canonical
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting canonical.
- CVE-2026-66897Instance template path traversal allows arbitrary host file write as root9.9
- CVE-2026-77113Path Traversal Vulnerability in apport-unpack
- CVE-2026-61898accountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scripts7.8
- CVE-2026-61897accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts7.8
- CVE-2026-16033Arbitrary file read+write on host via templates/ symlink in malicious image8.5
- CVE-2026-66898Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE9.9
- CVE-2026-63293Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root9.9
- CVE-2026-63294Root RCE via image backup.yaml symlink9.9
- CVE-2026-63295Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`4.3
- CVE-2026-63296Project restriction bypass via instance migration config override9.9
- CVE-2026-63297Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge9.9
- CVE-2026-63298LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration9.9
- CVE-2026-63299Storage volume cross-project move and snapshot restore bypass project disk limits9.9
- CVE-2026-62420Cross-project cluster migration bypasses project restrictions via cluster notification flag9.9
- CVE-2026-63300Cross-project instance move bypasses all project restrictions allowing host command execution9.9