incus

LXD, MicroCloud CVSS 10 Flaw Enables Trusted-Client Impersonation

CVE-2026-112816 lets attackers log in to LXD and MicroCloud as a trusted client using only a public certificate — no private key required. Fixed snaps are out.