CVE-2026-2340General(redhat / enterprise_linux)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch redhat enterprise_linux systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.

redhat CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-280

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

enterprise_linux
openshift_container_platform
samba

Threat summary

Patch or workaround signal is available
5 mentions across 5 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
General: 4 classified signals
Peaked 4d ago at 1 mentions (2026-05-28); latest day: 1
5 total mentions across 5 days

Affected systems

Vendors

redhat samba

Products

enterprise_linuxopenshift_container_platformsamba

5 versions affected across 3 products

Deep dive

Activity timeline5 mentions / 5d

Signal classification2 categories

General

480.0%

Patch

120.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-28	1	Patch1
2026-06-03	1	General1
2026-06-04	1	General1
2026-06-05	1	General1
2026-06-06	1	General1

Full discourse5 posts

Stuart 🇨🇷@stooee_127d
General
After analyzing 62% of vulnerabilities from past week, CVE-2026-2340 has 14 articles published from different internet sources, no other cve has these many articles. More information here: https://cves.st00ee.com/ #vulnerability #CyberSecurity #ThreatIntel #CVE #SecurityAlert
Post summary
The post notes that CVE‑2026‑2340 has attracted a notable amount of media attention, but provides no technical details, exploits, patches, or claims of active use.
0001045
71 followersView on X
Open Source Security mailing list@oss_security137d
Patch
Samba 4.24.3, 4.23.8, 4.22.10 Security Releases https://www.openwall.com/lists/oss-security/2026/05/27/6 CVE-2026-1933: Missing access checks on reparse point operations CVE-2026-2340: WORM vfs module does not block overwrites CVE-2026-3012: auto-enrolment GPO installing CA certificate over http + next tweet
Post summary
The note announces Samba security releases 4.24.3, 4.23.8, and 4.22.10 that fix CVE‑2026‑1933, CVE‑2026‑2340, and CVE‑2026‑3012, indicating patches are available.
10000210
4.6K followersView on X
Stuart 🇨🇷@stooee_128d
General
After analyzing 52% of vulnerabilities from past week, CVE-2026-2340 has 12 articles published from different internet sources, no other cve has these many articles. More information here: https://cves.st00ee.com/ #vulnerability #CyberSecurity #ThreatIntel #CVE #SecurityAlert
Post summary
The post notes that CVE-2026-2340 has attracted a notable number of articles but provides no technical, exploit, or patch details.
0000052
71 followersView on X
Stuart 🇨🇷@stooee_129d
General
After analyzing 41% of vulnerabilities from past week, CVE-2026-2340 has 11 articles published from different internet sources, no other cve has these many articles. More information here: https://cves.st00ee.com/ #vulnerability #CyberSecurity #ThreatIntel #CVE #SecurityAlert
Post summary
The post highlights that CVE-2026-2340 has attracted notable media attention with 11 published articles, but offers no technical or exploit details, patches, or evidence of active attacks.
0000049
71 followersView on X
Stuart 🇨🇷@stooee_130d
General
After analyzing 31% of vulnerabilities from past week, CVE-2026-2340 has 11 articles published from different internet sources, no other cve has these many articles. More information here: https://cves.st00ee.com/ #vulnerability #CyberSecurity #ThreatIntel #CVE #SecurityAlert
Post summary
The post notes that CVE-2026-2340 has received significant media attention with 11 articles, but provides no details on its technical nature, exploitation status, or mitigations.
0000063
71 followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	redhat	enterprise_linux	10.0	-	-
OS	redhat	enterprise_linux	7.0	-	-
OS	redhat	enterprise_linux	8.0	-	-
OS	redhat	enterprise_linux	9.0	-	-
App	redhat	openshift_container_platform	4.0	-	-
App	samba	samba	-	-	-

Explore more

Back to dashboard redhat CVEs samba CVEs enterprise_linux vulnerabilities

What researchers are saying

CVE-2026-2340

Stuart 🇨🇷@stooee_General

The post notes that CVE‑2026‑2340 has attracted a notable amount of media attention, but provides no technical details, exploits, patches, or claims of active use.

Open Source Security mailing list@oss_securityPatch

The note announces Samba security releases 4.24.3, 4.23.8, and 4.22.10 that fix CVE‑2026‑1933, CVE‑2026‑2340, and CVE‑2026‑3012, indicating patches are available.

Stuart 🇨🇷@stooee_General

The post notes that CVE-2026-2340 has attracted a notable number of articles but provides no technical, exploit, or patch details.

Stuart 🇨🇷@stooee_General

The post highlights that CVE-2026-2340 has attracted notable media attention with 11 published articles, but offers no technical or exploit details, patches, or evidence of active attacks.

Stuart 🇨🇷@stooee_General

The post notes that CVE-2026-2340 has received significant media attention with 11 articles, but provides no details on its technical nature, exploitation status, or mitigations.