CVE-2026-58224

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

• CWE-353

• https://access.redhat.com/security/cve/CVE-2026-58224Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2502720Issue Tracking, Third Party Advisory
• https://bugzilla.samba.org/show_bug.cgi?id=16085Issue Tracking, Mitigation, Vendor Advisory
• https://www.samba.org/samba/security/CVE-2026-58224-advisory.htmlMailing List, Vendor Advisory

Published

Aug 14, 2026

Last Modified

Sep 23, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-58213NATS Server is a high-performance server for NATS.io, the cl…7.1
• CVE-2026-58214NATS Server is a high-performance server for NATS.io, the cl…4.3
• CVE-2026-58216An out-of-bounds read flaw was found in Samba's Kerberos Key…5.3
• CVE-2026-58218A flaw was found in Samba's internal DNS server where unauth…5.3
• CVE-2026-5822Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-58222A security flaw combining LDAP filter injection and improper…8.8
• CVE-2026-58225SQL Injection vulnerability in elixir-ecto postgrex allows a…2.1
• CVE-2026-58226Inefficient Algorithmic Complexity vulnerability in elixir-m…8.7
• CVE-2026-58227The Erlang/OTP ssl application does not detect cycles when r…7.5
• CVE-2026-58228Cross-site scripting vulnerability in phoenixframework phoen…5.1
• CVE-2026-58229Allocation of resources without limits vulnerability in elix…8.2
• CVE-2026-5823A weakness has been identified in itsourcecode Construction …6.3