{"vulnerability": "cve-2026-4875", "sightings": [{"uuid": "d088ee5b-9fa0-494a-9da5-2866348d82f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48753", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmhl5cg6q2b", "content": "CVE-2026-48753 - incus\nIncus's S3-compatible upload feature lets attackers trick the system into creating files in any location by using specially crafted path names. This could let a malicious user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian14 #CVE #infosec", "creation_timestamp": "2026-08-21T19:10:04.678529Z"}, {"uuid": "ea0c70b2-7370-441b-9f2b-2def5373e7fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmhl5x54b2p", "content": "CVE-2026-48755 - incus\nIncus lets users pick a program to compress backup data, but it only verifies the first word of the command. Extra options are not checked, so an attacker can add commands that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:10:05.560949Z"}, {"uuid": "35768e75-ff09-4c34-8e6d-e5454c00c189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48756", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-xhqx-mgh3-3h7q", "content": "", "creation_timestamp": "2026-06-26T20:35:10.399882Z"}, {"uuid": "0ef73466-4cb5-4219-a249-31e7566de1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48755", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-v6mj-8pf4-hhw4", "content": "", "creation_timestamp": "2026-06-26T20:35:12.796820Z"}, {"uuid": "b20de306-179f-45d1-9391-4f58c3b65b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48754", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-4xg6-52mh-fpw8", "content": "", "creation_timestamp": "2026-06-26T20:35:15.245693Z"}, {"uuid": "a9caf275-e7e0-425f-9236-f165d1f79021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48753", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-ccjc-4qc3-jxqc", "content": "", "creation_timestamp": "2026-06-26T20:35:17.852086Z"}, {"uuid": "f529177d-129a-4eda-89e6-5b8b7fbb015a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48752", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-vxp5-584q-c479", "content": "", "creation_timestamp": "2026-06-26T20:35:20.287647Z"}, {"uuid": "6310132d-d4bc-4520-8a6b-5f4bdc1de306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48751", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-48q5-w887-33wv", "content": "", "creation_timestamp": "2026-06-26T20:35:22.694674Z"}, {"uuid": "4b258560-95f2-4670-a00d-f50dbf3c484b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48750", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-73hr-m85f-64v9", "content": "", "creation_timestamp": "2026-06-26T20:35:25.112721Z"}, {"uuid": "08e7f51d-1199-4f3d-89db-ab1e4ba7d8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpkh3n7jjr2b", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Cybersecurity #Infosec", "creation_timestamp": "2026-07-01T02:15:18.051473Z"}, {"uuid": "a41c4457-9f13-4a6b-994e-4bbcceadaf09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpkhz3v4sb2v", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Potatosecurity #Infosec", "creation_timestamp": "2026-07-01T02:31:46.109687Z"}, {"uuid": "a7e56d71-47e4-472a-98f0-a521277326ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48752", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5fuuafi2e", "content": "\ud83d\udea8 CVE-2026-48752 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48752\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:09.431299Z"}, {"uuid": "5d5f60c3-1bea-44ac-9ec4-8cc444c34925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48750", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5fbwwxz2y", "content": "\ud83d\udea8 CVE-2026-48750 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parame...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48750\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:07:49.761185Z"}, {"uuid": "2dce54a0-de02-4508-95a9-f1db4546e9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48751", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5fmgtlx2c", "content": "\ud83d\udea8 CVE-2026-48751 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48751\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:01.480093Z"}, {"uuid": "96e18788-487f-44cb-9291-49caa0867470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48753", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5g5r24o2u", "content": "\ud83d\udea8 CVE-2026-48753 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload end...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48753\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:18.771903Z"}, {"uuid": "2488fa29-cd29-457b-90d8-b70f90fbf761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5ghbkm72p", "content": "\ud83d\udea8 CVE-2026-48755 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of use...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48755\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:28.785438Z"}, {"uuid": "c181e261-5786-4fa0-8020-bf8dca881eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48752", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3htt243n2d", "content": "CVE-2026-48752 - lxc\nIncus, a container management software, can be tricked into allowing malicious images to read and write files on the host system. This could potentially allow an attacker to execute malicious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:44:04.488058Z"}, {"uuid": "ca320f3f-f284-42c8-9551-194d88e7d3c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48750", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3htunogl2b", "content": "CVE-2026-48750 - lxc\nA vulnerability in Incus allows attackers to write files to arbitrary locations on the host system by creating a specially crafted image. This can potentially lead to unauthorized command\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:44:05.972751Z"}, {"uuid": "bfec68ea-a887-40e6-8090-b4e5157f7a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48753", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3hxgxr2u24", "content": "CVE-2026-48753 - lxc\nA vulnerability in Incus's S3 protocol upload endpoint allows attackers to create arbitrary files on the host, potentially leading to unauthorized command execution. This affects Incus users\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:46:06.232807Z"}, {"uuid": "be45442b-6493-45a3-adb4-e38a6136ab27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3i2y5ikn2f", "content": "CVE-2026-48755 - lxc\nA vulnerability in Incus's backup compression feature allows attackers to write arbitrary files on the host, potentially leading to unauthorized access. This issue affects Incus's backup\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:48:04.654382Z"}, {"uuid": "474e94d1-42df-458d-b7c8-151b5fac68af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48751", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3i6l345g2h", "content": "CVE-2026-48751 - lxc\nIncus has a security issue that allows a malicious user to bypass project restrictions and execute arbitrary commands on the server with root privileges. This is a serious problem because it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:50:05.292062Z"}, {"uuid": "2c63e6ae-909f-4e42-b15f-8eddfc08302d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48750", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmghg5mzy2c", "content": "CVE-2026-48750 - incus\nIncus lets a container specify where command output is saved. If a container tricks Incus into using a symbolic link, it can place files anywhere on the host, such as the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T18:50:05.173659Z"}, {"uuid": "34998007-01f7-4d0f-951a-499002eb246f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48751", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmgzbexvz2y", "content": "CVE-2026-48751 - incus\nIncus snapshots ignore a setting that should block low-level container hooks, so a user can craft a snapshot that runs their own code on the host server. When the snapshot is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:00:04.424052Z"}, {"uuid": "f218039d-a6a8-4b6e-a32d-14881513aded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48752", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmgzca3x62t", "content": "CVE-2026-48752 - incus\nIncus can be tricked with a specially crafted container image or backup to follow a hidden link that points to any folder on the server. This lets an attacker view or overwrite\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:00:05.113701Z"}, {"uuid": "f035a50c-cad2-44e3-bd00-9063bd4182c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48758", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqoodma5yp2c", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-48758 impacts @sigstore/core in 1 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/596\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-15T12:00:51.442081Z"}, {"uuid": "ad864285-f281-4fc6-a5d3-0ff1affdaf4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtplp35oxs27", "content": "\ud83d\udd34 CVE-2026-48755 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, improper validat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48755/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T01:01:50.418219Z"}, {"uuid": "e7d66ddf-3ea6-4028-9526-6b1156183a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48750", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpoyzacmu22", "content": "\ud83d\udd34 CVE-2026-48750 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-outp...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48750/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T02:01:05.567427Z"}, {"uuid": "dc4e8b8c-956b-446f-bdfb-0dc8cd532647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48751", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtq4f5e4jj22", "content": "\ud83d\udd34 CVE-2026-48751 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapsho...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48751/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T06:00:31.097732Z"}, {"uuid": "e2e057d7-6510-4e79-87a2-b118cb75fbd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48752", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtq4fdxxtk27", "content": "\ud83d\udd34 CVE-2026-48752 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, a specially craf...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48752/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T06:00:38.283536Z"}, {"uuid": "3533c01a-e9c5-40fb-b611-334d03ca54d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48753", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtq4fkfeyy24", "content": "\ud83d\udd34 CVE-2026-48753 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48753/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T06:00:44.349692Z"}, {"uuid": "50a6fa12-f024-42c8-b5bb-00b5378f0ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48758", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlwq6g4by2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48758 \u0432 sigstore-js: \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u0442\u0438\u043f\u0430 DSSE\n\n\n\nhttps://kripta.biz/posts/60600EC7-7054-474B-812B-670280D8B257", "creation_timestamp": "2026-07-27T03:18:15.507470Z"}]}