Where
-Infinity
0

Trending

Last week
Last month
Last year

Canonical LXDPath traversal via unvalidated instance name in backup tarball restore enables root file write / RCE

Risk 82
Severity
9.9
First published (updated )
CVE-2026-66898

Canonical LXDArbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

Risk 82
Severity
9.9
First published (updated )
CVE-2026-63293

Canonical LXDRoot RCE via image backup.yaml symlink

Risk 82
Severity
9.9
First published (updated )
CVE-2026-63294

Canonical LXDProject restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`

Risk 22
Severity
4.3
First published (updated )
CVE-2026-63295

Canonical LXDProject restriction bypass via instance migration config override

Risk 82
Severity
9.9
First published (updated )
CVE-2026-63296
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical LXDCross-project instance copy bypasses target project restrictions via TOCTOU in config merge

Risk 82
Severity
9.9
First published (updated )
CVE-2026-63297

Canonical LXDStorage volume cross-project move and snapshot restore bypass project disk limits

Risk 82
Severity
9.9
First published (updated )
CVE-2026-63299

Canonical LXDCross-project cluster migration bypasses project restrictions via cluster notification flag

Risk 82
Severity
9.9
First published (updated )
CVE-2026-62420

Canonical LXDSSRF via image import from URL allows internal network probing by authenticated users

Risk 26
Severity
5
First published (updated )
CVE-2026-28385

LXD LXDLXD Snapshot Import Privilege Escalation Vulnerability

Risk 49
Severity
7.2
EPSS
0.37%
First published (updated )
CVE-2026-9640
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical LXDAuthenticated Denial of Service via Malicious Backup Tarball in LXD

Risk 27
Severity
6.5
EPSS
0.42%
First published (updated )
CVE-2026-9639

Canonical LXD (devLXD API)Broken Access Control in Canonical LXD DevLXD API

Risk 68
Severity
9.6
First published (updated )
CVE-2026-12411

Canonical LXDUpdate of type field in restricted TLS certificate allows privilege escalation to cluster admin

Risk 72
Severity
9.1
First published (updated )
CVE-2026-34179

Canonical LXDImporting a crafted backup leads to project restriction bypass

Risk 72
Severity
9.1
First published (updated )
CVE-2026-34178

Canonical LXDVM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf

Risk 72
Severity
9.1
First published (updated )
CVE-2026-34177
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical LXDAuthorization Bypass in LXD GET /1.0/certificates Endpoint

Risk 16
Severity
2.1
EPSS
0.02%
First published (updated )
CVE-2026-3351

Canonical LXDPath Traversal in LXD Instance Log File Retrieval

Risk 40
Severity
7.1
First published (updated )
CVE-2025-54293

Canonical LXD-UIClient-Side Path Traversal in LXD-UI

Risk 24
Severity
4.8
First published (updated )
CVE-2025-54292

Canonical LXDPrivilege Escalation via WebSocket Connection Hijacking in LXD Operations API

Risk 60
Severity
8.1
First published (updated )
CVE-2025-54289

Canonical LXDCSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI

Risk 77
Severity
8.8
First published (updated )
CVE-2025-54286
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Canonical LXDLXD vulnerabilities

Risk 55
Advisory
USN-8447-2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203