7.5 HighCWE-476
CVE-2026-3238
Samba: denial of service against ad dc wins server
Red HatRed Hat Enterprise Linux 10
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
2.7%probability of exploitation in the next 30 days
Higher than 86% of scored CVEs
SeverityCVSS
7.5High
Description NVD
A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.
Coverage No articles yet
No CyberSIXT article names CVE-2026-3238 yet. New articles appear here and in the RSS feed.