CVE Wiki Pixee · CVE intelligence
← All CVEs

CVE-2026-4480

Critical · CVSS 9.0

Samba — OS Command Injection via unescaped shell metacharacters in print job description (CWE-78)

CVSS
9.0
nvd
EPSS
—
KEV
No
Class
oss containerizable
CWE-78, CWE-78

Description

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.

Search profile — drives PoC discovery

Symbols %Jprint commandjob descriptionprinting subsystemspoolssprintjobshell metacharacterslp_print_command
Keywords CVE-2026-4480Sambaprint command%J substitutionjob description shell injectionSamba RCE printingSamba spoolss command injectionSamba print job description exploit

Ranked PoCs (5) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-06-16T00:00:58.000Z · profiled 2026-06-16T18:20:23.035Z