CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 10.0. Its EPSS score suggests a 39.7% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2025-10230
Severity
CRITICAL
CVSS
10
EPSS
39.65%
Original NVD Description
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.