CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9 matches found

SUSE CVE•added 2026/05/08 2:21 a.m.•7 views

SUSE CVE-2026-41684

Incus is a system container and virtual machine manager. Prior to version 7.0.0, backup.GetInfo trusts the inline backup/index.yaml config when present and only falls back to parsing the legacy backup/container/backup.yaml file if result.Config == nil. As a result, an archive can carry a valid...

6.5CVSS5.7AI score0.00408EPSS

Exploits1References3

NVD•added 2026/05/07 2:16 p.m.•10 views

CVE-2026-41684

6.5CVSS0.00408EPSS

Exploits1References2

Cvelist•added 2026/05/07 1:8 p.m.•36 views

CVE-2026-41684 Incus: Nil Dereferences on Restore via Malformed YAML

6.5CVSS0.00408EPSS

Exploits1References2

CVE•added 2026/05/07 1:8 p.m.•23 views

CVE-2026-41684

Summary of CVE-2026-41684 (Incus): An authenticated user who can import instance backups may crash the Incus daemon during restore when a crafted backup archive includes a valid inline backup/index.yaml but a malformed legacy backup.yaml that omits the container section. The vulnerability arises ...

6.5CVSS5.7AI score0.00408EPSS

Exploits1References2Affected Software1

Snyk•added 2026/05/04 7:45 p.m.•6 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the restore process when handling a crafted backup archive containing a valid backup/index.yaml and a malformed legacy backup.yaml file that omits the container section. An attacker can cause the daemon to...

7.1CVSS5.8AI score0.00408EPSS

Exploits1References2

Snyk•added 2026/05/04 7:45 p.m.•8 views

NULL Pointer Dereference

7.1CVSS5.8AI score0.00408EPSS

Exploits1References2