PT-2026-48802

Unknown description...

CVE-2026-49387

Unknown description...

CVE-2026-49390

Unknown description...

PT-2026-48805

Unknown description...

UBUNTU-CVE-2026-49388

Unknown description...

PT-2026-48606

Unknown description...

PT-2026-48608

Unknown description...

PT-2026-48607

Unknown description...

PT-2026-48605

Unknown description...

PT-2026-47209

Name of the Vulnerable Software and Affected Versions Incus affected versions not specified Description A nil-pointer dereference exists in the CreateInstanceFromBackup function within the internal/server/storage/backend.go file. An authenticated user with permissions to create instances in any...

PT-2026-47214

Name of the Vulnerable Software and Affected Versions incus versions 6.0.x and 7.0.0 Description An authenticated user with can create storage volumes permissions can cause a denial of service by crashing the incusd daemon. The issue occurs during the processing of an imported custom-volume backu...

PT-2026-47213

Name of the Vulnerable Software and Affected Versions Incus version 7.0.0 Description An authenticated user with can create instances permission can cause a denial of service by crashing the incusd daemon. The issue occurs when the daemon processes an instance backup tarball containing a malforme...

PT-2026-47201

Unknown description...

PT-2026-47223

Name of the Vulnerable Software and Affected Versions guzzlehttp/psr7 versions prior to 2.10.2 Description The library fails to reject ASCII control characters, whitespace, or DEL in first-party URI host components. When an application uses a user-controlled URL to construct a PSR-7 Uri or Reques...

CVE-2025-26843

Unknown description...

PT-2026-47212

Name of the Vulnerable Software and Affected Versions Incus affected versions not specified Description The S3 protocol upload endpoint is susceptible to path traversal, enabling the creation of arbitrary files on the host system. This occurs because the uploadId variable is appended to the uploa...

PT-2026-47222

Name of the Vulnerable Software and Affected Versions guzzlehttp/psr7 versions prior to 2.10.2 Description Improper Host header validation occurs when parsing raw HTTP request messages or deriving a server request URI from server variables. An attacker can provide a malformed Host header containi...

PT-2026-47208

Name of the Vulnerable Software and Affected Versions Dulwich versions prior to 1.2.5 Description An uncontrolled resource consumption issue leads to memory exhaustion and denial-of-service. A client with push access can send a small crafted thin pack where the delta header specifies an excessive...

PT-2026-47215

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 6.4 Symfony versions prior to 7.4 Symfony versions prior to 8.0 Symfony versions prior to 8.1 Description The UrlSanitizer::parse function fails to properly reject certain characters, allowing for visual spoofing of...

PT-2026-47216

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 6.4 Symfony versions prior to 7.4 Symfony versions prior to 8.0 Symfony versions prior to 8.1 Description An issue exists in the...