VulnSocial

CVE-2026-40226Disclosure(systemd_project / systemd)

LOWCVSS 6.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

systemd_project CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-348

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • systemd

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-04-11); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
systemd_project
Products
systemd

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-04-11: 1Mentions · 2026-06-08: 1Technical Details · 2026-04-11: 1Technical Details · 2026-06-08: 104-1106-08
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • ThreatCluster@threatcluster
    Disclosure

    Ubuntu published security notice USN-8402-1 disclosing CVE-2026-40226 and CVE-2023-7008 in systemd affecting Ubuntu 22.04 LTS, 24.04 LTS and 25.10, allowing local escape from systemd-nspawn containers and DNS record manipulation, Ubuntu said. https://threatcluster.io/cluster/critical-systemd-vulnerabilities-affect-multiple-ubuntu-rele-390c275c

    Post summary

    The notice announces two CVEs in systemd and outlines their technical impact, but provides no PoC, exploit code, or patch details.

    0000058
    317 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-40226 In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file. https://www.cve.org/CVERecord?id=CVE-2026-40226

    Post summary

    The post discloses that an escape-to-host vulnerability exists in systemd nspawn between versions 233-259, exploitable via a crafted optional config file.

    00000145
    57.1K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsystemd_projectsystemd---

Explore more

Back to dashboardsystemd_project CVEssystemd vulnerabilities