| CVE-2026-112816 |
Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15,…
|
10.0
Critique
|
30 oct. 2026 |
| CVE-2026-87798 |
Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up…
|
5.8
Moyenne
|
28 sept. 2026 |
| CVE-2026-87799 |
Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10,…
|
9.9
Critique
|
28 sept. 2026 |
| CVE-2026-97335 |
Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later…
|
7.7
Élevée
|
28 sept. 2026 |
| CVE-2026-85185 |
Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8…
|
9.6
Critique
|
28 sept. 2026 |
| CVE-2026-85526 |
Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with…
|
9.9
Critique
|
28 sept. 2026 |
| CVE-2026-86335 |
Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a…
|
6.3
Moyenne
|
28 sept. 2026 |
| CVE-2026-86334 |
Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14,…
|
4.2
Moyenne
|
28 sept. 2026 |
| CVE-2026-66897 |
A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions,…
|
9.9
Critique
|
24 août 2026 |
| CVE-2026-55622 |
Incus has a project restriction bypass in instance copy across projects
|
7.7
Élevée
|
21 août 2026 |
| CVE-2026-55621 |
Incus has a project restriction bypass for custom volume copy across projects
|
7.7
Élevée
|
21 août 2026 |
| CVE-2026-48769 |
Incus has an arbitrary file write on its client due to trusted image hash
|
9.9
Critique
|
21 août 2026 |
| CVE-2026-48755 |
Incus has an argument injection in backup compression algorithm leading to AFW and ACE
|
9.9
Critique
|
21 août 2026 |
| CVE-2026-48752 |
Incus has arbitrary file read+write on host via templates/ symlink in malicious image
|
9.9
Critique
|
21 août 2026 |
| CVE-2026-48751 |
Incus has a restricted project bypass leading to arbitrary command execution
|
9.9
Critique
|
21 août 2026 |
| CVE-2026-48750 |
Incus has an arbitrary file write on host via `exec-output` symlink in crafted image
|
9.9
Critique
|
21 août 2026 |
| CVE-2026-48749 |
Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image
|
9.9
Critique
|
21 août 2026 |
| CVE-2026-16033 |
A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file…
|
8.5
Élevée
|
12 août 2026 |
| CVE-2026-66898 |
A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and…
|
9.9
Critique
|
12 août 2026 |
| CVE-2026-63293 |
A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host…
|
9.9
Critique
|
12 août 2026 |
| CVE-2026-63294 |
A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system
|
9.9
Critique
|
12 août 2026 |
| CVE-2026-63295 |
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container…
|
4.3
Moyenne
|
12 août 2026 |
| CVE-2026-63296 |
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions…
|
9.9
Critique
|
12 août 2026 |
| CVE-2026-63297 |
An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authenticated…
|
9.9
Critique
|
12 août 2026 |
| CVE-2026-63298 |
An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an…
|
8.7
Élevée
|
12 août 2026 |