Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root on a machine being joined to that domain. This issue affects yast2-samba-client through 5.0.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
The severity is increased for this new vulnerability affecting SUSE yast2-samba-client (CVE-2026-25706) https://vuldb.com/vuln/397569
Post summary
The message announces that CVE-2026-25706, affecting SUSE yast2-samba-client, now has a higher severity rating and provides a link to a vulnerability database.