Where
-Infinity
0

Trending

Last week
Last month
Last year

Versions

6.1.0
3
6.0.5
2

go/github.com/lxc/incus/v6/cmd/incusdIncus: Unbounded binary import disk exhaustion

Risk 22
Severity
4.3
First published (updated )
CVE-2026-41685

go/github.com/lxc/incus/v6/cmd/incusdIncus: Nil Dereferences on Restore via Malformed YAML

Risk 38
Severity
6.5
First published (updated )
CVE-2026-41684

go/github.com/lxc/incus/v6/cmd/incusdIncus: Unbounded YAML Metadata Decode via Parsing

Risk 26
Severity
5.3
First published (updated )
CVE-2026-41648

go/github.com/lxc/incus/v6/cmd/incusdIncus: Nil-Pointer Dereference via S3 Bucket Import

Risk 38
Severity
6.5
First published (updated )
CVE-2026-41647

go/github.com/lxc/incus/v6/cmd/incusdIncus out-of-bounds panic in snapshot metadata handling allows denial of service

Risk 40
Severity
7.1
First published (updated )
CVE-2026-40251
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/github.com/lxc/incus/v6/cmd/incusdIncus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation

Risk 32
Severity
2.3
First published (updated )
CVE-2026-40243

go/github.com/lxc/incus/v6/cmd/incusdIncus nil-pointer dereference in custom volume import allows denial of service

Risk 40
Severity
7.1
First published (updated )
CVE-2026-40197

go/github.com/lxc/incus/v6/cmd/incusdIncus nil-pointer dereference in storage bucket import allows denial of service

Risk 40
Severity
7.1
First published (updated )
CVE-2026-40195

go/github.com/lxc/incus/v6/cmd/incusdIncus blind SSRF via image import preflight HEAD request

Risk 27
Severity
5.3
First published (updated )
CVE-2026-35527

Linux Containers IncusAbitrary file write through systemd-creds option

Risk 59
Severity
10
EPSS
0.06%
First published (updated )
CVE-2026-33945
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Incus IncusLocal Incus UI web server vulnerable to nuthentication bypass

Risk 56
Severity
8.8
EPSS
0.06%
First published (updated )
CVE-2026-33898

Canonical IncusIncus vulnerable to arbitrary file read and write through pongo templates

Risk 59
Severity
10
EPSS
0.05%
First published (updated )
CVE-2026-33897

Canonical IncusIncus vulnerable to denial of source through crafted bucket backup file

Risk 27
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2026-33743

Incus IncusIncus vulnerable to local privilege escalation through VM screenshot path

Risk 51
Severity
4.7
EPSS
0.01%
First published (updated )
CVE-2026-33711

Incus IncusIncus does not verify combined fingerprint when downloading images from simplestreams servers

Risk 40
Severity
5.7
First published (updated )
CVE-2026-33542
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/github.com/lxc/incus/v6/cmd/incusdIncus container image templating arbitrary host file read and write

Risk 45
Severity
8.7
EPSS
0.04%
First published (updated )
CVE-2026-23954

go/github.com/lxc/incus/v6Incus container environment configuration newline injection

Risk 45
Severity
8.7
EPSS
0.02%
First published (updated )
CVE-2026-23953

go/github.com/lxc/incus/v6Incus vulnerable to local privilege escalation through custom storage volumes

Risk 76
Severity
8.6
First published (updated )
CVE-2025-64507

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203