Skip to content
OpenAdvisories

Package · Go

github.com/lxc/incus/v6/cmd/incusd

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2026-40243

    Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation

    Incus is a system container and virtual machine manager. In versions before 7.0.0, broken TLS validation logic in the OVN database connection logic can allow connections to an attacker's OVN database. The OVN client implementations disable Go standard TLS ser…

    lxc incus incus incus Debian Ubuntu Alpine Go