msrc vulnerability

CVE-2026-40226 is a systemd-nspawn container escape vulnerability, published in April 2026 and listed by Microsoft’s Security Response Center, affecting systemd versions 233 through 259 before the fixed 260 release and certain backported 257, 258, and 259 patch levels. The uncomfortable part is...

Microsoft lists CVE-2026-41086 as a Windows Admin Center in Azure Portal elevation-of-privilege vulnerability, with the public entry emphasizing confidence in the vulnerability’s existence rather than exposing detailed exploit mechanics as of May 12, 2026. That distinction matters more than it...