CVE-2026-40226 — Vulnetix

CVE-2026-40226 PUBLISHED CVSS 6.4 MEDIUM

Reported by mitre · Published April 10, 2026

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

EPSS 0.01% · 0.9th percentile

Risk Scores

CVSS 3.1

6.4

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.01%

0.9th percentile

Affected Products

Vendor	Product	Versions
systemd	systemd	233
systemd	systemd	233

Exploit Intelligence

https://github.com/systemd/systemd/security/advisories/GHSA-9mj4-rrc3-gjcx (circl)

Timeline

Apr 10, 2026 CVE Published
Apr 10, 2026 CVE Updated
Apr 11, 2026 EPSS Score
Apr 13, 2026 Security Advisory
May 18, 2026 EPSS Score
May 19, 2026 EPSS Score
May 20, 2026 EPSS Score
May 21, 2026 EPSS Score
May 22, 2026 EPSS Score
May 23, 2026 EPSS Score
May 24, 2026 EPSS Score
May 25, 2026 EPSS Score

References

Open in Interactive Console →

$ Console Community · 100/wk Open console ›