Vulnerabilities
LXD, MicroCloud CVSS 10 Flaw Enables Trusted-Client Impersonation
CVE-2026-112816 lets attackers log in to LXD and MicroCloud as a trusted client using only a public certificate — no private key required. Fixed snaps are out.
CyberROI coverage tagged “mutual tls”.
CVE-2026-112816 lets attackers log in to LXD and MicroCloud as a trusted client using only a public certificate — no private key required. Fixed snaps are out.