SecurityThe Hacker Newsabout 3 hours ago
Critical LXD Flaw Allows Client Impersonation
3 min read
Canonical reports a critical flaw tracked as CVE-2026-112816 in LXD and MicroCloud carrying a CVSS score of 10.0. The vulnerability lets attackers impersonate trusted clients without a private key if they have network access to the HTTPS API. Affected versions include LXD 4.0.14, 5.0.10, 5.21.8 and 6.9, with fixed snap versions now available for immediate update.
Level
Hype check
Tap to vote and see what everyone thinks.