https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T08:09:32.627087+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-115370 fkie_cve-2026-115370 2026-10-23T08:09:32.627948+00:00

Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that allows restricted project users to use pull mode migration via clustered refresh requests. Attackers with instance creation rights can send a refresh migration request for an existing instance to make the server open outbound TLS websocket connections and probe reachable services.

 https://db.gcve.eu/vuln/ghsa-7vwr-wj2h-fm66 GHSA-7vwr-wj2h-fm66 2026-10-23T08:09:32.627997+00:00

Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that allows restricted project users to use pull mode migration via clustered refresh requests. Attackers with instance creation rights can send a refresh migration request for an existing instance to make the server open outbound TLS websocket connections and probe reachable services.