AUGUST 31, 2026
Live Feed
Back to database
Case File

CVE-2026-3238

HIGH · CVSS 7.5 EPSS 2.67%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-06-08 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It may be remotely exploitable.

CVE
CVE-2026-3238
Severity
HIGH
CVSS
7.5
EPSS
2.67%

Original NVD Description

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.