CVE-2026-2340
Discovered by AISLEPUBLISHED
Description
vfs_worm module that allows overwriting or deleting WORM-protected files via SMB rename with ReplaceIfExists=1, bypassing the intended immutability guarantee after the grace period
CVSS Base Scores
CVSS v3.1(Primary)
4.3