incus vulnerabilities and fixes

Recent CVEs affecting incus, with upgrade or downgrade steps. 8 tracked.

incus has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-05-07. Highest priority: CVE-2026-41647 (score 41/100).

• CVE-2026-41648 MEDIUM 5.0 UPGRADE Incus is a system container and virtual machine manager
• CVE-2026-41647 MEDIUM 6.5 UPGRADE Incus is a system container and virtual machine manager
• CVE-2026-41684 MEDIUM 6.5 UPGRADE Incus is a system container and virtual machine manager
• CVE-2026-41685 MEDIUM 4.3 UPGRADE Incus is a system container and virtual machine manager
• CVE-2026-40195 MEDIUM 6.5 UPGRADE Incus is a system container and virtual machine manager
• CVE-2026-40197 MEDIUM 6.5 UPGRADE Incus is a system container and virtual machine manager
• CVE-2026-40251 MEDIUM 6.5 UPGRADE Incus is a system container and virtual machine manager
• CVE-2026-40243 MEDIUM 4.8 UPGRADE Incus is a system container and virtual machine manager

FAQ

How do I fix incus vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is incus being exploited right now?

None of the tracked incus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which incus CVE should I patch first?

CVE-2026-41647 currently ranks highest (41/100): Incus is a system container and virtual machine manager.

RSS feed for incus · ← Back to latest CVEs