System	Score	Found at
epss	0.00013	https://api.first.org/data/v1/epss?cve=CVE-2026-39402
epss	0.00013	https://api.first.org/data/v1/epss?cve=CVE-2026-39402
cvssv4	4.3	https://github.com/lxc/lxc/security/advisories/GHSA-3m9j-g9gc-vcvq
ssvc	Track	https://github.com/lxc/lxc/security/advisories/GHSA-3m9j-g9gc-vcvq

Reference id	Reference type	URL
		https://api.first.org/data/v1/epss?cve=CVE-2026-39402
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39402
GHSA-3m9j-g9gc-vcvq		https://github.com/lxc/lxc/security/advisories/GHSA-3m9j-g9gc-vcvq

No exploits are available.

Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H Found at https://github.com/lxc/lxc/security/advisories/GHSA-3m9j-g9gc-vcvq

Attack Vector (AV)	Attack Complexity (AC)	Attack Requirements (AT)	Privileges Required (PR)	User Interaction (UI)	Vulnerable System Impact Confidentiality (VC)	Vulnerable System Impact Integrity (VI)	Vulnerable System Impact Availability (VA)	Subsequent System Impact Confidentiality (SC)	Subsequent System Impact Integrity (SI)	Subsequent System Impact Availability (SA)
network adjacent local physical	low high	none present	none low high	none passive active	high low none	high low none	high low none	high low none	high low none	high low none

---

Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-06T14:57:00Z/ Found at https://github.com/lxc/lxc/security/advisories/GHSA-3m9j-g9gc-vcvq

---

Percentile	0.02125
EPSS Score	0.00013
Published At	May 7, 2026, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2026-04-30T16:23:48.526194+00:00	Debian Importer	Import	https://security-tracker.debian.org/tracker/data/json	38.5.0