cifs-utils vulnerabilities
CVEs whose affected-version data names the cifs-utils package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-104715High· 7.8PoCCifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input valu…
▾ MidnightRed Hat · cifs-utilsEPSS 0.14%via CVEORG
CVE-2026-12505High· 7.8A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment
A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this…
▾ TwilightRed Hat · cifs-utilsEPSS 0.16%via NVD