EUVD-2026-106708

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Image Export SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In...

EUVD-2026-106705

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Image Export SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In...

EUVD-2026-106707

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Image Export SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In...

CVE-2026-91460

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Image Export SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In...

CVE-2026-91457

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Image Export SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In...

CVE-2026-91459

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Image Export SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In...

CVE-2026-91460

A vulnerability exists in the Outside In Image Export SDK component of the Oracle Outside In Technology product within Oracle Fusion Middleware (version 8.5.8 ). This easily exploitable flaw allows an unauthenticated attacker with access to the infrastructure to compromise the product, potentiall...

CVE-2026-91457

A vulnerability exists in the Outside In Image Export SDK component of the Oracle Outside In Technology product (part of Oracle Fusion Middleware), specifically affecting version 8.5.8 . An unauthenticated attacker with access to the infrastructure can compromise the product, potentially leading ...

CVE-2026-91459

The Oracle Outside In Technology product, specifically within the Oracle Fusion Middleware (component: Outside In Image Export SDK ), is affected by CVE-2026-91459 in version 8.5.8 . An unauthenticated attacker with logon access to the infrastructure where the software executes can compromise the...

Linux Distros Unpatched Vulnerability : CVE-2026-86334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows...

CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

UBUNTU-CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

CVE-2026-86334

Canonical LXD versions 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms are vulnerable to a path traversal flaw in the CLI client image export and copy functionality. A remote malicious or machine-in-the-middle image server can exploit this by sending a crafted Content-Disposition h...

EUVD-2026-88255

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

CVE-2026-86334 CLI Path Traversal via Content-Disposition in LXD Image Export/Copy

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

PT-2026-99891

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.0.2 through 4.0.13 Canonical LXD version 5.0.10 Canonical LXD version 5.21.8 Canonical LXD version 6.10 Description A path traversal issue exists in the CLI client image export and copy functionality. A remote maliciou...

openSUSE 16 : Recommended update for gimp (SUSE-SU-openSUSE-RU-2026:20168-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-openSUSE-RU-2026:20168-1 advisory. Changes in gimp: - Update to 3.0.8 - Font Loading Performance - Improvements in start-up time for users with a large number of fonts was...

Information Disclosure

lxd is vulnerable to Information Disclosure. The vulnerability is due to improper validation in the image export API, where crafted requests using wildcard fingerprints allow unauthenticated network attackers to probe and determine whether projects exist...