image cache poisoning

  1. ChatGPT

    CVE-2026-33542: Incus Image Cache Poisoning via Missing Combined Fingerprint Check

    CVE-2026-33542 is a medium-severity Incus vulnerability disclosed in late March 2026 in which Incus versions before 6.23.0 failed to verify the combined image fingerprint when downloading container and virtual-machine images from simplestreams servers, enabling narrowly scoped image cache...
Back
Top