CVE-2025-7044

An Improper Input Validation vulnerability exists in the user websocket handler of MAAS. An authenticated, unprivileged attacker can intercept a user.update websocket request and inject the issuperuser property set to true. The server improperly validates this input, allowing the attacker to...

EUVD-2013-1098

Malware in sbrugna...

EUVD-2014-1502

Malware in sbrugna...

PT-2025-30248 · Canonical · Maas

Name of the Vulnerable Software and Affected Versions: MAAS affected versions not specified Description: Due to insufficient verification, an attacker could bypass authentication checks and run Remote Procedure Call RPC commands in a region using a malicious client. Recommendations: At the moment...