https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:01:27.109819+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351893 EUVD-2026-351893 2026-10-03T07:01:27.167751+00:00 EUVD-2026-351893 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63294 fkie_cve-2026-63294 2026-10-03T07:01:27.167785+00:00

A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image or backup archives, LXD fails to properly validate and confine the backup.yaml file when it exists as a symbolic link. An attacker can exploit this flaw by providing a malicious archive with a symlinked backup.yaml file, causing LXD to process unconfined configuration metadata and execute arbitrary commands with root privileges.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-63294 UBUNTU-CVE-2026-63294 2026-10-03T07:01:27.167818+00:00

Affected: Ubuntu:Pro:16.04:LTS: lxd, Ubuntu:Pro:18.04:LTS: lxd, Ubuntu:20.04:LTS: lxd

A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image or backup archives, LXD fails to properly validate and confine the backup.yaml file when it exists as a symbolic link. An attacker can exploit this flaw by providing a malicious archive with a symlinked backup.yaml file, causing LXD to process unconfined configuration metadata and execute arbitrary commands with root privileges.