CVE-2026-40556: nano
Rejected
AliasesUBUNTU-CVE-2026-40556DEBIAN-CVE-2026-40556openSUSE-SU-2026:11120-1
Published 28-04-2026Last modified 29-04-2026
Rejected
This record was rejected and should not be used. The data below is kept for reference.Vulnerability summary
CVE-2026-40556 is a low (CVSS 2.1) vulnerability in nano.
CVSS score
2.1/10
010
Low · v4.0 (OSV · Debian), selected by version preferenceEPSS scoreNot scoredRisk metrics not yet published.
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 28-04-2026PublishedVulnerability first disclosed.
- 29-04-2026Last modifiedVulnerability information updated.
Description
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVSS metrics
1 score · 1 source · 1 versionLow 2.1Preferred score · OSV · Debian (Ecosystem advisory) · calculated from vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XSourcesSingle source
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- nanoAll versions (No fix recorded) | < 9.0-1
Opensuse1 product
- nano&distro=openSUSE Tumbleweed< 9.1-1.1
Ubuntu1 product
- nanoAll versions (No fix recorded)
3 vendors · 3 products