CVE-2026-58221

Medium

Published: —Translated: 29/07/2026(UTC)NVD NIST

Summary

A low-privilege authenticated Samba AD user can modify internal LDB special DNs via LDAP access, enabling a domain takeover.

Risk Assessment

The risk is a full domain takeover by a low-privilege attacker, potentially compromising data confidentiality and integrity.

Recommendation

Apply Samba patches immediately and restrict LDAP access for low-privilege users.

Original NVD description (English source)

Samba AD authenticated LDAP access domain takeover. Samba AD low-privilege authenticated LDAP access allows modifications to internal LDB special DNs, which permits a domain takeover.