CVE catalog
CVE-2026-115370
UBUNTU-CVE-2026-115370
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.36% · Oct 27, 2026
Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that allows restricted project users to use pull mode migration via clustered refresh requests. Attackers with instance creation rights can send a refresh migration request for an existing instance to make the server open outbound TLS websocket connections and probe reachable services.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | incus | 14 | 6.0.4-2 | vulnerable |
| Debian | incus | 14 | 6.0.4-3 | vulnerable |
| Debian | incus | 14 | 6.0.5-1 | vulnerable |
| Debian | incus | 14 | 6.0.5-2 | vulnerable |
| Debian | incus | 14 | 6.0.5-3 | vulnerable |
| Debian | incus | 14 | 6.0.5-4 | vulnerable |
| Debian | incus | 14 | 6.0.5-5 | vulnerable |
| Debian | incus | 14 | 6.0.5-6 | vulnerable |
| Debian | incus | 14 | 6.0.5-7 | vulnerable |
| Debian | incus | 14 | 6.0.5-8 | vulnerable |
| Debian | incus | 14 | 6.0.6-1 | vulnerable |
| Debian | incus | 14 | 6.0.6-2 | vulnerable |
| Debian | incus | 14 | 6.0.6-3 | vulnerable |
| Debian | incus | 14 | 6.14.0-1~exp1 | vulnerable |
| Debian | incus | 14 | 6.15.0-1~exp1 | vulnerable |
| Debian | incus | 14 | 6.16.0-1~exp1 | vulnerable |
| Debian | incus | 14 | 6.17.0-1~exp1 | vulnerable |
| Debian | incus | 14 | 6.20.0-1~exp1 | vulnerable |
| Debian | incus | 14 | 6.21.0-1~exp1 | vulnerable |
| Debian | incus | 14 | 6.22.0-1~exp1 | vulnerable |
| Debian | incus | 14 | 6.23.0-1~exp1 | vulnerable |
| Debian | incus | 14 | 7.0.0-1 | vulnerable |
| Debian | incus | 14 | 7.0.0-1~bpo13+1 | vulnerable |
| Debian | incus | 14 | 7.0.0-2 | vulnerable |
| Debian | incus | 14 | 7.0.0-2~bpo13+1 | vulnerable |
| Debian | incus | 14 | 7.0.0-3 | vulnerable |
| Debian | incus | 14 | 7.0.0-4 | vulnerable |
| Debian | incus | 14 | 7.0.0-5 | vulnerable |
| Debian | incus | 14 | 7.0.0-5~bpo13+1 | vulnerable |
| Debian | incus | 14 | 7.0.1-1 | vulnerable |
| Debian | incus | 14 | 7.0.1-1~bpo13+1 | vulnerable |
| Debian | incus | 14 | 7.0.1-2 | vulnerable |
| Debian | incus | 14 | 7.0.1-2~bpo13+1 | vulnerable |
| Debian | incus | 14 | 7.0.1-3 | vulnerable |
| Debian | incus | 14 | 7.0.1-3~bpo13+1 | vulnerable |
| Debian | incus | 14 | 7.0.1-4 | vulnerable |
| Debian | incus | 14 | 7.0.1-5~bpo13+1 | vulnerable |
| Debian | incus | 14 | 7.0.1-5 | fixed |
| Ubuntu | incus | pro | 6.0.4-2 | vulnerable |
| Ubuntu | incus | pro | 6.0.5-8 | vulnerable |
| Ubuntu | incus | pro | 6.0.5-8ubuntu0.26.04.1~esm1 | vulnerable |
| Ubuntu | incus | 26.10 | 6.0.5-8 | vulnerable |
| Ubuntu | incus | 26.10 | 7.0.1-5 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | incus | deb | 14 | 7.0.1-5 | Not reported | DEBIAN-CVE-2026-115370 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: