A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1061-1 advisory.

    - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method     (bsc#1259650).
    - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).
    - udev: check for invalid chars in various fields received from the kernel (bsc#1259697).

    Changelog:

    - 6a38d88a42 machined: reject invalid class types when registering machines
    - 8c9a592e5a udev: fix review mixup
    - b57007a917 udev-builtin-net-id: print cescaped bad attributes
    - ee23c7604b udev-builtin-net_id: do not assume the current interface name is ethX
    - 0f63e799e6 udev: ensure tag parsing stays within bounds
    - 046f52ec12 udev: ensure there is space for trailing NUL before calling sprintf
    - 5be21460ce udev: check for invalid chars in various fields received from the kernel
    - 9559607b16 core/cgroup: avoid one unnecessary strjoina()
    - fcae348ca4 core: validate input cgroup path more prudently
    - a3ca6b3031 alloc-util: add strdupa_safe() + strndupa_safe() and use it everywhere
    - 08125d6b06 units: add dep on systemd-logind.service by user@.service

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1040-1 advisory.

    - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method     (bsc#1259650).
    - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).
    - udev: check for invalid chars in various fields received from the kernel (bsc#1259697).

    Changelog:

    - a943e3ce2f machined: reject invalid class types when registering machines
    - 71593f77db udev: fix review mixup
    - 73a89810b4 udev-builtin-net-id: print cescaped bad attributes
    - 0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
    - 40905232e2 udev: ensure tag parsing stays within bounds
    - 7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
    - d018ac1ea3 udev: check for invalid chars in various fields received from the kernel
    - aef6e11921 core/cgroup: avoid one unnecessary strjoina()
    - cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
    - 26a748f727 core: validate input cgroup path more prudently
    - 99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0991-1 advisory.

    This update for systemd fixes the following issue:

    - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method     (bsc#1259650).
    - udev: check for invalid chars in various fields received from the kernel (bsc#1259697).

    Changelog:

     cbf8ee66ee machined: reject invalid class types when registering machines      1a55ad48da udev: fix review mixup      1eba76668c udev-builtin-net-id: print cescaped bad attributes      cbd4b55380 udev: ensure tag parsing stays within bounds      5973d3b1cc udev: ensure there is space for trailing NUL before calling sprintf      f038eb6c8b udev: check for invalid chars in various fields received from the kernel

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-67f57405ee advisory.

    More bugfixes.

    ----

    - A bunch of bugfixes
    - More sanitization for invalid values received from hardware and firmware



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0e8eeb6a8a advisory.

    - A bunch of bugfixes
    - More sanitization for invalid values received from hardware and firmware


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in systemd. The systemd-machined service contains an Improper Access Control     vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop     Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a     specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the     attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with     root privileges on the host system. (CVE-2026-4105)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
303956	SUSE SLES15 Security Update : systemd (SUSE-SU-2026:1061-1)	Nessus	SuSE Local Security Checks	medium
303939	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : systemd (SUSE-SU-2026:1040-1)	Nessus	SuSE Local Security Checks	medium
303575	SUSE SLES12 Security Update : systemd (SUSE-SU-2026:0991-1)	Nessus	SuSE Local Security Checks	medium
302827	Fedora 44 : systemd (2026-67f57405ee)	Nessus	Fedora Local Security Checks	medium
302334	Fedora 43 : systemd (2026-0e8eeb6a8a)	Nessus	Fedora Local Security Checks	medium
302156	Linux Distros Unpatched Vulnerability : CVE-2026-4105	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-4105

high

Tenable Plugins

medium

medium

medium

medium

medium

medium