Tag
medium
advisory
Incus Image Cache Poisoning Vulnerability
2 rules 1 TTP 3 IOCsA vulnerability exists in Incus where it does not properly verify the combined fingerprint when downloading images from simplestreams servers, allowing an attacker to perform image cache poisoning and potentially expose other tenants to running attacker-controlled images.
incus
image-poisoning
simplestreams
2r
1t
3i
critical
advisory
Incus Instance Template Vulnerability CVE-2026-33897
3 rules 1 TTPA vulnerability in Incus versions prior to 6.23.0 allows for arbitrary read and write access as root on the host server by exploiting a missing chroot isolation in the pongo2 template engine.
incus
template-injection
privilege-escalation
CVE-2026-33897
linux
3r
1t