Canonical Maas vulnerabilities

• canonical maas RPC secret disclosure via vendor data endpoint in Canonical MAAS CVE-2026-12392 5.3 MediumOctober 2, 2026
• canonical maas Privilege Escalation in MAAS via Websocket Request Manipulation CVE-2025-7044 7.7 HighDecember 3, 2025
• canonical maas, metal as a service +1 more Due to insufficient verification, an attacker could use a malicious client to bypass... CVE-2024-6107 9.6 CriticalJuly 21, 2025
• canonical maas, ubuntu linux +1 more maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files,... CVE-2013-1058 5.8 MediumNovember 23, 2013
• canonical maas, ubuntu linux +1 more Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local... CVE-2013-1057 4.4 MediumNovember 15, 2013