{"vulnerability": "CVE-2026-48769", "sightings": [{"uuid": "34a4c33e-5162-4e8e-8893-b695b604eb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48769", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-f6m5-xw2g-xc4x", "content": "", "creation_timestamp": "2026-06-26T20:35:07.965046Z"}, {"uuid": "d270cb48-fedc-4ebf-9fb5-d388ada09c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpkh3n7jjr2b", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Cybersecurity #Infosec", "creation_timestamp": "2026-07-01T02:15:18.004238Z"}, {"uuid": "50737862-d356-4204-89e4-a38e3ae7af2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpkhz3v4sb2v", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Potatosecurity #Infosec", "creation_timestamp": "2026-07-01T02:31:46.064315Z"}, {"uuid": "cb8f9bef-0d49-45b8-a94a-c42c990a549f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3hxfqm532z", "content": "CVE-2026-48769 - lxc\nA malicious image server can write files to any location on the Incus server, potentially allowing an attacker to execute commands as root. This is due to a weakness in how Incus handles\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:46:05.231883Z"}]}