# RHSA-2026:28055: samba security update

RHSA-2026:28055, released June 24, 2026, fixes 5 CVEs in samba (version 4.21.3-114.el10_0.1). None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/rhsa-2026-28055
- Platform: Linux
- Released: Jun 24, 2026
- Priority: Urgent (Closes CVE-2026-4480, rated Critical)
- CVEs: 5, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://access.redhat.com/errata/RHSA-2026:28055

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [samba](https://patchblox.com/security/data/product/linux/samba.md) | RHEL 10 | 4.21.3-114.el10_0.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-4480](https://patchblox.com/security/data/cve/CVE-2026-4480.md) | Urgent | samba: A flaw was found in the Samba printing subsystem | 9.0 | 0.1393 |  |
| [CVE-2026-4408](https://patchblox.com/security/data/cve/CVE-2026-4408.md) | Urgent | samba: A flaw was found in Samba | 9.8 | 0.0250 |  |
| [CVE-2026-2340](https://patchblox.com/security/data/cve/CVE-2026-2340.md) | High | samba: A flaw was found in Samba’s vfs_worm module | 9.0 | 0.0094 |  |
| [CVE-2026-1933](https://patchblox.com/security/data/cve/CVE-2026-1933.md) | High | samba: A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes | 9.0 | 0.0086 |  |
| [CVE-2026-3012](https://patchblox.com/security/data/cve/CVE-2026-3012.md) | High | samba: A flaw was found in Samba’s certificate auto-enrollment Group Policy handling | 9.0 | 0.0026 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo