CVE-2026-40227 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
mitre	CNA	6.2 MEDIUM	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 10.39%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
systemd_project	systemd	260 ≤ 𝑥 < 261	CNA

Debian Releases

Debian Product

Codename

systemd

bookworm	252.39-1~deb12u2 fixed
bookworm (security)	252.38-1~deb12u1 fixed
bullseye	247.3-7+deb11u5 fixed
bullseye (security)	247.3-7+deb11u8 fixed
forky	261.2-1 fixed
sid	261.2-1 fixed
trixie	257.13-1~deb13u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

systemd

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
trusty	not-affected
xenial	not-affected

Common Weakness Enumeration

CWE-1025 - Comparison Using Wrong Factors
The code performs a comparison between two entities, but the comparison examines the wrong factors or characteristics of the entities, which can lead to incorrect results and resultant weaknesses.

References

https://github.com/systemd/systemd/security/advisories/GHSA-848h-497j-8vjq