CRITICAL9.9CVE-2026-48753Incus has an arbitrary file write via path traversal in S3 multipart upload in github.com/lxc/incus from 0
CRITICAL9.9CVE-2026-33945Incus has an abitrary file write through its systemd-creds options in github.com/lxc/incus from 0
HIGH8.8CVE-2026-33898Local Incus UI web server vulnerable to nuthentication bypass in github.com/lxc/incus from 0
HIGH8.1Incus creates nftables rules that partially bypass security options in github.com/lxc/incus
from 0
HIGH7.8Incus vulnerable to local privilege escalation through VM screenshot path in github.com/lxc/incus
from 0
MEDIUM6.5Incus has Nil-Pointer Dereference via S3 Bucket Import in github.com/lxc/incus
from 0
MEDIUM6.5Incus has a Nil-Pointer Dereference Panic via Bucket Metadata in github.com/lxc/incus
from 0
MEDIUM6.5Incus vulnerable to denial of source through crafted bucket backup file in github.com/lxc/incus
from 0, <= 0.7.0
MEDIUM6.5Incus vulnerable to denial of source through crafted bucket backup file in github.com/lxc/incus
from 0
MEDIUM4.3Incus has Blind SSRF via Image Import Preflight HEAD in github.com/lxc/incus
from 0
LOW3.4Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus
from 0
LOW2.3Incus has an OVN TLS Verification that Accepts Peer-Supplied Roots in github.com/lxc/incus
from 0
—Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) in github.com/lxc/incus
from 0
—Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} in github.com/lxc/incus
from 0
—Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) in github.com/lxc/incus
from 0