Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Canonical Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-66897`Instance template path traversal allows arbitrary host file write as root	Exploitation statusNot known exploited	FixYes	Affected productLXD	Published08/24/2026	SeverityCritical
`CVE-2026-77113`Path Traversal Vulnerability in apport-unpack	Exploitation statusNot known exploited	FixYes	Affected productapport	Published08/20/2026	SeverityMedium
`CVE-2026-61898`accountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scripts	Exploitation statusNot known exploited	FixYes	Affected productaccountsservice	Published08/20/2026	SeverityHigh
`CVE-2026-61897`accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts	Exploitation statusNot known exploited	FixYes	Affected productaccountsservice	Published08/20/2026	SeverityHigh
`CVE-2026-16033`Arbitrary file read+write on host via templates/ symlink in malicious image	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published08/12/2026	SeverityHigh
`CVE-2026-66898`Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published08/12/2026	SeverityCritical
`CVE-2026-63293`Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published08/12/2026	SeverityCritical
`CVE-2026-63294`Root RCE via image backup.yaml symlink	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published08/12/2026	SeverityCritical
`CVE-2026-63295`Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published08/12/2026	SeverityMedium
`CVE-2026-63296`Project restriction bypass via instance migration config override	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published08/12/2026	SeverityCritical
`CVE-2026-63297`Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published08/12/2026	SeverityCritical
`CVE-2026-63298`LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published08/12/2026	SeverityHigh
`CVE-2026-63299`Storage volume cross-project move and snapshot restore bypass project disk limits	Exploitation statusNot known exploited	FixYes	Affected productLXD	Published08/12/2026	SeverityHigh
`CVE-2026-62420`Cross-project cluster migration bypasses project restrictions via cluster notification flag	Exploitation statusNot known exploited	FixYes	Affected productLXD	Published08/12/2026	SeverityCritical
`CVE-2026-63300`Cross-project instance move bypasses all project restrictions allowing host command execution	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published08/12/2026	SeverityCritical
`CVE-2026-8933`snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup	Exploitation statusNot known exploited	FixYes	Affected productUbuntu 26.04 LTS	Published07/21/2026	SeverityHigh
`CVE-2026-15226`snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates	Exploitation statusNot known exploited	FixYes	Affected productUbuntu 26.04 LTS	Published07/21/2026	SeverityHigh
`CVE-2024-5300`AppArmor Base Profile Misconfiguration in snapd Permits Confined Snaps Unauthorized Access to Hashed Passwords via systemd-userdbd	Exploitation statusNot known exploited	FixYes	Affected productUbuntu 26.04 LTS	Published07/21/2026	SeverityMedium
`CVE-2026-12391`ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs	Exploitation statusNot known exploited	FixYes	Affected productubuntu-pro-client (ubuntu-advantage-tools)	Published07/16/2026	SeverityMedium
`CVE-2026-11386`ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution	Exploitation statusNot known exploited	FixYes	Affected productubuntu-pro-client (ubuntu-advantage-tools)	Published07/16/2026	SeverityCritical
`CVE-2026-9494`ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line	Exploitation statusNot known exploited	FixYes	Affected productubuntu-pro-client (ubuntu-advantage-tools)	Published07/16/2026	SeverityMedium
`CVE-2026-10037`Sandbox Escape in Ubuntu OpenJDK Packages via xdg-desktop-portal	Exploitation statusNot known exploited	FixYes	Affected productUbuntu	Published07/08/2026	SeverityHigh
`CVE-2026-28385`SSRF via image import from URL allows internal network probing by authenticated users	Exploitation statusNot known exploited	FixYes	Affected productLXD	Published06/26/2026	SeverityMedium
`CVE-2026-9640`LXD Snapshot Import Privilege Escalation Vulnerability	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published06/26/2026	SeverityHigh
`CVE-2026-9639`Authenticated Denial of Service via Malicious Backup Tarball in LXD	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published06/26/2026	SeverityMedium
`CVE-2026-12411`Broken Access Control in Canonical LXD DevLXD API	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published06/26/2026	SeverityHigh
`CVE-2026-12249`Canonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment	Exploitation statusNot known exploited	FixYes	Affected productUbuntu 22.04 LTS	Published06/22/2026	SeverityCritical
`CVE-2026-10720`MicroCeph path traversal issue in the remote-import API	Exploitation statusNot known exploited	FixYes	Affected productMicroceph	Published06/19/2026	SeverityMedium
`CVE-2026-47337`NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published05/28/2026	SeverityLow
`CVE-2026-47336`Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published05/28/2026	SeverityLow
`CVE-2026-47335`NULL pointer dereference in Ubuntu Linux AppArmor notification handling	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published05/28/2026	SeverityMedium
`CVE-2026-47334`Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published05/28/2026	SeverityMedium
`CVE-2026-47333`Out-of-bounds read in Ubuntu Linux AppArmor notification handling	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published05/28/2026	SeverityHigh
`CVE-2026-47332`Out-of-bounds read in Ubuntu Linux AppArmor notification handling	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published05/28/2026	SeverityMedium
`CVE-2026-47331`Use-after-free in Ubuntu Linux AppArmor notification handling	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published05/28/2026	SeverityHigh
`CVE-2026-47330`Use of uninitialized value in Ubuntu Linux AppArmor notification handling	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published05/28/2026	SeverityLow
`CVE-2026-47329`Incorrect validation of field size in Ubuntu Linux AppArmor notification responses	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published05/28/2026	SeverityLow
`CVE-2026-47328`Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published05/28/2026	SeverityMedium
`CVE-2026-47327`NULL pointer dereference in Ubuntu Linux AppArmor notification handling	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published05/28/2026	SeverityLow
`CVE-2026-47326`Memory leak in Ubuntu Linux AppArmor large notification response allocation	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published05/28/2026	SeverityMedium
`CVE-2026-49237`Local Privilege Escalation in Canonical Multipass	Exploitation statusNot known exploited	FixYes	Affected productMultipass	Published05/28/2026	SeverityHigh
`CVE-2026-49238`SFTP Server VM Escape in Canonical Multipass	Exploitation statusPublic exploit	FixYes	Affected productMultipass	Published05/28/2026	SeverityHigh
`CVE-2018-25306`PDFunite 0.41.0 Buffer Overflow via Malformed PDF	Exploitation statusPublic exploit	FixNot confirmed	Affected productPDFunite	Published04/29/2026	SeverityMedium
`CVE-2026-6970`authd Denial of Service and Local Privilege Escalation	Exploitation statusNot known exploited	FixYes	Affected productauthd	Published04/27/2026	SeverityHigh
`CVE-2026-31431`crypto: algif_aead - Revert to operating out-of-place	Exploitation statusKEV	FixYes	Affected productLinux	Published04/22/2026	SeverityHigh
`CVE-2026-6369`Exposed Session Token in canonical-livepatch client snap	Exploitation statusNot known exploited	FixYes	Affected productcanonical-livepatch	Published04/20/2026	SeverityMedium
`CVE-2026-5412`Juju CloudSpec API could leak senstive information	Exploitation statusNot known exploited	FixYes	Affected productJuju	Published04/10/2026	SeverityCritical
`CVE-2026-5774`Juju API Server Denial of Service and Authentication Replay via Unsynchronized Token Map	Exploitation statusPublic exploit	FixYes	Affected productJuju	Published04/10/2026	SeverityMedium
`CVE-2025-14551`Senstive information disclosure was affecting subiquity	Exploitation statusNot known exploited	FixYes	Affected productUbuntu	Published04/09/2026	SeverityLow
`CVE-2025-15480`Senstive information disclosure was affecting ubuntu-desktop-provision	Exploitation statusNot known exploited	FixYes	Affected productUbuntu	Published04/09/2026	SeverityLow
`CVE-2026-34179`Update of type field in restricted TLS certificate allows privilege escalation to cluster admin	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published04/09/2026	SeverityCritical
`CVE-2026-34178`Importing a crafted backup leads to project restriction bypass	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published04/09/2026	SeverityCritical
`CVE-2026-34177`VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published04/09/2026	SeverityCritical
`CVE-2025-68153`Juju: Resource poisoning	Exploitation statusPublic exploit	FixYes	Affected productjuju	Published04/03/2026	SeverityHigh
`CVE-2025-68152`Juju: Read All Controller Logs From Compromised Workload	Exploitation statusNot known exploited	FixYes	Affected productjuju	Published04/03/2026	SeverityMedium
`CVE-2026-4370`Improper TLS Client/Server authentication and certificate verification on Database Cluster	Exploitation statusPublic exploit	FixYes	Affected productJuju	Published04/01/2026	SeverityCritical
`CVE-2026-32694`Insecure Direct Object Reference attack via predictable secret ID in Juju	Exploitation statusPublic exploit	FixYes	Affected productJuju	Published03/18/2026	SeverityMedium
`CVE-2026-32693`Unauthorized access to Kubernetes secrets in Juju	Exploitation statusNot known exploited	FixYes	Affected productJuju	Published03/18/2026	SeverityHigh
`CVE-2026-32692`Unauthorized update of out-of-scope Vault secrets	Exploitation statusNot known exploited	FixYes	Affected productJuju	Published03/18/2026	SeverityHigh
`CVE-2026-32691`Timing ownership claim attack on new external back-end secrets	Exploitation statusNot known exploited	FixYes	Affected productJuju	Published03/18/2026	SeverityMedium
`CVE-2026-3888`Local Privilege Escalation in snapd	Exploitation statusNot known exploited	FixYes	Affected productUbuntu 16.04 LTS	Published03/17/2026	SeverityHigh
`CVE-2026-3497`	Exploitation statusNot known exploited	FixYes	Affected productopenssh	Published03/12/2026	SeverityLow
`CVE-2026-28384`Authenticated RCE via unsanitized compression_algorithm	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published03/12/2026	SeverityCritical
`CVE-2025-13350`Use-after-free of orphaned AF_UNIX in Ubuntu builds of Linux kernel	Exploitation statusNot known exploited	FixYes	Affected productUbuntu Linux	Published03/05/2026	SeverityHigh
`CVE-2026-3351`Authorization Bypass in LXD GET /1.0/certificates Endpoint	Exploitation statusNot known exploited	FixYes	Affected productLXD	Published03/03/2026	SeverityLow
`CVE-2026-1237`	Exploitation statusNot known exploited	FixNo	Affected productJuju	Published01/28/2026	SeverityLow
`CVE-2025-5467`Ubuntu Apport Insecure File Permissions Vulnerability	Exploitation statusPublic exploit	FixYes	Affected productapport	Published12/10/2025	SeverityLow
`CVE-2025-6966`Null-pointer dereference in python-apt TagSection.keys()	Exploitation statusNot known exploited	FixYes	Affected productpython-apt	Published12/05/2025	SeverityMedium
`CVE-2025-7044`Privilege Escalation in MAAS via Websocket Request Manipulation	Exploitation statusNot known exploited	FixYes	Affected productmaas	Published12/03/2025	SeverityHigh
`CVE-2025-54293`Path Traversal in LXD Instance Log File Retrieval	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published10/02/2025	SeverityHigh
`CVE-2025-54292`Client-Side Path Traversal in LXD-UI	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published10/02/2025	SeverityMedium
`CVE-2025-54291`Project existence disclosure in LXD images API	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published10/02/2025	SeverityMedium
`CVE-2025-54290`Project Existence Disclosure via Error Handling in LXD Image Export	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published10/02/2025	SeverityMedium
`CVE-2025-54289`Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API	Exploitation statusNot known exploited	FixYes	Affected productLXD	Published10/02/2025	SeverityHigh
`CVE-2025-54288`Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published10/02/2025	SeverityMedium
`CVE-2025-54287`Arbitrary File Read via Template Injection in Snapshot Patterns	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published10/02/2025	SeverityHigh
`CVE-2025-54286`CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI	Exploitation statusNot known exploited	FixYes	Affected productLXD	Published10/02/2025	SeverityHigh
`CVE-2024-6107`	Exploitation statusPublic exploit	FixYes	Affected productMAAS	Published07/21/2025	SeverityCritical
`CVE-2025-5199`LPE on Multipass for macOS	Exploitation statusPublic exploit	FixYes	Affected productMultipass	Published07/11/2025	SeverityHigh
`CVE-2025-0928`Arbitrary executable upload via authenticated endpoint	Exploitation statusPublic exploit	FixYes	Affected productJuju	Published07/08/2025	SeverityHigh
`CVE-2025-53513`Zip slip vulnerability in Juju	Exploitation statusPublic exploit	FixYes	Affected productJuju	Published07/08/2025	SeverityHigh
`CVE-2025-53512`Sensitive log retrieval in Juju	Exploitation statusPublic exploit	FixYes	Affected productJuju	Published07/08/2025	SeverityMedium
`CVE-2025-6224`Key leakage in juju/utils certificates	Exploitation statusPublic exploit	FixYes	Affected productJuju utils	Published07/01/2025	SeverityMedium
`CVE-2025-32463`	Exploitation statusKEV	FixYes	Affected productSudo	Published06/30/2025	SeverityCritical
`CVE-2024-11584`	Exploitation statusNot known exploited	FixYes	Affected productcloud-init	Published06/26/2025	SeverityMedium
`CVE-2024-6174`	Exploitation statusNot known exploited	FixYes	Affected productcloud-init	Published06/26/2025	SeverityHigh
`CVE-2025-5689`Improper Permission Management in SSH Session Handling	Exploitation statusNot known exploited	FixYes	Affected productauthd	Published06/16/2025	SeverityHigh
`CVE-2025-5054`Race Condition in Canonical Apport	Exploitation statusPublic exploit	FixYes	Affected productapport	Published05/30/2025	SeverityMedium
`CVE-2023-5616`	Exploitation statusNot known exploited	FixYes	Affected productUbuntu's gnome-control-center	Published04/15/2025	SeverityMedium
`CVE-2025-24375`MySQL K8s charm could leak credentials for root-level user `serverconfig`	Exploitation statusNot known exploited	FixNot confirmed	Affected productmysql-k8s-operator	Published04/09/2025	SeverityMedium
`CVE-2025-31479`canonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception output	Exploitation statusNot known exploited	FixYes	Affected productget-workflow-version-action	Published04/02/2025	SeverityHigh
`CVE-2023-0881`DDoS in Ubuntu package linux-bluefield	Exploitation statusNot known exploited	FixYes	Affected productUbuntu package linux-bluefield	Published03/31/2025	SeverityHigh
`CVE-2022-1804`Accountsservice incorrectly drops privileges	Exploitation statusNot known exploited	FixYes	Affected productLinux	Published03/25/2025	SeverityMedium
`CVE-2025-26466`Openssh: denial-of-service in openssh	Exploitation statusPublic exploit	FixYes	Affected productOpenSSH	Published02/28/2025	SeverityMedium
`CVE-2023-0092`	Exploitation statusNot known exploited	FixYes	Affected productJuju	Published01/31/2025	SeverityMedium
`CVE-2022-1736`	Exploitation statusNot known exploited	FixYes	Affected productUbuntu's gnome-control-center	Published01/31/2025	SeverityCritical
`CVE-2020-11936`	Exploitation statusPublic exploit	FixYes	Affected productApport	Published01/31/2025	SeverityLow
`CVE-2022-28653`	Exploitation statusNot known exploited	FixYes	Affected productApport	Published01/31/2025	SeverityHigh
`CVE-2024-6219`	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published12/05/2024	SeverityLow
`CVE-2024-6156`	Exploitation statusPublic exploit	FixYes	Affected productLXD	Published12/05/2024	SeverityLow