CVE-2026-41685

< 7.0.0

Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads of large amount of data by authenticated

4.3MEDIUM

CVE-2026-41684

< 7.0.0

Incus is a system container and virtual machine manager. Prior to version 7.0.0, backup.GetInfo() trusts the inline backup/index.y

6.5MEDIUM

CVE-2026-41648

< 7.0.0

Incus is a system container and virtual machine manager. Prior to version 7.0.0, user provided image and backup tarballs would be

5.0MEDIUM

CVE-2026-41647

< 7.0.0

Incus is a system container and virtual machine manager. Prior to version 7.0.0, a missing error handling could lead an authentica

6.5MEDIUM

CVE-2026-40251

< 7.0.0

Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage volume

6.5MEDIUM

CVE-2026-40243

< 7.0.0

Incus is a system container and virtual machine manager. In versions before 7.0.0, broken TLS validation logic in the OVN database

4.8MEDIUM

CVE-2026-40197

< 7.0.0

Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage volume

6.5MEDIUM

CVE-2026-40195

< 7.0.0

Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage bucket

6.5MEDIUM

CVE-2026-35527

< 7.0.0

Incus is an open source container and virtual machine manager. In versions prior to 7.0.0, the image import flow issues an outboun

5.0MEDIUM

CVE-2026-33945

< 6.23.0

Incus is a system container and virtual machine manager. Incus instances have an option to provide credentials to systemd in the g

9.9CRITICAL

CVE-2026-33898

< 6.23.0

Incus is a system container and virtual machine manager. Prior to version 6.23.0, the web server spawned by incus webui incorrec

8.8HIGH

CVE-2026-33897

< 6.23.0

Incus is a system container and virtual machine manager. Prior to version 6.23.0, instance template files can be used to cause arb

9.9CRITICAL

CVE-2026-33743

< 6.23.0

Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be

6.5MEDIUM

CVE-2026-33711

< 6.23.0

Incus is a system container and virtual machine manager. Incus provides an API to retrieve VM screenshots. That API relies on the

7.8HIGH

CVE-2026-33542

< 6.23.0

Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint wh

4.8MEDIUM

CVE-2026-23954

<= 6.0.5

Incus is a system container and virtual machine manager. Versions 6.21.0 and below allow a user with the ability to launch a conta

8.7HIGH

CVE-2026-23953

<= 6.0.5

Incus is a system container and virtual machine manager. In versions 6.20.0 and below, a user with the ability to launch a contain

8.7HIGH

CVE-2025-64507

< 6.0.6

Incus is a system container and virtual machine manager. An issue in versions prior to 6.0.6 and 6.19.0 affects any Incus user in

7.8HIGH