{"schema_version":1,"title":"Canonical Incus vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 3 vulnerabilities in Canonical Incus: 1 in the last 7 days and 3 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, Incus arbitrary file write via trusted image hash, was published on 6 November 2026. 3 vulnerabilities in the last four weeks, up from none in the four before. 1 critical against 0.","url":"https://junglewise.ai/threats/technologies/canonical-incus","json_url":"https://junglewise.ai/threats/technologies/canonical-incus.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/canonical-incus","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":2,"all_time":3,"critical":1,"exploited":0,"last_7_days":1,"last_30_days":3,"last_90_days":3,"last_365_days":3},"latest":[{"cvss":9.9,"slug":"lxd-has-arbitrary-file-write-on-client-due-to-trusted-image-hash-072dacee","title":"Incus arbitrary file write via trusted image hash","severity":"critical","exploited":false,"published_at":"2026-11-06T19:36:55+00:00","url":"https://junglewise.ai/threats/lxd-has-arbitrary-file-write-on-client-due-to-trusted-image-hash-072dacee"},{"cve":"CVE-2026-115376","cvss":7.7,"slug":"cve-2026-115376-incus-7-0-1-before-7-0-2-and-7-2-0-before-7-5-0-contains-an","title":"Incus authorization bypass in custom volume copy","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:44.32+00:00","url":"https://junglewise.ai/threats/cve-2026-115376-incus-7-0-1-before-7-0-2-and-7-2-0-before-7-5-0-contains-an"},{"cve":"CVE-2026-115374","cvss":7.1,"slug":"cve-2026-115374-incus-7-0-0-before-7-0-2-and-7-1-0-before-7-5-0-contains-a","title":"Incus signature verification bypass in S3 server","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:43.953+00:00","url":"https://junglewise.ai/threats/cve-2026-115374-incus-7-0-0-before-7-0-2-and-7-1-0-before-7-5-0-contains-a"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Canonical LXD","slug":"lxd","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/lxd"},{"name":"Canonical Ubuntu","slug":"ubuntu","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/ubuntu"},{"name":"Canonical Juju","slug":"juju","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/juju"},{"name":"Canonical Ubuntu-Linux","slug":"ubuntu-20-04-lts","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/ubuntu-20-04-lts"},{"name":"Canonical Apport","slug":"apport","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/apport"},{"name":"Canonical Snapd","slug":"snapd","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/snapd"},{"name":"Canonical Ubuntu-Pro-Client","slug":"ubuntu-pro-client","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ubuntu-pro-client"}],"technology":{"hub":true,"name":"Canonical Incus","slug":"canonical-incus","vendor":{"hub":true,"name":"Canonical","slug":"canonical","url":"https://junglewise.ai/threats/vendors/canonical"},"aliases":[],"category":"container-orchestration","url":"https://junglewise.ai/threats/technologies/canonical-incus"},"most_severe":[{"cvss":9.9,"slug":"lxd-has-arbitrary-file-write-on-client-due-to-trusted-image-hash-072dacee","title":"Incus arbitrary file write via trusted image hash","severity":"critical","exploited":false,"published_at":"2026-11-06T19:36:55+00:00","url":"https://junglewise.ai/threats/lxd-has-arbitrary-file-write-on-client-due-to-trusted-image-hash-072dacee"},{"cve":"CVE-2026-115376","cvss":7.7,"slug":"cve-2026-115376-incus-7-0-1-before-7-0-2-and-7-2-0-before-7-5-0-contains-an","title":"Incus authorization bypass in custom volume copy","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:44.32+00:00","url":"https://junglewise.ai/threats/cve-2026-115376-incus-7-0-1-before-7-0-2-and-7-2-0-before-7-5-0-contains-an"},{"cve":"CVE-2026-115374","cvss":7.1,"slug":"cve-2026-115374-incus-7-0-0-before-7-0-2-and-7-1-0-before-7-5-0-contains-a","title":"Incus signature verification bypass in S3 server","severity":"high","exploited":false,"published_at":"2026-10-22T19:17:43.953+00:00","url":"https://junglewise.ai/threats/cve-2026-115374-incus-7-0-0-before-7-0-2-and-7-1-0-before-7-5-0-contains-a"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}