www.vulncheck.com Libsmb2 Vulnerability Allows Out-of-Bounds Access via NetrShareEnum
Article Content
- •Libsmb2 versions before 6.3 are vulnerable to integer overflow issues.
- •CVE-2026-110712, CVE-2026-110713, and CVE-2026-110714 have been assigned to this vulnerability.
- •No patches are currently available for the affected libsmb2 versions.
A vulnerability in libsmb2 versions prior to 6.3 allows for integer overflow in the DCE/RPC NDR decoder, which can lead to out-of-bounds reads and writes when clients enumerate shares. The vulnerability affects the latest release, libsmb2-6.2, and earlier 6.x versions. It is classified under CVE-2026-110712, CVE-2026-110713, and CVE-2026-110714, all published on October 14, 2026, with a CVSS score of 7.1, indicating a high severity. The flaw arises from improper handling of length values during the decoding process, allowing a malicious server to exploit the vulnerability. No patches have been released for the affected versions as of the publication date. Security professionals are urged to prioritize this vulnerability due to its potential for exploitation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2025-57632 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which versions are affected?
Is there a patch available?
What is the severity of this vulnerability?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…