CVE-2026-40226 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.4 MEDIUM	LOCAL	HIGH	HIGH	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 0.06%

Affected Products (NVD)

Vendor	Product	Version
systemd_project	systemd	233 ≤ 𝑥 < 257.12
systemd_project	systemd	258 ≤ 𝑥 < 258.6
systemd_project	systemd	259 ≤ 𝑥 < 259.4

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

systemd

bookworm	252.39-1~deb12u2 fixed
bookworm (security)	vulnerable
bullseye	vulnerable
bullseye (security)	247.3-7+deb11u8 fixed
forky	261.2-1 fixed
sid	261.2-1 fixed
trixie	257.13-1~deb13u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

systemd

bionic	needs-triage
focal	needs-triage
jammy	Fixed 249.11-0ubuntu3.21 released
noble	Fixed 255.4-1ubuntu8.16 released
questing	Fixed 257.9-0ubuntu2.5 released
resolute	not-affected
trusty	needs-triage
xenial	needs-triage

openSUSE / SLES Releases

openSUSE Product

Release

libsystemd0

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP4	249.17-150400.8.64.1 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

libsystemd0-32bit

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP4	249.17-150400.8.64.1 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

libudev1

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP4	249.17-150400.8.64.1 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

libudev1-32bit

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP4	249.17-150400.8.64.1 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

systemd

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP4	249.17-150400.8.64.1 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

systemd-32bit

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP4	249.17-150400.8.64.1 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

systemd-container

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP4	249.17-150400.8.64.1 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

systemd-coredump

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP4	249.17-150400.8.64.1 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

systemd-devel

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP4	249.17-150400.8.64.1 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

systemd-doc

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP4	249.17-150400.8.64.1 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

systemd-journal-remote

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

systemd-lang

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP4	249.17-150400.8.64.1 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

systemd-resolved

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

systemd-sysvcompat

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

systemd-sysvinit

suse enterprise server 15 SP4

249.17-150400.8.64.1

fixed

udev

suse enterprise desktop 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise sap 15 SP7	254.27-150600.4.71.2 fixed
suse enterprise server 15 SP4	249.17-150400.8.64.1 fixed
suse enterprise server 15 SP7	254.27-150600.4.71.2 fixed

Azure Linux Releases

Azure Package

Release

systemd

Azure Linux 3.0

0:255-30.azl3

fixed

Common Weakness Enumeration

CWE-348 - Use of Less Trusted Source
The software has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.

References

https://github.com/systemd/systemd/security/advisories/GHSA-9mj4-rrc3-gjcx