A vulnerability classified as critical has been found in lxc incus up to 6.22.x. This vulnerability affects unknown code. The manipulation leads to improper certificate validation.
This vulnerability is uniquely identified as CVE-2026-33542. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-33542 | lxc incus up to 6.22.x certificate validation (GHSA-p8mm-23gg-jc9r / Nessus ID 304243)
A vulnerability classified as critical has been found in lxc incus up to 6.22.x. This vulnerability affects unknown code. The manipulation leads to improper…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
CISA-SSVC-Triage (vulnrichment)CVE-2026-33542
Exploitation: poc (PoC verfügbar)Automatable: no (Nicht automatisierbar)Technical Impact: partial (Teilweise)
Quelle: CISA-ADP vulnrichment · Stand 2026-03-30T11:47:23.472135Z · CISA Coordinator
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com