Threats
Vulnerabilities and patches
Breaches and privacy
Research
World
Learn
Wednesday 4 November
Global

Your region, kept on this device.

DonateGet the appSign in

Canonical LXD

Product

Am I affected?

Checked against NVD affected-version data on our server. Nothing you type is stored.

Security timeline

  1. Vulnerability reported by GBHackersCritical certificate-validation flaws in Incus and LXD allow unauthenticated cluster takeover

Recent news

GBHackers· · Critical

Critical certificate-validation flaws in Incus and LXD allow unauthenticated cluster takeover

Critical certificate-validation vulnerabilities in and let unauthenticated attackers with network access to the HTTPS listener impersonate trusted identities. Exploitation does not need valid credentials or the private key of a trusted certificate, and the LXD flaw may expose entire clusters.

Am I affected?
Ask
1

Last updated 3 November 2026. Facts come from our own stories, NVD and CISA KEV, MITRE ATT&CK and Wikidata, each named beside the fact; the introduction, when there is one, is from Wikipedia. We never show company logos.

Report a mistake