{"vulnerability": "cve-2026-6689", "sightings": [{"uuid": "daedea6f-40a2-4b36-b18c-99055aa03f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66898", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msw3776y2b2b", "content": "CVE-2026-66898 - lxd\nAn attacker can manipulate file paths and overwrite files on the system by creating a malicious backup archive for LXD. This could lead to unauthorized access or data loss. Update LXD to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxd #canonical #CVE #infosec", "creation_timestamp": "2026-08-12T21:30:04.132211Z"}, {"uuid": "14b78639-ede2-4e2a-b8c9-b79e62c92bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66898", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msw4x6wcer22", "content": "\ud83d\udd34 CVE-2026-66898 - Critical (9.9)\n\nA path traversal vulnerability in LXD allows an attacker to manipulate file system paths during b...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66898/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T22:01:23.794125Z"}, {"uuid": "dbcd4e6b-7644-4450-9c49-18d8bfdbe0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mttf2eskfm2m", "content": "LXD\u306e\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u51e6\u7406\u306b\u304a\u3051\u308b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30b3\u30f3\u30c6\u30ca\u7de8\u96c6\u6a29\u9650\u3092\u6301\u3064\u653b\u6483\u8005\u306a\u3069\u304c\u30db\u30b9\u30c8\u4e0a\u306e\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092root\u6a29\u9650\u3067\u4e0a\u66f8\u304d\u53ef\u80fd\u3002\nCVE-2026-66897 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-08-24T13:13:31.814435Z"}, {"uuid": "0927dbbf-d4c8-449b-83ad-9f209f959067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv2iskti32f", "content": "CVE-2026-66897\nLXD's container template feature can be tricked into writing any file on the host machine, even system files that require administrator rights. An attacker who can edit containers or launch a specially crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:10:04.659540Z"}, {"uuid": "7b3cb980-9e7b-49ca-aced-d84c0d126b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtszokro2q2f", "content": "CVE-2026-66897 - lxd\nLXD\u2019s template feature can be tricked into writing any file on the underlying server, even system files that require administrator rights. An attacker who can edit containers or launch a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxd #canonical #CVE #infosec", "creation_timestamp": "2026-08-24T09:50:04.413724Z"}, {"uuid": "495018b1-6fd6-495a-a05a-f7b274635eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66897", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117150018844317018", "content": "CVE-2026-66897: Canonical LXD CRITICAL path traversal (CVSS 9.9). Attackers with container edit rights or crafted images can overwrite host files as root. Restrict permissions & avoid untrusted images. Patch status unknown. https://radar.offseq.com/threat/cve-2026-66897-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-b6ae23dfc47f5562 #OffSeq #LXD #CVE #Linux", "creation_timestamp": "2026-08-24T10:30:26.907417Z"}, {"uuid": "3121193f-78cb-4676-9f78-2413873f38de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66897", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtt3wsm2db2f", "content": "CRITICAL vuln in Canonical LXD (CVE-2026-66897, CVSS 9.9) lets users with container edit rights or crafted images overwrite host files as root. Restrict permissions, avoid untrusted images. https://radar.offseq.com/threat/cve-2026-66897-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-dir...", "creation_timestamp": "2026-08-24T10:30:29.273736Z"}, {"uuid": "13651b90-39d8-42cc-969a-bf1cb97bcca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttbdppb5v2j", "content": "\ud83d\udea8 CVE-2026-66897 \u2014 CVSS 9.9 CRITICAL\n\nA path traversal vulnerability in LXD's instance template processing allows an attacker with container edit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66897\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T12:07:10.247871Z"}, {"uuid": "4ea00455-a3a0-4f74-8ba6-bbe2385bb352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-66890", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01", "content": "", "creation_timestamp": "2026-09-15T16:15:31.250924Z"}, {"uuid": "d210a777-d8ca-424f-af03-8c6800aa986f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66890", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvlg623ip52o", "content": "~Cisa~\nCISA warns VMAX DVR/NVR flaws enable root access and surveillance compromise; update firmware.\n-\nIOCs: CVE-2026-66890, CVE-2026-66887, CVE-2026-68070\n-\n#CVE202666887 #CVE20266890 #ThreatIntel", "creation_timestamp": "2026-09-15T20:02:34.179396Z"}, {"uuid": "44b6420d-4eba-4715-8710-b4b4d70d4415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66890", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvlmso4eao2z", "content": "\ud83d\udd34 CVE-2026-66890 - Critical (9.6)\n\nThe affected products use hard-coded credentials, which could allow remote access to files with r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66890/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-15T22:01:29.392167Z"}, {"uuid": "6fe18d56-98f6-4a82-bcbc-8ca1b677bc16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66890", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmn5fsqw32b", "content": "CVE-2026-66890 - vmax a1 g4 dvr\nSeveral Digital Watchdog VMAX video recorders and network video recorders come with built\u2011in usernames and passwords. If the FTP service is left enabled, an attacker could log\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#digitalwatchdog #CVE #infosec", "creation_timestamp": "2026-09-16T07:40:08.360018Z"}]}