CVE-2026-4480: Critical RCE in Samba Printing System

CVE-2026-4480 is a critical vulnerability in Samba's printing subsystem. The flaw allows a remote attacker to execute arbitrary code by exploiting the lack of shell metacharacter escaping in the print job description, passed via the "%J" parameter without sanitization. This directly impacts system administrators and IT teams managing Samba-based print infrastructure.

The vulnerability has been assigned a CVSS score of 9.0, classifying the threat as critical. NVD published the advisory on May 26, 2026. Recent signals on social media show consistency with the official technical description. However, specific affected versions and patch status have not been confirmed in the available official data; sysadmins must verify directly on the Samba security website.

Sysadmins must immediately check the Samba security site for patches and advisories. Pending a verified patch, temporarily disabling remote printing services on non-critical Samba hosts is recommended, restricting print service access to trusted hosts only, and implementing active monitoring of system logs to detect exploitation attempts of this vulnerability, particularly unexpected shell commands in job descriptions.