CVE-2026-15226

A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler (snap-confine). The default seccomp security templates generated by the engine to restrict system calls do not filter or reject process operations capable of creating or manipulating file execution flags with set-user-ID attributes. Consequently, an application running within a strictly confined snap environment can successfully compile or drop binaries and apply setuid properties to them. If a compromised or malicious process inside the snap sandbox executes these generated setuid binaries, it can potentially circumvent architectural sandboxing assumptions, drop intended restriction policies, or execute privileged actions inside the container namespace that should otherwise be strictly blocked. The vulnerability has been resolved by hardening the seccomp template engine to block the execution and creation of setuid executables by sandboxed snap processes.

• CWE-250

• https://ubuntu.com/security/CVE-2026-15226

Published

Jul 21, 2026

Last Modified

Jul 21, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-15211The Subscriptions for WooCommerce WordPress plugin before 2.…5.9
• CVE-2026-15212The WPO365 | Login plugin for WordPress is vulnerable to Cro…8.8
• CVE-2026-15213The Welcart e-Commerce WordPress plugin before 2.11.33 does …5.3
• CVE-2026-15214The Subscriptions for WooCommerce WordPress plugin before 2.…4.3
• CVE-2026-15215The Subscriptions for WooCommerce WordPress plugin before 2.…8.8
• CVE-2026-1522A weakness has been identified in Open5GS up to 2.7.6. This …7.5
• CVE-2026-15227Missing authorization in Checkmk <2.5.0p10, <2.4.0p35, <2.3.…5.3
• CVE-2026-15228Kong Kubernetes Ingress Controller (KIC) allows a user with …7.1
• CVE-2026-15229The Pinpoint Booking System WordPress plugin through 2.9.9.…5.3
• CVE-2026-1523Path Traversal vulnerability in Digitek ADT1100 and Digitek …8.7
• CVE-2026-15230The YayPricing WordPress plugin before 3.5.7 does not perfo…8.1
• CVE-2026-15231The Tag, Category, and Taxonomy Manager WordPress plugin be…2.7