CVE database flags impersonation vulnerability at maximum severity
1 Oct 30 1:01 PM · 12d ago · 1 post · 1 source · development 1 of 2
The CVE advisory for CVE-2026-112816 is published, rating the flaw CVSS 10.0 and noting that an unauthenticated attacker can impersonate a trusted client to take full control of clusters and VMs.
“An unauthenticated attacker can impersonate a trusted client to take full control of the cluster and its VMs.”
@cvedotnowCanonical Software vendorIncus project Community fork maintainerCISA U.S. cybersecurity authority
The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump
What people said 1 voice · verbatim
-
🔴 Canonical LXD: client impersonation via certificate flaw in HTTPS listener (CVE-2026-112816) An unauthenticated attacker can impersonate a trusted client to take full control of the cluster and its VMs. Patch → 4.0.15, 5.0.11 and more
All 2 developments of Canonical patches CVSS 10.0 LXD flaw allowing trusted… →
XGoogle NewsMastodon