3 matches found
EUVD-2026-39025
Ghost: Private IP filtering bypass to make server-side requests to internal services...
5.8CVSS5.4AI score0.00329EPSS
SaveExploits0References5
UBUNTU-CVE-2026-23953
Incus is a system container and virtual machine manager. In versions 6.20.0 and below, a user with the ability to launch a container with a custom YAML configuration e.g a member of the ‘incus’ group can create an environment variable containing newlines, which can be used to add additional...
8.7CVSS7.5AI score0.00494EPSS
SaveExploits1References6
CRLF Injection
Overview Affected versions of this package are vulnerable to CRLF Injection via improper validation of environment variable values in the container configuration process. An attacker can execute arbitrary commands as root on the host by injecting newlines into environment variables, which results...
8.7CVSS6.1AI score0.00494EPSS
SaveExploits1References2
20