PT-2026-36796 · Sambabox · Sambabox

Kayra Büyüklü · Published 2026-05-04 · Updated 2026-05-04 · CVE-2026-3120

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SambaBox versions 5.1 through 5.2

Description Improper Control of Generation of Code in SambaBox allows OS Command Injection, which can lead to remote code execution.

Recommendations Update to version 5.3.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-3120

Affected Products

Sambabox

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-3120 · Security Note
• https://t.me/cveNotify/162013 · Telegram Post
• https://t.me/CVEtracker/52626 · Telegram Post
• https://usom.gov.tr/bildirim/tr-26-0155 · Note