Every CVE Search/ Get API key

CVE-2026-40228

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary...

2.9 Low

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.18%Up 0.2 points since Apr 11, 2026
90%50%10%1%

What each source reports

CVE List Score used 2.9

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

Record
CVE-2026-40228
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-669
Updated
2026-11-02
EUVDEUVD-2026-21498 2.9

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

Record
EUVD-2026-21498
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-grjh-583f-v73h 2.9

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary...

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

Record
GHSA-grjh-583f-v73h
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-669
Updated
2026-11-02
NVD 2.9

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

Record
CVE-2026-40228
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-669
Updated
2026-11-02
OSV 2.9

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

Record
CVE-2026-40228
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-669
Updated
2026-11-02
OSVDEBIAN-CVE-2026-40228 3.3

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

Record
DEBIAN-CVE-2026-40228
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2026:7299 7.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7299
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-40228 2.9

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

Record
UBUNTU-CVE-2026-40228
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
systemd
Debian:12
 All versions, plus listed versions
252.11-1252.11-1~deb12u1252.12-1~deb12u1252.14-1~deb12u1252.16-1~deb12u1
Show 45 moreShow less
252.17-1~deb12u1252.18-1~deb12u1252.19-1~deb12u1252.20-1~deb12u1252.21-1~deb12u1252.22-1~deb12u1252.23-1~deb12u1252.24-1~deb12u1252.25-1~deb12u1252.26-1~deb12u1252.26-1~deb12u2252.26-1~deb12u2~bpo11+1252.27-1~deb12u1252.28-1~deb12u1252.29-1~deb12u1252.29-1~deb12u1~bpo11+1252.30-1~deb12u1252.30-1~deb12u2252.31-1~deb12u1252.32-1~deb12u1252.33-1~deb12u1252.36-1~deb12u1252.38-1~deb12u1252.39-1~deb12u1252.39-1~deb12u2252.6-1252.6-1+loong64253-1253-2253-3253-4253.5-1253~rc2-1253~rc3-1254-1254.1-1254.1-2254.1-3254.14-1~bpo12+1254.15-1~bpo12+1254.16-1~bpo12+1254.22-1~bpo12+1254.26-1~bpo12+1254.3-1254.4-1
 None known
systemd
Debian:13
 All versions, plus listed versions
257.13-1~deb13u1257.7-1257.8-1~deb13u1257.8-1~deb13u2257.9-1~deb13u1
Show 35 moreShow less
258-1258.1-1258.1-2258~rc1-1258~rc2-1258~rc2-2258~rc3-1258~rc4-1259-1259.1-1259~rc1-1259~rc2-1259~rc3-1260-1260.1-1260~rc1-1260~rc1-2260~rc2-1260~rc3-1260~rc4-1261-1261-2261.1-1261.1-2261.1-3261.2-1261~rc1-1261~rc2-1261~rc3-1261~rc4-1262-1262~rc1-1262~rc1-2262~rc2-1262~rc3-1
 None known
systemd
Debian:14
 All versions, plus listed versions
257.13-1~deb13u1257.7-1257.8-1~deb13u1257.8-1~deb13u2257.9-1~deb13u1
Show 35 moreShow less
258-1258.1-1258.1-2258~rc1-1258~rc2-1258~rc2-2258~rc3-1258~rc4-1259-1259.1-1259~rc1-1259~rc2-1259~rc3-1260-1260.1-1260~rc1-1260~rc1-2260~rc2-1260~rc3-1260~rc4-1261-1261-2261.1-1261.1-2261.1-3261.2-1261~rc1-1261~rc2-1261~rc3-1261~rc4-1262-1262~rc1-1262~rc1-2262~rc2-1262~rc3-1
 None known
systemd
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-boot-unsigned
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-container
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-devel
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-journal-remote
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-libs
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-networkd
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
Show 23 moreShow less
Affected packages
PackageAffectedFixed
systemd-networkd-defaults
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-oomd-defaults
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-pam
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-resolved
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-rpm-macros
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-shared
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-standalone-repart
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-standalone-shutdown
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-standalone-sysusers
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-standalone-tmpfiles
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-sysusers
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-tests
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-udev
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd-ukify
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
 before 0:260.1-2.1.hum1
0:260.1-2.1.hum1
systemd
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
204-0ubuntu18204-0ubuntu19204-5ubuntu3204-5ubuntu5204-5ubuntu6
Show 40 moreShow less
204-5ubuntu7204-5ubuntu8204-5ubuntu9204-5ubuntu10204-5ubuntu11204-5ubuntu13204-5ubuntu14204-5ubuntu15204-5ubuntu16204-5ubuntu17204-5ubuntu18204-5ubuntu19204-5ubuntu20204-5ubuntu20.2204-5ubuntu20.3204-5ubuntu20.4204-5ubuntu20.5204-5ubuntu20.6204-5ubuntu20.7204-5ubuntu20.8204-5ubuntu20.9204-5ubuntu20.10204-5ubuntu20.11204-5ubuntu20.12204-5ubuntu20.13204-5ubuntu20.14204-5ubuntu20.15204-5ubuntu20.18204-5ubuntu20.19204-5ubuntu20.20204-5ubuntu20.21204-5ubuntu20.22204-5ubuntu20.24204-5ubuntu20.25204-5ubuntu20.26204-5ubuntu20.28204-5ubuntu20.29204-5ubuntu20.31204-5ubuntu20.31+esm2204-5ubuntu20.31+esm3
 None known
systemd
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
225-1ubuntu9227-2ubuntu1227-2ubuntu2228-1ubuntu2228-2ubuntu1
Show 45 moreShow less
228-2ubuntu2228-3ubuntu1228-4ubuntu1228-4ubuntu2228-5ubuntu1228-5ubuntu2228-5ubuntu3228-6ubuntu1229-1ubuntu2229-1ubuntu4229-2ubuntu1229-3ubuntu1229-3ubuntu2229-4ubuntu1229-4ubuntu4229-4ubuntu5229-4ubuntu6229-4ubuntu7229-4ubuntu8229-4ubuntu10229-4ubuntu11229-4ubuntu12229-4ubuntu13229-4ubuntu16229-4ubuntu17229-4ubuntu19229-4ubuntu20229-4ubuntu21229-4ubuntu21.1229-4ubuntu21.2229-4ubuntu21.3229-4ubuntu21.4229-4ubuntu21.5229-4ubuntu21.6229-4ubuntu21.8229-4ubuntu21.9229-4ubuntu21.10229-4ubuntu21.15229-4ubuntu21.16229-4ubuntu21.17229-4ubuntu21.19229-4ubuntu21.21229-4ubuntu21.22229-4ubuntu21.23229-4ubuntu21.27
 None known
systemd
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
234-2ubuntu12235-2ubuntu3235-3ubuntu2235-3ubuntu3237-3ubuntu3
Show 45 moreShow less
237-3ubuntu4237-3ubuntu6237-3ubuntu7237-3ubuntu8237-3ubuntu10237-3ubuntu10.2237-3ubuntu10.3237-3ubuntu10.4237-3ubuntu10.6237-3ubuntu10.9237-3ubuntu10.11237-3ubuntu10.12237-3ubuntu10.13237-3ubuntu10.15237-3ubuntu10.17237-3ubuntu10.19237-3ubuntu10.20237-3ubuntu10.21237-3ubuntu10.22237-3ubuntu10.23237-3ubuntu10.24237-3ubuntu10.25237-3ubuntu10.26237-3ubuntu10.28237-3ubuntu10.29237-3ubuntu10.31237-3ubuntu10.33237-3ubuntu10.38237-3ubuntu10.39237-3ubuntu10.40237-3ubuntu10.41237-3ubuntu10.42237-3ubuntu10.43237-3ubuntu10.44237-3ubuntu10.45237-3ubuntu10.46237-3ubuntu10.47237-3ubuntu10.48237-3ubuntu10.49237-3ubuntu10.50237-3ubuntu10.51237-3ubuntu10.52237-3ubuntu10.53237-3ubuntu10.54237-3ubuntu10.56
 None known
systemd
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
242-7ubuntu3243-2ubuntu1243-3ubuntu1244-3ubuntu1244.1-0ubuntu2
Show 34 moreShow less
244.1-0ubuntu3244.2-1ubuntu1244.3-1ubuntu1245.2-1ubuntu1245.2-1ubuntu2245.4-2ubuntu1245.4-4ubuntu1245.4-4ubuntu3245.4-4ubuntu3.1245.4-4ubuntu3.2245.4-4ubuntu3.3245.4-4ubuntu3.4245.4-4ubuntu3.5245.4-4ubuntu3.6245.4-4ubuntu3.7245.4-4ubuntu3.10245.4-4ubuntu3.11245.4-4ubuntu3.13245.4-4ubuntu3.14245.4-4ubuntu3.15245.4-4ubuntu3.16245.4-4ubuntu3.17245.4-4ubuntu3.18245.4-4ubuntu3.19245.4-4ubuntu3.20245.4-4ubuntu3.21245.4-4ubuntu3.22245.4-4ubuntu3.23245.4-4ubuntu3.24245.4-4ubuntu3.24+esm1245.4-4ubuntu3.24+esm3245.4-4ubuntu3.24+esm4245.4-4ubuntu3.24+esm5245.4-4ubuntu3.24+esm6
 None known
systemd
Ubuntu:22.04:LTS
 All versions, plus listed versions
248.3-1ubuntu8249.5-2ubuntu1249.5-2ubuntu2249.5-2ubuntu3249.5-2ubuntu4
Show 23 moreShow less
249.9-0ubuntu2249.10-0ubuntu1249.10-0ubuntu2249.11-0ubuntu1249.11-0ubuntu2249.11-0ubuntu3249.11-0ubuntu3.1249.11-0ubuntu3.3249.11-0ubuntu3.4249.11-0ubuntu3.6249.11-0ubuntu3.7249.11-0ubuntu3.9249.11-0ubuntu3.10249.11-0ubuntu3.11249.11-0ubuntu3.12249.11-0ubuntu3.15249.11-0ubuntu3.16249.11-0ubuntu3.17249.11-0ubuntu3.19249.11-0ubuntu3.20249.11-0ubuntu3.21249.11-0ubuntu3.22249.11-0ubuntu3.23
 None known
systemd
Ubuntu:24.04:LTS
 All versions, plus listed versions
253.5-1ubuntu6253.5-1ubuntu7255.2-3ubuntu2255.4-1ubuntu5255.4-1ubuntu6
Show 16 moreShow less
255.4-1ubuntu7255.4-1ubuntu8255.4-1ubuntu8.1255.4-1ubuntu8.2255.4-1ubuntu8.4255.4-1ubuntu8.5255.4-1ubuntu8.6255.4-1ubuntu8.8255.4-1ubuntu8.10255.4-1ubuntu8.11255.4-1ubuntu8.12255.4-1ubuntu8.14255.4-1ubuntu8.15255.4-1ubuntu8.16255.4-1ubuntu8.17255.4-1ubuntu8.18
 None known
systemd
Ubuntu:25.10
 All versions, plus listed versions
257.4-1ubuntu3257.6-1ubuntu1257.7-1ubuntu1257.7-1ubuntu3257.8-0ubuntu2
Show 6 moreShow less
257.9-0ubuntu1257.9-0ubuntu2257.9-0ubuntu2.1257.9-0ubuntu2.3257.9-0ubuntu2.4257.9-0ubuntu2.5
 None known
systemd
Ubuntu:26.10
 All versions, plus listed versions
259.5-0ubuntu3261.2-1ubuntu1261.2-1ubuntu2261.3-0ubuntu2261.3-0ubuntu3
 None known
systemd
Ubuntu:26.04:LTS
 All versions, plus listed versions
257.9-0ubuntu2259-1ubuntu2259-1ubuntu3259.3-0ubuntu1259.5-0ubuntu1
Show 5 moreShow less
259.5-0ubuntu2259.5-0ubuntu3259.5-0ubuntu3.3259.5-0ubuntu3.4259.9-0ubuntu0.1
 None known

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-40228 is a low vulnerability (CVSS 2.9) in Systemd, published April 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. No source names a fixed version.

References

Show 53 moreShow less
This page doesn't list everything

Left out here: 149 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open