CVE-2026-115505 libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Decoder via NetrShareEnum

High 7.2 Published 22 Oct 2026 Updated 29 Oct 2026

Exploited in the wild: Not known
Fix: None listed

What is CVE-2026-115505?

CVE-2026-115505 is a high-severity vulnerability in sahlberg libsmb2, published on 22 Oct 2026.

Official description

libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or machine-in-the-middle on unsigned connections can send crafted NetrShareEnum replies with wrapping actual_count or max_count values when clients call smb2_share_enum_async(), corrupting heap memory.

Weakness: CWE-190

Which versions are affected by CVE-2026-115505?

How do I fix CVE-2026-115505?

No fix has been published for CVE-2026-115505 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-115505 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-115505 exists.

Sources

Also known as DEBIAN-CVE-2026-115505, GHSA-jfx5-c9g5-vf27, UBUNTU-CVE-2026-115505.