Ssystemd

Products

Exploited and recent CVEs

• CVE-2026-15060 Medium 4.7 systemd-machined: unprivileged users can terminate arbitrary processes <0.1%
• CVE-2026-16742 Medium 6.7 systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path <0.1%
• CVE-2026-15059 Medium 5.5 systemd-oomd: unprivileged users can terminate arbitrary processes 0.2%
• CVE-2026-40228 Low 2.9 In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set. 0.2%
• CVE-2026-40227 Medium 6.2 In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element. 0.2%
• CVE-2026-40226 Medium 6.4 In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file. <0.1%
• CVE-2026-40225 Medium 6.4 In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output. 0.1%
• CVE-2026-40224 Medium 6.7 In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace. 0.1%
• CVE-2026-40223 Medium 4.7 In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running. <0.1%
• CVE-2026-29111 Medium 5.5 systemd: Local unprivileged user can trigger an assert 0.1%