CVSS 10.0 LXD, Micro Cloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
A critical flaw in Canonical's LXD and MicroCloud, tracked as CVE-2026-112816 with a maximum CVSS score of 10.0, let an attacker log in as a trusted client without that client's private key by attaching the trusted client's public certificate behind their...