https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:13:26.088575+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-350827 EUVD-2026-350827 2026-10-04T02:13:26.268946+00:00 EUVD-2026-350827 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63623 fkie_cve-2026-63623 2026-10-04T02:13:26.268997+00:00

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.

 https://cve.radiocsirt.org/vuln/ghsa-m7jx-933m-5cqr GHSA-m7jx-933m-5cqr 2026-10-04T02:13:26.269032+00:00

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-63623 msrc_CVE-2026-63623 — Libvirt: information disclosure via world-readable storage volume images during clone/convert 2026-10-04T02:13:26.269051+00:00 msrc_CVE-2026-63623 https://cve.radiocsirt.org/vuln/oesa-2026-3831 OESA-2026-3831 — libvirt security update 2026-10-04T02:13:26.269069+00:00

Affected: openEuler:24.03-LTS-SP1: libvirt

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es):

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.(CVE-2026-63623)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11455-1 openSUSE-SU-2026:11455-1 — libvirt-12.6.0-1.1 on GA media 2026-10-04T02:13:26.269096+00:00

libvirt-12.6.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:23445-1 SUSE-SU-2026:23445-1 — Security update for libvirt 2026-10-04T02:13:26.269112+00:00

Security update for libvirt

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-63623 UBUNTU-CVE-2026-63623 2026-10-04T02:13:26.269129+00:00

Affected: Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:Pro:16.04:LTS: libvirt, Ubuntu:Pro:18.04:LTS: libvirt, Ubuntu:Pro:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt, Ubuntu:24.04:LTS: libvirt, Ubuntu:26.04:LTS: libvirt, Ubuntu:26.04:LTS: libvirt-hwe

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2724 WID-SEC-W-2026-2724 — libvirt: Mehrere Schwachstellen ermöglichen 2026-10-04T02:13:26.269160+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in libvirt ausnutzen, um Administratorrechte zu erlangen und vertrauliche Informationen offenzulegen.