What is the CVSS score of CVE-2026-23561?

CVE-2026-23561 has a contested CVSS base score of 9.4 from a third party (e.g. CISA-ADP), while the vendor rates it Critical. vuln.today uses the vendor rating as authoritative.

Which versions of Suse are affected by CVE-2026-23561?

A critical local privilege escalation vulnerability (CVE-2026-23561, CVSS 9.4) in Xen hypervisor enables guest virtual machines to escalate privileges and compromise the host system and other tenant…

How to fix or mitigate CVE-2026-23561?

24 hours: Inventory all Xen deployments and determine affected versions from XSA-489 advisory; restrict new guest VM provisioning from untrusted sources. 7 days: Deploy enhanced hypervisor monitoring for suspicious guest behavior; review guest VM isolation profiles and apply strict least-privilege access controls. 30 days: Monitor Xen security advisories for patch release; maintain staged deployment plan for immediate patching when available.

Suse CVE-2026-23561

EUVD-2026-42604 CRITICAL

Execution with Unnecessary Privileges (CWE-250)

2026-05-08

GHSA-35jv-46p3-x4g4

Privilege Escalation Suse

Critical

Disputed · 9.4 Vendor

Severity by source

Sources disagree (Medium–Critical)

Vendor (CNA) PRIMARY

9.4 CRITICAL

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

SUSE

MEDIUM

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 09, 2026 - 16:57 vuln.today

CVSS changed

Jul 09, 2026 - 16:22 NVD

9.4 (CRITICAL)

CVE Published

May 08, 2026 - 06:45 nvd

UNKNOWN (no severity yet)

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

AnalysisAI

Local privilege escalation in the Xen hypervisor, disclosed as one of five issues under Xen Security Advisory XSA-489 (alongside CVE-2026-23559/23560/23562/42486), lets a malicious or compromised guest run code with more privilege than intended and cross the guest/host trust boundary. The CVSS 4.0 vector (AV:L, scope-changed with high confidentiality, integrity and availability impact to subsequent systems) indicates a guest can affect the underlying host and other guests, consistent with the CWE-250 'execution with unnecessary privileges' root cause. No public exploit identified at time of analysis, and it is not listed in CISA KEV.

Same weakness CWE-250 – Execution with Unnecessary Privileges

View all

CVE-2023-52030 CRITICAL POC

9.8

CVE-2025-57119 CRITICAL POC

9.8

CVE-2024-25421 CRITICAL POC

9.8

CVE-2023-46360 HIGH POC

8.8

CVE-2024-6913 CRITICAL POC

9.3

CVE-2022-1808 HIGH POC

8.8

CVE-2022-0071 HIGH POC

8.8

CVE-2022-0070 HIGH POC

8.8

Same technique Privilege Escalation

View all

CVE-2024-0012 CRITICAL POC

9.3

CVE-2025-47812 CRITICAL POC

10.0

CVE-2013-0422 CRITICAL POC

9.8

CVE-2013-0632 CRITICAL POC

9.8

CVE-2024-9474 MEDIUM POC

6.9

CVE-2017-5689 CRITICAL POC

9.8

CVE-2021-20021 CRITICAL POC

9.8

CVE-2017-12635 CRITICAL POC

9.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise High Performance Computing 15 SP7	Affected
SUSE Linux Enterprise Micro 5.3	Affected
SUSE Linux Enterprise Micro 5.4	Affected
SUSE Linux Enterprise Micro 5.5	Affected

CVE-2026-23561 vulnerability details – vuln.today

Back

SUSE Linux Enterprise Module for Basesystem 15 SP7	Affected
SUSE Linux Enterprise Module for Server Applications 15 SP7	Affected
SUSE Linux Enterprise Server 15 SP7	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP4	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP5	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP6	Affected
SUSE Linux Enterprise Module for Server Applications 15 SP4	Affected
SUSE Linux Enterprise Module for Server Applications 15 SP5	Affected
SUSE Linux Enterprise Module for Server Applications 15 SP6	Affected
SUSE Linux Enterprise Server 12 SP5	Affected
SUSE Linux Enterprise Server 12 SP5-LTSS	Affected
SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security	Affected
SUSE Linux Enterprise Server 15 SP4	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	Affected
SUSE Linux Enterprise Server 15 SP5	Affected
SUSE Linux Enterprise Server 15 SP5-LTSS	Affected
SUSE Linux Enterprise Server 15 SP6	Affected
SUSE Linux Enterprise Server 15 SP6-LTSS	Affected
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP5	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP6	Affected
SUSE Manager Proxy 4.3	Affected
SUSE Manager Proxy LTS 4.3	Affected
SUSE Manager Retail Branch Server 4.3	Affected
SUSE Manager Retail Branch Server LTS 4.3	Affected
SUSE Manager Server 4.3	Affected
SUSE Manager Server LTS 4.3	Affected
SUSE CaaS Platform 3.0	Affected
SUSE CaaS Platform 4.0	Affected
SUSE Enterprise Storage 6	Affected
SUSE Enterprise Storage 7	Affected
SUSE Enterprise Storage 7.1	Affected
SUSE Linux Enterprise Desktop 12 SP3	Affected
SUSE Linux Enterprise Desktop 12 SP4	Affected
SUSE Linux Enterprise Desktop 15 SP1	Affected
SUSE Linux Enterprise Desktop 15 SP2	Affected
SUSE Linux Enterprise Desktop 15 SP3	Affected
SUSE Linux Enterprise Desktop 15 SP4	Affected
SUSE Linux Enterprise Desktop 15 SP5	Affected
SUSE Linux Enterprise Desktop 15 SP6	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP6	Affected
SUSE Linux Enterprise Micro 5.0	Affected
SUSE Linux Enterprise Micro 5.1	Affected
SUSE Linux Enterprise Micro 5.2	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP1	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP2	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP3	Affected
SUSE Linux Enterprise Module for Server Applications 15 SP1	Affected
SUSE Linux Enterprise Module for Server Applications 15 SP2	Affected
SUSE Linux Enterprise Module for Server Applications 15 SP3	Affected
SUSE Linux Enterprise Real Time 15 SP2	Affected
SUSE Linux Enterprise Real Time 15 SP3	Affected
SUSE Linux Enterprise Real Time 15 SP4	Affected
SUSE Linux Enterprise Server 12 SP3	Affected
SUSE Linux Enterprise Server 12 SP3-BCL	Affected
SUSE Linux Enterprise Server 12 SP3-ESPOS	Affected
SUSE Linux Enterprise Server 12 SP3-LTSS	Affected
SUSE Linux Enterprise Server 12 SP4	Affected
SUSE Linux Enterprise Server 12 SP4-ESPOS	Affected
SUSE Linux Enterprise Server 12 SP4-LTSS	Affected
SUSE Linux Enterprise Server 15 SP1	Affected
SUSE Linux Enterprise Server 15 SP1-BCL	Affected
SUSE Linux Enterprise Server 15 SP1-LTSS	Affected
SUSE Linux Enterprise Server 15 SP2	Affected
SUSE Linux Enterprise Server 15 SP2-BCL	Affected
SUSE Linux Enterprise Server 15 SP2-LTSS	Affected
SUSE Linux Enterprise Server 15 SP3	Affected
SUSE Linux Enterprise Server 15 SP3-BCL	Affected
SUSE Linux Enterprise Server 15 SP3-LTSS	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP3	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP4	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP1	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP2	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP3	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP5	Affected
SUSE Linux Enterprise Software Development Kit 12 SP3	Affected
SUSE Linux Enterprise Software Development Kit 12 SP4	Affected
SUSE Linux Enterprise Software Development Kit 12 SP5	Affected
SUSE Manager Proxy 4.0	Affected
SUSE Manager Proxy 4.1	Affected
SUSE Manager Proxy 4.2	Affected
SUSE Manager Retail Branch Server 4.0	Affected
SUSE Manager Retail Branch Server 4.1	Affected
SUSE Manager Retail Branch Server 4.2	Affected
SUSE Manager Server 4.0	Affected
SUSE Manager Server 4.1	Affected
SUSE Manager Server 4.2	Affected
SUSE OpenStack Cloud 8	Affected
SUSE OpenStack Cloud 9	Affected
SUSE OpenStack Cloud Crowbar 8	Affected
SUSE OpenStack Cloud Crowbar 9	Affected
openSUSE Leap 15.3	Affected
openSUSE Leap 15.4	Affected
openSUSE Leap 15.5	Affected
openSUSE Leap 15.6	Affected
openSUSE Leap Micro 5.2	Affected
openSUSE Leap Micro 5.3	Affected
openSUSE Leap Micro 5.4	Affected
openSUSE Leap Micro 5.5	Affected

Suse CVE-2026-23561

Severity by source

CVSS VectorVendor

Lifecycle Timeline

Description PRE-NVD

AnalysisAI

Same weakness CWE-250 – Execution with Unnecessary Privileges

Same technique Privilege Escalation

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code