745 matches found
ROS-20260921-73-0073
The vulnerability in the incus is related to the insertion or modification of arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
ROS-20260921-73-0067
The vulnerability in the incus is related to incorrect external management of the name or file. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260921-73-0074
The vulnerability in the incus is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260921-73-0072
The vulnerability in the incus is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...
container management system storagePoolVolumesPost disclosure
The vulnerability of the storagePoolVolumesPost function in the cmd/incusd/storagevolumes.go file of the container management system and the Incus virtual machine manager is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose sensitive...
container management system instancesPost disclosure
The vulnerability of the instancesPost function in the cmd/incusd/instancespost.go file of the container management system and the Incus virtual machine manager is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...
container management system createDependentVolumesFromBackup function Heap Buffer Overflow DoS
The vulnerability of the createDependentVolumesFromBackup function in the internal/server/storage/backend.go file of the container management system and the virtual machine manager Incus is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigg...
Incus uploadDir S3 Arbitrary Command Execution
The vulnerability of the uploadDir function in the internal/server/storage/s3/local/multipart.go file of the container management system and the virtual machine manager Incus is related to improper external manipulation of the file name or path. Exploiting this vulnerability allows a remote...
GO-2026-6318 Incus has a project restriction bypass for custom volume copy across projects in github.com/lxc/incus
Incus has a project restriction bypass for custom volume copy across projects in github.com/lxc/incus...
GO-2026-6319 Incus has a project restriction bypass in instance copy across projects in github.com/lxc/incus
Incus has a project restriction bypass in instance copy across projects in github.com/lxc/incus...
incus-7.4-1.1 on GA media (moderate)
incus-7.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11651-1 Rating: moderate Cross-References: CVE-2026-39402 CVE-2026-47753 CVE-2026-48749 CVE-2026-48750 CVE-2026-48751 CVE-2026-48752 CVE-2026-48753 CVE-2026-48754 CVE-2026-48755 CVE-2026-48756 CVE-2026-48769 CVE-2026-55621 CVE-2026-55622...
ROS-20260901-73-0030
The vulnerability in the incus is related to incorrect external management of the name or file. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260901-73-0033
The vulnerability in the incus is related to incorrect external management of the name or file. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260901-73-0032
The vulnerability in the incus is related to incorrect external management of the name or file. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260901-73-0027
The vulnerability in the incus is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260901-73-0031
The vulnerability in the incus is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...
ROS-20260901-73-0034
The vulnerability in the incus is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260901-73-0028
The vulnerability in the incus is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...