GCVE-110-NCSC-2026-464

Advisory Published

Vulnetix · Advisory published November 2, 2026

Improper certificate validation in Canonical LXD versions before 4.0.15, 5.0.11, 5.21.9, and 6.10.1 enables unauthenticated attackers to impersonate trusted clients and gain full cluster and VM access via crafted certificate chains.

Download JSON Look up in the Resolve Platform

Weaknesses (CWE)

CWE-295Improper Certificate Validation

Affected Products

Vendor	Product	Versions	Platforms
Canonical	vers:unknown/*	—	—
Debian	vers:unknown/*	—	—

Aliases

CVE-2026-112816

References

advisory

Browse GCVE Records

937 records in the GCVE database · Updated November 5, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Look up in the Resolve Platform Download JSON