{"action":"Upgrade systemd to 261~rc3-1 or later.","affected":[{"fixed":"261~rc3-1","introduced":"0"}],"component":"systemd","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["261~rc3-1"],"id":"tcs_01M5NQN8Q3NC2D4CG44Q2BEFN6","modified_at":"2026-10-24T10:00:30.896026118Z","published_at":"2026-08-10T14:17:20.760Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-15059","https://security-tracker.debian.org/tracker/CVE-2026-15059"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-15059#Debian:14/systemd","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-15059"}],"summary":"Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation."}