https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:21:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351894 EUVD-2026-351894 https://cve.radiocsirt.org/vuln/euvd-2026-351894 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63293 <p>A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an image archive, LXD fails to validate whether the metadata.yaml file is a symbolic link. An attacker can exploit this flaw by providing a crafted image archive with a symlinked metadata.yaml file pointing to target file paths on the host system.</p> <p>A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an image archive, LXD fails to validate whether the metadata.yaml file is a symbolic link. An attacker can exploit this flaw by providing a crafted image archive with a symlinked metadata.yaml file pointing to target file paths on the host system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-63293 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21788-1 <p>Security update for lxd</p> <p>Security update for lxd</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:21788-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-63293 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: lxd, Ubuntu:Pro:18.04:LTS: lxd, Ubuntu:20.04:LTS: lxd</p> <p>A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an image archive, LXD fails to validate whether the metadata.yaml file is a symbolic link. An attacker can exploit this flaw by providing a crafted image archive with a symlinked metadata.yaml file pointing to target file paths on the host system.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: lxd, Ubuntu:Pro:18.04:LTS: lxd, Ubuntu:20.04:LTS: lxd</p> <p>A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an image archive, LXD fails to validate whether the metadata.yaml file is a symbolic link. An attacker can exploit this flaw by providing a crafted image archive with a symlinked metadata.yaml file pointing to target file paths on the host system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-63293