Sahlberg LIBSMB2 vulnerabilities

3 CVEs affecting Sahlberg LIBSMB2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-110714, published 2026-10-14.

More from Sahlberg.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-110714, published 2026-10-14. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. libsmb2 through 6.2 contains an integer underflow vulnerability in decode_acl that allows malicious SMB servers to trigger heap out-of-bounds reads via crafted security descriptors. Attackers…
• CVE-2026-110713, published 2026-10-14. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_fs_volume_info and smb2_decode_file_fs_attribute_info that allows malicious SMB servers to read past reply…
• CVE-2026-110712, published 2026-10-14. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_all_info that allows malicious SMB servers to crash clients by sending an unchecked FileNameLength. Attackers…