Critical · 1 source · latest 7h

Critical Certificate Validation Flaw in LXD and Incus Could Give Hackers Control of Linux Hosts

CRITICAL · VULNERABILITYCVE-2026-112816redteam/daily · 1 source

Severity: Critical
Highest CVSS: 10.0
Exploited: Not known
Sources: 1

What happened

Writing the summary… Our AI is reading all the sources now; it appears here in a few seconds.

From 1 source · Wrong?

What to do

Check whether you use the affected product, and install the vendor’s fix when it is available. Open your watchlist

General advice for this kind of story

Read the full story at the source

Vulnerabilities

CVE-2026-112816CVSS 10.0Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted certificate

Full story timeline · 2 updates

Fri 30 October17:17CVE-2026-112816 published, CVSS 10.0NVD
Mon 2 November02:45Critical Certificate Validation Flaw in LXD and Incus Could Give Hackers Control of Linux HostsCyber Security News

Who reported · 1 outlet

Cyber Security News

Report a problem