Login Request a demo
MA
Product
MAAS
by Canonical · last CVE Oct 2, 2026
4
CVEs
0
On KEV
6.5
Max CVSS
1
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities4Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MAAS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-7044
6.5
0%
Dec 3
An Improper Input Validation vulnerability exists in the user websocket handler of MAAS
Affected: 3.3.0 before 3.3.11; 3.4.0 before 3.4.9; 3.5.0 before 3.5.9; 3.6.0 before 3.6.2
CVE-2026-12392
5.3
0%
Oct 2
RPC secret disclosure via vendor data endpoint in Canonical MAAS
Affected: 3.4.0 before 3.4.10; 3.5.0 before 3.5.14; 3.6.0 before 3.6.5; 3.7.0 before 3.7.3; before 3.8.0
CVE-2013-1058
–
2%
Nov 23
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM)…
Affected: through 12.04.4; 12.04.1; 12.04.2; 12.04.3
CVE-2013-1057
–
1%
Nov 18
Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration…
Affected: through 12.04.4; 12.04.1; 12.04.2; 12.04.3
Showing 4