SUSE-SU-2026:3367-1
USN-8621-1
Found an issue in the description? Have something to add? Feel free to write us 👾