{"vulnerability": "CVE-2026-85526", "sightings": [{"uuid": "51042258-a0f4-4ae3-9dbf-bfc52b080962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85526", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlgu5vxuk2u", "content": "CVE-2026-85526 - lxd\nCanonical LXD running on Linux with the Btrfs storage driver can be tricked by a specially crafted backup file. An attacker who already has permission to create containers can replace or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxd #canonical #CVE #infosec", "creation_timestamp": "2026-09-28T13:40:07.556620Z"}, {"uuid": "93baf1ee-b165-415a-972d-93cf7d727112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85526", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwljh6gbob2k", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85526: Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD\nCVSS 9.9\nhttps://beta.vulnsea.com/cve/CVE-2026-85526\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-28T14:26:33.158089Z"}]}