https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-04T09:55:28.152317+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bdu:2026-15484 bdu:2026-15484 2026-10-04T09:55:28.154632+00:00 bdu:2026-15484 https://db.gcve.eu/vuln/cve-2026-48755 CVE-2026-48755 — Incus has an argument injection in backup compression algorithm leading to AFW and ACE 2026-10-04T09:55:28.154671+00:00

Affected: lxc incus

Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of user-provided backup compression algorithm leads to argument injection in the constructed command line. This leads to an arbitrary file write on the host, possibly leading to arbitrary command execution. Version 7.1.0 patches the issue.