Ubuntu Maas vulnerabilities

• canonical maas RPC secret disclosure via vendor data endpoint in Canonical MAAS CVE-2026-12392 5.3 MediumOctober 2, 2026
• canonical maas Privilege Escalation in MAAS via Websocket Request Manipulation CVE-2025-7044 7.7 HighDecember 3, 2025
• canonical maas, metal as a service +1 more Due to insufficient verification, an attacker could use a malicious client to bypass... CVE-2024-6107 9.6 CriticalJuly 21, 2025
• ubuntu maas, canonical metal as a service +1 more Probe-and-enlist for SeaMicro chassis writes password to the log CVE-2015-1320 5.5 MediumApril 22, 2019
• ubuntu maas, canonical metal as a service +1 more uuid.uuid1() is not suitable as an unguessable identifier/token CVE-2014-1428 2.0 LowApril 22, 2019
• ubuntu maas, canonical metal as a service +1 more MAAS API vulnerable to CSRF attack CVE-2014-1427 9.6 CriticalApril 22, 2019
• ubuntu maas, canonical metal as a service +1 more get_file_by_name does not check owner CVE-2014-1426 8.6 HighApril 22, 2019