{"vulnerability": "cve-2026-48755", "sightings": [{"uuid": "ea0c70b2-7370-441b-9f2b-2def5373e7fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmhl5x54b2p", "content": "CVE-2026-48755 - incus\nIncus lets users pick a program to compress backup data, but it only verifies the first word of the command. Extra options are not checked, so an attacker can add commands that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:10:05.560949Z"}, {"uuid": "0ef73466-4cb5-4219-a249-31e7566de1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48755", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-v6mj-8pf4-hhw4", "content": "", "creation_timestamp": "2026-06-26T20:35:12.796820Z"}, {"uuid": "08e7f51d-1199-4f3d-89db-ab1e4ba7d8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpkh3n7jjr2b", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Cybersecurity #Infosec", "creation_timestamp": "2026-07-01T02:15:18.051473Z"}, {"uuid": "a41c4457-9f13-4a6b-994e-4bbcceadaf09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpkhz3v4sb2v", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Potatosecurity #Infosec", "creation_timestamp": "2026-07-01T02:31:46.109687Z"}, {"uuid": "2488fa29-cd29-457b-90d8-b70f90fbf761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5ghbkm72p", "content": "\ud83d\udea8 CVE-2026-48755 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of use...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48755\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:28.785438Z"}, {"uuid": "be45442b-6493-45a3-adb4-e38a6136ab27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3i2y5ikn2f", "content": "CVE-2026-48755 - lxc\nA vulnerability in Incus's backup compression feature allows attackers to write arbitrary files on the host, potentially leading to unauthorized access. This issue affects Incus's backup\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:48:04.654382Z"}, {"uuid": "ad864285-f281-4fc6-a5d3-0ff1affdaf4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtplp35oxs27", "content": "\ud83d\udd34 CVE-2026-48755 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, improper validat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48755/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T01:01:50.418219Z"}]}