Skip to content

Back to the catalog

lee1981 (@lee1981b) on X
x.comadvisory

lee1981 (@lee1981b) on X

CVE-2026-112816 affects Canonical's LXD and MicroCloud. A public certificate can become a trusted management identity. Canonical, as CNA, rates it Critical with CVSS v4.0 10.0 and maps it to CWE-295 (improper certificate validation). This is entry #093 of the CyberForge "CVE of the Day" series, dated 2 November 2026. The captured text stops before the technical details and the fix.

TL;DR Flags a critical LXD/MicroCloud flaw (CVSS 10.0, CWE-295) where a public certificate is treated as a trusted management identity.
Open original ↗

Organisations named here

  • Canonical
  • CyberForge

CVEs named here

  • CVE-2026-112816

Technologies named here

  • LXD
  • MicroCloud

Standards and laws named here

  • CVSS

Techniques named here

  • Improper Certificate Validation

Concepts named here

  • CVSS v4.0

Related in Cloud & Infra