Login Request a demo
MA
Product
MAAS
by Canonical · last CVE Oct 2, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 0Medium 2Low 0
Severity
All severities5Critical1High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MAAS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-6107
9.8
0%
Jul 21
Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region
Affected: 3.1.0 before 3.1.4; 3.2.0 before 3.2.11; 3.3.0 before 3.3.8; 3.4.0 before 3.4.4; 3.5.0 before 3.5.1
CVE-2025-7044
6.5
0%
Dec 3
Privilege Escalation in MAAS via Websocket Request Manipulation
Affected: 3.3.0 before 3.3.11; 3.4.0 before 3.4.9; 3.5.0 before 3.5.9; 3.6.0 before 3.6.2
CVE-2026-12392
5.3
0%
Oct 2
RPC secret disclosure via vendor data endpoint in Canonical MAAS
Affected: 3.4.0 before 3.4.10; 3.5.0 before 3.5.14; 3.6.0 before 3.6.5; 3.7.0 before 3.7.3; before 3.8.0
CVE-2013-1058
–
2%
Nov 23
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM)…
Affected: through 12.04.4; 12.04.1; 12.04.2; 12.04.3
CVE-2013-1057
–
1%
Nov 18
Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration…
Affected: through 12.04.4; 12.04.1; 12.04.2; 12.04.3
Showing 5