#samba

Analysis · May 20, 2026 · Colten Anderson

2017's other wormable file-share RCE, the one nobody remembers, is still on your NAS

Everyone remembers EternalBlue tearing through Windows SMB in 2017. The same year, Samba shipped a fix for SambaCry: upload a library to a writable share, trigger it, get root. It lives on in the NAS and IoT boxes that embed Samba and never update.