C
Vendor security profile5 actively exploited CVEs
canonical
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs116
Critical25
CISA KEV5
Public exploit52
Patch rate%74
Avg. CVSS7.0
12-month vulnerability rate
0
1
0
0
2
5
0
4
0
17
8
2
CVE KEV
CVE severity distribution
116toplam CVE
Critical25 (22%)
High38 (33%)
Medium51 (44%)
Low2 (2%)
Patch and exploitation view
%74
Verified patch
%4
CISA KEV
%45
Public exploit
85Patch available
1Partial
0Workaround
0Vendor: no patch
30Unknown
Latest vulnerabilities
5.3
CVE-2026-104055
Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm
C
Patch verifiedEPSS %0
5.3
CVE-2026-12392
RPC secret disclosure via vendor data endpoint in Canonical MAAS
C
Patch verifiedEPSS %0
5.7
CVE-2026-102371
wsl-pro-service: Ubuntu Pro token exposed via process command-line arguments
C
Patch verifiedEPSS %0
5.8
CVE-2026-87798
LXD client recursive file pull allows directory escape via malicious VM agent
C
Patch status unknownEPSS %0
9.9
CVE-2026-87799
Arbitrary file write on LXD host via symlink in migration stream
C
Patch status unknownEPSS %0
7.7
CVE-2026-97335
Incorrect authorization in LXD storage volume API allows reading volumes from other projects
C
Patch status unknownEPSS %0
9.6
CVE-2026-85185
Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root
C
Patch status unknownEPSS %0
9.9
CVE-2026-85526
Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD
C
Patch verifiedEPSS %1
6.3
CVE-2026-86335
LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse
C
Patch verifiedEPSS %0
4.2
CVE-2026-86334
CLI Path Traversal via Content-Disposition in LXD Image Export/Copy
C
Patch verifiedEPSS %0