GO-2026-5810

vendorUSosv

Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) in github.com/lxc/incus

view advisory published 2026-07-07Licence: per source

Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) in github.com/lxc/incus

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-48756US	—	0.38% (32nd)	—	2026-08-21
Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).CreateCustomVolumeFromBackup` in `internal/server/storage/backend.go` contains an ungua…

references

External citations — patches, advisories, analysis.

https://github.com/lxc/incus/security/advisories/GHSA-xhqx-mgh3-3h7qADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan