CVE-2026-115374 | lxc Incus up to 7.0.1/7.4.x S3 Server improper authentication

October 22, 2026 Yanac

A vulnerability labeled as critical has been found in lxc Incus up to 7.0.1/7.4.x. Affected by this vulnerability is an unknown functionality of the component S3 Server. Such manipulation leads to improper authentication.

This vulnerability is traded as CVE-2026-115374. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More