CVE-2026-16742CWE-269CWE-347privilege-escalation

CVE-2026-16742

Medium · published August 10, 2026

CVSS v3.1
6.7
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00057 · 0.0th percentile
Weaknesses
CWE-269 · Improper Privilege Management; CWE-347 · Improper Verification of Cryptographic Signature
Published
2026-08-10T18:17Z
References (1)
https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv · 98a521c5-3a3e-4e2b-bc27-002067e0463c
EPSS history
Timeline
  • 10 AUG 13:02Z
    systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path
    cvelistv5