# LXD host escapes via malicious images, backup compression, and project-restriction bypasses (GHSA-jpf8 / GHSA-9j25 / GHSA-vghh / GHSA-pjff / GHSA-fmc8 / GHSA-47w9 / GHSA-7mr3 / GHSA-qx75) · pwn.watch

> On Nov 6 2026 Canonical published a wave of critical LXD advisories (CVSS 9.9) for host escapes. Already tracked: GHSA-jpf8-86f3-wp38 / CVE-2026-48752 (templates/ symlink AFRW) and GHSA-9j25-mm2h-2f76 / CVE-2026-48750 (exec-output symlink AFW). Same-day additions: GHSA-vghh-5rfx-xhq8 / CVE-2026-48749 (rootfs/ symlink AFRW in a crafted image); GHSA-pjff-c2wc-f6jm / CVE-2026-48769 (arbitrary file write via trusted Incus-Image-Hash path traversal on source.type=url downloads); GHSA-fmc8-p6q7-75cc / CVE-2026-48755 (backup compression_algorithm argument injection leading to AFW/ACE). All were reported from the Incus fork. Fixes are in the github.com/canonical/lxd Go module; upgrade to fixed builds that include the advisory commits / firstPatched versions. Also folded GHSA-47w9-6r3f-938g / CVE-2026-48751: instance snapshots ignore `restricted.containers.lowlevel=block`, allowing abuse of raw.lxc / raw.qemu hooks for host ACE after moving a crafted snapshot into a restricted project; LXD >= 4.12 affected; patched in 6.9 / 5.21.5 / 5.0.7 (reported from Incus GHSA-48q5-w887-33wv; originally published Jun 26 2026, resurfaced in the Nov 6 critical GHSA wave). Further folded high-severity project-restriction bypasses GHSA-7mr3-28h5-m5vx (custom volume copy across projects) and GHSA-qx75-2p3r-pwm5 (instance copy across projects): authenticated caller knowing source project/volume or instance names can copy secrets they should not view; LXD >= 4.12; patched in 5.0.7 / 5.21.5 / 6.8 (note 6.8, not only 6.9); GHSA firstPatched Go module 0.0.0-20260630083100-c5184be310b1; reported from Incus GHSA-64f3-v33m-w89f and GHSA-c9f5-j9c3-mhrg; no CVE IDs assigned on the GitHub Advisory records as of this fold.

Page: https://pwn.watch/i/lxd-malicious-image-host-escape-ghsa-2026-11 · generated 2026-11-07T21:03:56.857Z

## Status
- Severity: critical · status: live · patch: patched
- Product: Canonical LXD (Incus fork also affected)
- Started: 2026-11-06
- CVEs: CVE-2026-48752, CVE-2026-48750, CVE-2026-48749, CVE-2026-48769, CVE-2026-48755, GHSA-jpf8-86f3-wp38, GHSA-9j25-mm2h-2f76, GHSA-vghh-5rfx-xhq8, GHSA-pjff-c2wc-f6jm, GHSA-fmc8-p6q7-75cc, CVE-2026-48751, GHSA-47w9-6r3f-938g, GHSA-48q5-w887-33wv, GHSA-7mr3-28h5-m5vx, GHSA-qx75-2p3r-pwm5, GHSA-64f3-v33m-w89f, GHSA-c9f5-j9c3-mhrg
- Affected: github.com/canonical/lxd Go module before 0.0.0-20260203144152-d1c8ba15d160 (templates/ AFRW, GHSA-jpf8-86f3-wp38); github.com/canonical/lxd Go module before 0.0.0-20260626085134-124f90100640 (exec-output AFW, GHSA-9j25-mm2h-2f76); github.com/canonical/lxd Go module before 0.0.0-20260630083100-c5184be310b1 (rootfs/ symlink AFRW GHSA-vghh-5rfx-xhq8; image-hash AFW GHSA-pjff-c2wc-f6jm; backup compression injection GHSA-fmc8-p6q7-75cc; restricted project bypass GHSA-47w9-6r3f-938g; volume-copy bypass GHSA-7mr3-28h5-m5vx; instance-copy bypass GHSA-qx75-2p3r-pwm5); Incus builds affected by the related Incus advisories cited in the LXD GHSAs; LXD >= 4.12 (restricted project bypass via instance snapshots ignoring restricted.containers.lowlevel=block, GHSA-47w9-6r3f-938g / CVE-2026-48751); LXD >= 4.12 (project restriction bypass for custom volume copy across projects, GHSA-7mr3-28h5-m5vx); LXD >= 4.12 (project restriction bypass for instance copy across projects, GHSA-qx75-2p3r-pwm5)
- Fixed in: github.com/canonical/lxd 0.0.0-20260203144152-d1c8ba15d160 or later (templates/ fix per GHSA-jpf8-86f3-wp38); github.com/canonical/lxd 0.0.0-20260626085134-124f90100640 or later (exec-output fix per GHSA-9j25-mm2h-2f76); github.com/canonical/lxd 0.0.0-20260630083100-c5184be310b1 or later (GHSA-vghh-5rfx-xhq8 / GHSA-pjff-c2wc-f6jm / GHSA-fmc8-p6q7-75cc / GHSA-47w9-6r3f-938g / GHSA-7mr3-28h5-m5vx / GHSA-qx75-2p3r-pwm5); lxd-5.21.5 referenced by GHSA-9j25-mm2h-2f76; upgrade to fixed LXD releases that include the advisory commits; LXD 6.9, 5.21.5, 5.0.7 (GHSA-47w9-6r3f-938g / CVE-2026-48751 restricted project bypass); LXD 6.8, 5.21.5, 5.0.7 (GHSA-7mr3-28h5-m5vx / GHSA-qx75-2p3r-pwm5 project restriction bypasses; note 6.8 for these High advisories)

## Follow this incident
- RSS (one item per update): https://pwn.watch/i/lxd-malicious-image-host-escape-ghsa-2026-11/feed.xml
- JSON Feed: https://pwn.watch/i/lxd-malicious-image-host-escape-ghsa-2026-11/feed.json
- Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/lxd-malicious-image-host-escape-ghsa-2026-11.json
- This file: https://pwn.watch/i/lxd-malicious-image-host-escape-ghsa-2026-11/llms.txt

## Updates (newest first)
- 2026-11-06: Canonical publishes GHSA-9j25-mm2h-2f76 (CVE-2026-48750): arbitrary file write on host via exec-output symlink in a crafted image; CVSS 9.9; firstPatched Go module 0.0.0-20260626085134-124f90100640; references lxd-5.21.5 and Incus GHSA-73hr-m85f-64v9. (https://github.com/advisories/GHSA-9j25-mm2h-2f76)
- 2026-11-06: Canonical publishes GHSA-jpf8-86f3-wp38 (CVE-2026-48752): arbitrary file read+write on host via templates/ symlink in a malicious image; CVSS 9.9; firstPatched Go module 0.0.0-20260203144152-d1c8ba15d160; reported from Incus GHSA-vxp5-584q-c479. (https://github.com/advisories/GHSA-jpf8-86f3-wp38)
- 2026-11-06: Canonical publishes GHSA-vghh-5rfx-xhq8 (CVE-2026-48749): host AFRW via rootfs/ symlink in a malicious image; CVSS 9.9; firstPatched Go module 0.0.0-20260630083100-c5184be310b1. (https://github.com/advisories/GHSA-vghh-5rfx-xhq8)
- 2026-11-06: Canonical publishes GHSA-pjff-c2wc-f6jm (CVE-2026-48769): arbitrary file write via trusted Incus-Image-Hash path traversal on source.type=url image downloads; CVSS 9.9; firstPatched 0.0.0-20260630083100-c5184be310b1. (https://github.com/advisories/GHSA-pjff-c2wc-f6jm)
- 2026-11-06: Canonical publishes GHSA-fmc8-p6q7-75cc (CVE-2026-48755): backup compression_algorithm argument injection leading to host AFW/ACE; CVSS 9.9; firstPatched 0.0.0-20260630083100-c5184be310b1. (https://github.com/advisories/GHSA-fmc8-p6q7-75cc)
- 2026-11-06: Folded GHSA-47w9-6r3f-938g (CVE-2026-48751): restricted project bypass — instance snapshots ignore restricted.containers.lowlevel=block; abuse raw.lxc / raw.qemu for host ACE; LXD >= 4.12 affected; patched in 6.9 / 5.21.5 / 5.0.7; reported from Incus GHSA-48q5-w887-33wv. Originally published Jun 26 2026; resurfaced in the Nov 6 LXD critical GHSA wave. (https://github.com/canonical/lxd/security/advisories/GHSA-47w9-6r3f-938g)
- 2026-11-06: Folded GHSA-7mr3-28h5-m5vx (High, CVSS 7.7): project restriction bypass for custom volume copy across projects; LXD >= 4.12; patched 5.0.7 / 5.21.5 / 6.8; firstPatched Go module 0.0.0-20260630083100-c5184be310b1; reported from Incus GHSA-64f3-v33m-w89f; no CVE ID on GHSA record. (https://github.com/canonical/lxd/security/advisories/GHSA-7mr3-28h5-m5vx)
- 2026-11-06: Folded GHSA-qx75-2p3r-pwm5 (High, CVSS 7.7): project restriction bypass for instance copy across projects; LXD >= 4.12; patched 5.0.7 / 5.21.5 / 6.8; firstPatched Go module 0.0.0-20260630083100-c5184be310b1; reported from Incus GHSA-c9f5-j9c3-mhrg; no CVE ID on GHSA record. (https://github.com/canonical/lxd/security/advisories/GHSA-qx75-2p3r-pwm5)

## Fix brief
# Security brief: LXD host escapes via malicious images, backup compression, and project-restriction bypasses (GHSA-jpf8 / GHSA-9j25 / GHSA-vghh / GHSA-pjff / GHSA-fmc8 / GHSA-47w9 / GHSA-7mr3 / GHSA-qx75)

Source: https://pwn.watch/i/lxd-malicious-image-host-escape-ghsa-2026-11 · status: live · severity: critical · updated Nov 7, 2026, 12:15 UTC

## Patch status
**PATCHED: fixed releases exist. Upgrade to a fixed version.**

## What it is
On Nov 6 2026 Canonical published a wave of critical LXD advisories (CVSS 9.9) for host escapes. Already tracked: GHSA-jpf8-86f3-wp38 / CVE-2026-48752 (templates/ symlink AFRW) and GHSA-9j25-mm2h-2f76 / CVE-2026-48750 (exec-output symlink AFW). Same-day additions: GHSA-vghh-5rfx-xhq8 / CVE-2026-48749 (rootfs/ symlink AFRW in a crafted image); GHSA-pjff-c2wc-f6jm / CVE-2026-48769 (arbitrary file write via trusted Incus-Image-Hash path traversal on source.type=url downloads); GHSA-fmc8-p6q7-75cc / CVE-2026-48755 (backup compression_algorithm argument injection leading to AFW/ACE). All were reported from the Incus fork. Fixes are in the github.com/canonical/lxd Go module; upgrade to fixed builds that include the advisory commits / firstPatched versions. Also folded GHSA-47w9-6r3f-938g / CVE-2026-48751: instance snapshots ignore `restricted.containers.lowlevel=block`, allowing abuse of raw.lxc / raw.qemu hooks for host ACE after moving a crafted snapshot into a restricted project; LXD >= 4.12 affected; patched in 6.9 / 5.21.5 / 5.0.7 (reported from Incus GHSA-48q5-w887-33wv; originally published Jun 26 2026, resurfaced in the Nov 6 critical GHSA wave). Further folded high-severity project-restriction bypasses GHSA-7mr3-28h5-m5vx (custom volume copy across projects) and GHSA-qx75-2p3r-pwm5 (instance copy across projects): authenticated caller knowing source project/volume or instance names can copy secrets they should not view; LXD >= 4.12; patched in 5.0.7 / 5.21.5 / 6.8 (note 6.8, not only 6.9); GHSA firstPatched Go module 0.0.0-20260630083100-c5184be310b1; reported from Incus GHSA-64f3-v33m-w89f and GHSA-c9f5-j9c3-mhrg; no CVE IDs assigned on the GitHub Advisory records as of this fold.

Severity detail: GitHub Advisory CVSS 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) for both; host AFRW / constrained AFW via image symlinks, possibly leading to command execution

- Product: Canonical LXD (Incus fork also affected)
- CVE / advisory ids: CVE-2026-48752, CVE-2026-48750, CVE-2026-48749, CVE-2026-48769, CVE-2026-48755, GHSA-jpf8-86f3-wp38, GHSA-9j25-mm2h-2f76, GHSA-vghh-5rfx-xhq8, GHSA-pjff-c2wc-f6jm, GHSA-fmc8-p6q7-75cc, CVE-2026-48751, GHSA-47w9-6r3f-938g, GHSA-48q5-w887-33wv, GHSA-7mr3-28h5-m5vx, GHSA-qx75-2p3r-pwm5, GHSA-64f3-v33m-w89f, GHSA-c9f5-j9c3-mhrg

## Affected versions
- github.com/canonical/lxd Go module before 0.0.0-20260203144152-d1c8ba15d160 (templates/ AFRW, GHSA-jpf8-86f3-wp38)
- github.com/canonical/lxd Go module before 0.0.0-20260626085134-124f90100640 (exec-output AFW, GHSA-9j25-mm2h-2f76)
- github.com/canonical/lxd Go module before 0.0.0-20260630083100-c5184be310b1 (rootfs/ symlink AFRW GHSA-vghh-5rfx-xhq8; image-hash AFW GHSA-pjff-c2wc-f6jm; backup compression injection GHSA-fmc8-p6q7-75cc; restricted project bypass GHSA-47w9-6r3f-938g; volume-copy bypass GHSA-7mr3-28h5-m5vx; instance-copy bypass GHSA-qx75-2p3r-pwm5)
- Incus builds affected by the related Incus advisories cited in the LXD GHSAs
- LXD >= 4.12 (restricted project bypass via instance snapshots ignoring restricted.containers.lowlevel=block, GHSA-47w9-6r3f-938g / CVE-2026-48751)
- LXD >= 4.12 (project restriction bypass for custom volume copy across projects, GHSA-7mr3-28h5-m5vx)
- LXD >= 4.12 (project restriction bypass for instance copy across projects, GHSA-qx75-2p3r-pwm5)

## Check whether you're affected
No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above.

## Fix
Upgrade to one of these fixed versions (or later on the same branch):
- github.com/canonical/lxd 0.0.0-20260203144152-d1c8ba15d160 or later (templates/ fix per GHSA-jpf8-86f3-wp38)
- github.com/canonical/lxd 0.0.0-20260626085134-124f90100640 or later (exec-output fix per GHSA-9j25-mm2h-2f76)
- github.com/canonical/lxd 0.0.0-20260630083100-c5184be310b1 or later (GHSA-vghh-5rfx-xhq8 / GHSA-pjff-c2wc-f6jm / GHSA-fmc8-p6q7-75cc / GHSA-47w9-6r3f-938g / GHSA-7mr3-28h5-m5vx / GHSA-qx75-2p3r-pwm5)
- lxd-5.21.5 referenced by GHSA-9j25-mm2h-2f76; upgrade to fixed LXD releases that include the advisory commits
- LXD 6.9, 5.21.5, 5.0.7 (GHSA-47w9-6r3f-938g / CVE-2026-48751 restricted project bypass)
- LXD 6.8, 5.21.5, 5.0.7 (GHSA-7mr3-28h5-m5vx / GHSA-qx75-2p3r-pwm5 project restriction bypasses; note 6.8 for these High advisories)

After upgrading, re-run the checks above and redeploy/restart the affected services.

## Secrets to rotate
This incident involves possible credential exposure. Rotate any credentials (API keys, tokens, env vars, SSH keys) that were present on affected systems or in affected builds while vulnerable/compromised versions were installed, and review access logs.

## Specific notes
Upgrade LXD to a build that includes the GHSA firstPatched module versions (or newer). Incus operators should follow the related Incus advisories. Do not cite cve.now.

## Latest updates
- Nov 6, 2026: Canonical publishes GHSA-9j25-mm2h-2f76 (CVE-2026-48750): arbitrary file write on host via exec-output symlink in a crafted image; CVSS 9.9; firstPatched Go module 0.0.0-20260626085134-124f90100640; references lxd-5.21.5 and Incus GHSA-73hr-m85f-64v9.
- Nov 6, 2026: Canonical publishes GHSA-jpf8-86f3-wp38 (CVE-2026-48752): arbitrary file read+write on host via templates/ symlink in a malicious image; CVSS 9.9; firstPatched Go module 0.0.0-20260203144152-d1c8ba15d160; reported from Incus GHSA-vxp5-584q-c479.
- Nov 6, 2026: Canonical publishes GHSA-vghh-5rfx-xhq8 (CVE-2026-48749): host AFRW via rootfs/ symlink in a malicious image; CVSS 9.9; firstPatched Go module 0.0.0-20260630083100-c5184be310b1.
- Nov 6, 2026: Canonical publishes GHSA-pjff-c2wc-f6jm (CVE-2026-48769): arbitrary file write via trusted Incus-Image-Hash path traversal on source.type=url image downloads; CVSS 9.9; firstPatched 0.0.0-20260630083100-c5184be310b1.
- Nov 6, 2026: Canonical publishes GHSA-fmc8-p6q7-75cc (CVE-2026-48755): backup compression_algorithm argument injection leading to host AFW/ACE; CVSS 9.9; firstPatched 0.0.0-20260630083100-c5184be310b1.
- Nov 6, 2026: Folded GHSA-47w9-6r3f-938g (CVE-2026-48751): restricted project bypass — instance snapshots ignore restricted.containers.lowlevel=block; abuse raw.lxc / raw.qemu for host ACE; LXD >= 4.12 affected; patched in 6.9 / 5.21.5 / 5.0.7; reported from Incus GHSA-48q5-w887-33wv. Originally published Jun 26 2026; resurfaced in the Nov 6 LXD critical GHSA wave.
- Nov 6, 2026: Folded GHSA-7mr3-28h5-m5vx (High, CVSS 7.7): project restriction bypass for custom volume copy across projects; LXD >= 4.12; patched 5.0.7 / 5.21.5 / 6.8; firstPatched Go module 0.0.0-20260630083100-c5184be310b1; reported from Incus GHSA-64f3-v33m-w89f; no CVE ID on GHSA record.
- Nov 6, 2026: Folded GHSA-qx75-2p3r-pwm5 (High, CVSS 7.7): project restriction bypass for instance copy across projects; LXD >= 4.12; patched 5.0.7 / 5.21.5 / 6.8; firstPatched Go module 0.0.0-20260630083100-c5184be310b1; reported from Incus GHSA-c9f5-j9c3-mhrg; no CVE ID on GHSA record.

## Advisories
- [LXD has arbitrary file read+write on host via templates/ symlink in malicious image (GHSA-jpf8-86f3-wp38)](https://github.com/advisories/GHSA-jpf8-86f3-wp38) (GitHub Advisory)
- [LXD has arbitrary file write on host via exec-output symlink in crafted image (GHSA-9j25-mm2h-2f76)](https://github.com/advisories/GHSA-9j25-mm2h-2f76) (GitHub Advisory)
- [Canonical LXD repository advisory GHSA-jpf8-86f3-wp38](https://github.com/canonical/lxd/security/advisories/GHSA-jpf8-86f3-wp38) (Canonical LXD)
- [Canonical LXD repository advisory GHSA-9j25-mm2h-2f76](https://github.com/canonical/lxd/security/advisories/GHSA-9j25-mm2h-2f76) (Canonical LXD)
- [NVD CVE-2026-48752](https://nvd.nist.gov/vuln/detail/CVE-2026-48752) (NVD)
- [NVD CVE-2026-48750](https://nvd.nist.gov/vuln/detail/CVE-2026-48750) (NVD)
- [LXD 5.21.5 LTS release (referenced by GHSA-9j25-mm2h-2f76)](https://github.com/canonical/lxd/releases/tag/lxd-5.21.5) (Canonical LXD)
- [Incus related advisory GHSA-vxp5-584q-c479 (templates/)](https://github.com/lxc/incus/security/advisories/GHSA-vxp5-584q-c479) (Incus)
- [Incus related advisory GHSA-73hr-m85f-64v9 (exec-output lineage cited by LXD GHSA-9j25)](https://github.com/lxc/incus/security/advisories/GHSA-73hr-m85f-64v9) (Incus)
- [LXD has arbitrary file read+write on host via rootfs/ symlink (GHSA-vghh-5rfx-xhq8)](https://github.com/advisories/GHSA-vghh-5rfx-xhq8) (GitHub Advisory)
- [LXD has arbitrary file write due to trusted image hash (GHSA-pjff-c2wc-f6jm)](https://github.com/advisories/GHSA-pjff-c2wc-f6jm) (GitHub Advisory)
- [LXD has argument injection in backup compression algorithm (GHSA-fmc8-p6q7-75cc)](https://github.com/advisories/GHSA-fmc8-p6q7-75cc) (GitHub Advisory)
- [NVD CVE-2026-48749](https://nvd.nist.gov/vuln/detail/CVE-2026-48749) (NVD)
- [NVD CVE-2026-48769](https://nvd.nist.gov/vuln/detail/CVE-2026-48769) (NVD)
- [NVD CVE-2026-48755](https://nvd.nist.gov/vuln/detail/CVE-2026-48755) (NVD)
- [Incus related advisory GHSA-2q3f-q5pq-g8wv (rootfs/)](https://github.com/lxc/incus/security/advisories/GHSA-2q3f-q5pq-g8wv) (Incus)
- [Incus related advisory GHSA-f6m5-xw2g-xc4x (image hash)](https://github.com/lxc/incus/security/advisories/GHSA-f6m5-xw2g-xc4x) (Incus)
- [Incus related advisory GHSA-v6mj-8pf4-hhw4 (backup compression)](https://github.com/lxc/incus/security/advisories/GHSA-v6mj-8pf4-hhw4) (Incus)
- [LXD restricted project bypass leading to arbitrary command execution (GHSA-47w9-6r3f-938g)](https://github.com/advisories/GHSA-47w9-6r3f-938g) (GitHub Advisory)
- [Canonical LXD repository advisory GHSA-47w9-6r3f-938g](https://github.com/canonical/lxd/security/advisories/GHSA-47w9-6r3f-938g) (Canonical LXD)
- [Incus related advisory GHSA-48q5-w887-33wv (restricted project bypass)](https://github.com/lxc/incus/security/advisories/GHSA-48q5-w887-33wv) (Incus)
- [NVD CVE-2026-48751](https://nvd.nist.gov/vuln/detail/CVE-2026-48751) (NVD)
- [LXD 6.9 release (referenced by GHSA-47w9-6r3f-938g)](https://github.com/canonical/lxd/releases/tag/lxd-6.9) (Canonical LXD)
- [LXD 5.0.7 release (referenced by GHSA-47w9-6r3f-938g)](https://github.com/canonical/lxd/releases/tag/lxd-5.0.7) (Canonical LXD)
- [Canonical LXD: project restriction bypass for custom volume copy (GHSA-7mr3-28h5-m5vx)](https://github.com/canonical/lxd/security/advisories/GHSA-7mr3-28h5-m5vx) (Canonical LXD)
- [GitHub Advisory GHSA-7mr3-28h5-m5vx](https://github.com/advisories/GHSA-7mr3-28h5-m5vx) (GitHub Advisory)
- [Canonical LXD: project restriction bypass for instance copy (GHSA-qx75-2p3r-pwm5)](https://github.com/canonical/lxd/security/advisories/GHSA-qx75-2p3r-pwm5) (Canonical LXD)
- [GitHub Advisory GHSA-qx75-2p3r-pwm5](https://github.com/advisories/GHSA-qx75-2p3r-pwm5) (GitHub Advisory)
- [Incus related advisory GHSA-64f3-v33m-w89f (volume copy)](https://github.com/lxc/incus/security/advisories/GHSA-64f3-v33m-w89f) (Incus)
- [Incus related advisory GHSA-c9f5-j9c3-mhrg (instance copy)](https://github.com/lxc/incus/security/advisories/GHSA-c9f5-j9c3-mhrg) (Incus)
- [LXD 6.8 release (referenced by GHSA-7mr3 / GHSA-qx75)](https://github.com/canonical/lxd/releases/tag/lxd-6.8) (Canonical LXD)

## Caveats
Do not invent additional LXD release tags beyond what GHSA/NVD/release pages state. Prefer upgrading to fixed LXD releases that include the advisory commits; GHSA firstPatched Go module versions are the authoritative patched markers when a product release tag is unclear.

---
Machine-readable: https://pwn.watch/i/lxd-malicious-image-host-escape-ghsa-2026-11.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.