c
cifs-utils
Security Risk Profile
58
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 14, 2025 to present
5
Total CVEs
2
Critical+High
1
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
6.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
58/100
medium
⚠️ 1 Active Exploits📈 1 in Last 30 Days
Severity Distribution
Critical
0High
2Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. cifs-utils cifs-utils4
2. cifs-utils mount.cifs1
3. Linux Linux kernel (cifs)1
4. Linux kernel CIFS subsystem1
5. debian/cifs-utils1
Recent Vulnerabilities
See more →CVE-2026-104715
CVSS 7.8high
Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass
Oct 2, 2026🔧 No Patch
REDHAT-BUG-2489805
CVSS 7.0high
Jun 17, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/767
unknown
CIFSwitch: Linux kernel/cifs-utils local root via forged cifs.spnego upcall
Jun 1, 2026🔧 No Patch
bleepingcomputer-20260530141608
unknown
New CIFSwitch Linux flaw gives root on multiple distributions
May 30, 2026⚠ Exploited🔧 No Patch
CVE-2025-2312
CVSS 5.9medium
cifs.upcall makes an upcall to the wrong namespace in containerized environments
Mar 14, 2025
Monitor cifs-utils in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.