[ Vendor · 9 CVEs ]

lxc

CVEs affecting lxc published in the last 30 days, plus any lxc CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-115375 22 Oct 2026 CVSS 9.9 lxc incusIncus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to create instances to write files…
CVE-2026-115376 22 Oct 2026 CVSS 7.7 lxc incusIncus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restricted clients to copy volumes…
CVE-2026-115377 22 Oct 2026 CVSS 9.9 lxc incusIncus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources…
CVE-2026-115378 22 Oct 2026 CVSS 5.8 lxc incusIncus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in sftpRecursivePullFile that allows a…
CVE-2026-115370 22 Oct 2026 CVSS 4.3 lxc incusIncus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that allows restricted project…
CVE-2026-115371 22 Oct 2026 CVSS 7.1 lxc incusIncus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization vulnerability that allows restricted TLS…
CVE-2026-115372 22 Oct 2026 CVSS 8.5 lxc incusIncus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.create_options through volume…
CVE-2026-115373 22 Oct 2026 CVSS 6.3 lxc incusIncus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability in GET /1.0/operations/{uuid} that lets…
CVE-2026-115374 22 Oct 2026 CVSS 7.1 lxc incusIncus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3 server that allows presigned URL holders to…