CVE-2026-55622

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new projec...

MINI-VM2H-RFRW-4P79

Bulletin has no description...

CVE-2026-48769

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...

MINI-8VVG-R4H7-QJJX

Bulletin has no description...

MINI-264G-R55X-8CRX

Bulletin has no description...

MINI-QMVR-J5H9-W2JV

Bulletin has no description...

MINI-W36X-QFC2-PM4P

Bulletin has no description...

MINI-H2CF-RXV8-PP6G

Bulletin has no description...

MINI-4225-FGJ2-PQP8

Bulletin has no description...

MINI-4RXH-HXRG-8H87

Bulletin has no description...

MINI-V7WV-HHRH-J2PP

Bulletin has no description...

MINI-G428-32CC-8FXM

Bulletin has no description...

MINI-X3J3-GJRR-Q98H

Bulletin has no description...

MINI-77G5-J77M-HFMC

Bulletin has no description...

MINI-6G2H-HXM2-XHXR

Bulletin has no description...

MINI-CR6Q-6JM9-FFQ9

Bulletin has no description...

MINI-QVGF-4X2X-3FXW

Bulletin has no description...

MINI-5JP6-4VMV-R6WP

Bulletin has no description...

MINI-QRQP-Q6HX-P7HP

Bulletin has no description...

CVE-2026-48756

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateCustomVolumeFromBackup in internal/server/storage/backend.go contains an unguarded time.Time dereference on the ExpiresAt field of every volume-snapshot entry in an imported custom-volume backup. An...