Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    3 vulnerabilities

    CVE-2026-15060 (GCVE-0-2026-15060)

    Vulnerability from cvelistv5 – Published: 2026-08-10 13:03 – Updated: 2026-08-10 17:57
    VLAI
    Title
    systemd-machined: unprivileged users can terminate arbitrary processes
    Summary
    When systemd-machined >= v259 (or v258 with a custom `polkit` policy that allows `register-machine` access) is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless unprivileged access is granted for the `register-machine` polkit action via a local, custom policy config file - versions older than v258 are not affected - unrelated to the systemd service manager (pid 1 or user session managers) - systemd-machined is not typically installed by default, and is typically in an optional, separate package (e.g.: systemd-container) - terminal-only or remote sessions (e.g.: ssh) are not affected
    Severity
    4.7 (Medium)
    CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    systemd systemd-machined Affected: 259 , < 262, 261.2, 260.4, 259.8, 258.10 (custom)
    		Create a notification for this product.
    Date Public
    2026-08-10 13:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15060",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-10T17:57:00.800960Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-10T17:57:14.676Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "systemd-machined",
          "repo": "https://github.com/systemd/systemd",
          "vendor": "systemd",
          "versions": [
            {
              "lessThan": "262, 261.2, 260.4, 259.8, 258.10",
              "status": "affected",
              "version": "259",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2026-08-10T13:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When systemd-machined \u0026gt;= v259 (or v258 with a custom `polkit` policy that allows `register-machine` access) is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones.\u003cbr\u003e\u003cbr\u003e- versions older than v259 are not affected, unless unprivileged access is granted for the `register-machine` polkit action via a local, custom policy config file\u003cbr\u003e- versions older than v258 are not affected\u003cbr\u003e- unrelated to the systemd service manager (pid 1 or user session managers)\u003cbr\u003e- systemd-machined is not typically installed by default, and is typically in an optional, separate package (e.g.: systemd-container)\u003cbr\u003e- terminal-only or remote sessions (e.g.: ssh) are not affected"
            }
          ],
          "value": "When systemd-machined \u003e= v259 (or v258 with a custom `polkit` policy that allows `register-machine` access) is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones.\n\n- versions older than v259 are not affected, unless unprivileged access is granted for the `register-machine` polkit action via a local, custom policy config file\n- versions older than v258 are not affected\n- unrelated to the systemd service manager (pid 1 or user session managers)\n- systemd-machined is not typically installed by default, and is typically in an optional, separate package (e.g.: systemd-container)\n- terminal-only or remote sessions (e.g.: ssh) are not affected"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-10T13:03:06.869Z",
        "orgId": "98a521c5-3a3e-4e2b-bc27-002067e0463c",
        "shortName": "systemd"
      },
      "references": [
        {
          "url": "https://github.com/systemd/systemd/security/advisories/GHSA-qwv4-3gwc-w5g8"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "systemd-machined: unprivileged users can terminate arbitrary processes",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "98a521c5-3a3e-4e2b-bc27-002067e0463c",
    "assignerShortName": "systemd",
    "cveId": "CVE-2026-15060",
    "datePublished": "2026-08-10T13:03:06.869Z",
    "dateReserved": "2026-07-08T14:15:06.476Z",
    "dateUpdated": "2026-08-10T17:57:14.676Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-16742 (GCVE-0-2026-16742)

    Vulnerability from cvelistv5 – Published: 2026-08-10 13:02 – Updated: 2026-08-10 15:49
    VLAI
    Title
    systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path
    Summary
    systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user
    Severity
    6.7 (Medium)
    CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-347 - Improper Verification of Cryptographic Signature
    • CWE-269 - Improper Privilege Management
    Assigner
    References
    Impacted products
    Vendor Product Version
    systemd systemd-homed Affected: 245 , < 262, 261.2, 260.4, 259.8, 258.10 (custom)
    		Create a notification for this product.
    Date Public
    2026-08-10 13:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-16742",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-10T15:48:50.415136Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-347",
                "description": "CWE-347 Improper Verification of Cryptographic Signature",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-269",
                "description": "CWE-269 Improper Privilege Management",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-10T15:49:58.525Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "systemd-homed",
          "repo": "https://github.com/systemd/systemd",
          "vendor": "systemd",
          "versions": [
            {
              "lessThan": "262, 261.2, 260.4, 259.8, 258.10",
              "status": "affected",
              "version": "245",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2026-08-10T13:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user"
            }
          ],
          "value": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-10T13:02:52.725Z",
        "orgId": "98a521c5-3a3e-4e2b-bc27-002067e0463c",
        "shortName": "systemd"
      },
      "references": [
        {
          "url": "https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "98a521c5-3a3e-4e2b-bc27-002067e0463c",
    "assignerShortName": "systemd",
    "cveId": "CVE-2026-16742",
    "datePublished": "2026-08-10T13:02:52.725Z",
    "dateReserved": "2026-07-23T09:28:44.818Z",
    "dateUpdated": "2026-08-10T15:49:58.525Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-15059 (GCVE-0-2026-15059)

    Vulnerability from cvelistv5 – Published: 2026-08-10 13:02 – Updated: 2026-08-10 17:58
    VLAI
    Title
    systemd-oomd: unprivileged users can terminate arbitrary processes
    Summary
    Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.
    Severity
    5.5 (Medium)
    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: poc Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    systemd systemd-oomd Affected: 250 , < 261, 260.3, 259.7, 258.9 (custom)
    		Create a notification for this product.
    Date Public
    2026-08-10 13:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15059",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-10T17:57:48.862045Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-10T17:58:08.288Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/systemd/systemd/security/advisories/GHSA-652q-wxr6-h5j6"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "systemd-oomd",
          "repo": "https://github.com/systemd/systemd",
          "vendor": "systemd",
          "versions": [
            {
              "lessThan": "261, 260.3, 259.7, 258.9",
              "status": "affected",
              "version": "250",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2026-08-10T13:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation."
            }
          ],
          "value": "Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-10T13:02:31.716Z",
        "orgId": "98a521c5-3a3e-4e2b-bc27-002067e0463c",
        "shortName": "systemd"
      },
      "references": [
        {
          "url": "https://github.com/systemd/systemd/security/advisories/GHSA-652q-wxr6-h5j6"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "systemd-oomd: unprivileged users can terminate arbitrary processes",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "98a521c5-3a3e-4e2b-bc27-002067e0463c",
    "assignerShortName": "systemd",
    "cveId": "CVE-2026-15059",
    "datePublished": "2026-08-10T13:02:31.716Z",
    "dateReserved": "2026-07-08T14:15:01.392Z",
    "dateUpdated": "2026-08-10T17:58:08.288Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}