{"id":"EM-20261102-8D3A","url":"https://cyber.eventmonitor.net/incident/EM-20261102-8D3A/","type":"cve","title":"Critical Canonical LXD Vulnerability (CVE-2026-112816)","subtitle":"CVE-2026-112816","subject":"CVE-2026-112816","status":"Developing","severity":"critical","affected":[],"headline":null,"born":"2026-11-02T09:17:50.000Z","firstSignal":"2026-10-30T17:17:14.293Z","lastSignal":"2026-11-02T09:17:50.000Z","updated":"2026-11-04T14:43:58.877Z","revision":1,"life":[{"status":"Born","at":"2026-11-02T09:17:50.000Z","why":"second independent source: C15 NCSC-NL"},{"status":"Developing","at":"2026-11-02T09:17:50.000Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-10-30T17:17:14.293Z","what":"First signal: C6 NVD CVE API 2.0"},{"at":"2026-11-02T09:17:50.000Z","what":"Born: second source, C15 NCSC-NL. Page EM-20261102-8D3A created."}],"stages":[{"name":"Disclosed","at":"2026-10-30T17:17:14.293Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-10-30T17:17:14.293Z","detail":"CVSS 10 · EPSS 0.3%"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":"2026-11-02T09:17:50.000Z","detail":"1 government and CERT sources"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-10-30T17:17:14.293Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":4,"title":"CVE-2026-112816 (CVSS 10)","text":"Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted certificate chain.","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112816"},{"at":"2026-11-02T09:17:50.000Z","source":"C15","sourceName":"NCSC-NL","role":"Government","severity":2,"title":"NCSC-2026-0464 [1.00] [M/H] Kwetsbaarheid verholpen in LXD van Canonical","text":"Canonical heeft een kwetsbaarheid verholpen in LXD. De kwetsbaarheid (CVE-2026-112816) wordt veroorzaakt door onjuiste validatie van certificaatketens binnen de HTTPS API van Canonical LXD. De kwetsbaarheid treft LXD-versies vóór 4.0.15, 5.0.11, 5.21.9 en 6.10.1 binnen de betreffende releasebranches. Hierdoor kunnen niet-geauthenticeerde aanvallers die netwerktoegang hebben tot de HTTPS API en bes","url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0464"}],"crowd":[],"reference":{"nvd":{"published":"2026-10-30T17:17:14.293","score":10,"severity":"CRITICAL","desc":"Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted certificate","product":"","seen":1793803438877},"kev":null,"epss":{"epss":0.00303,"pct":0.23251,"at":1793803438877},"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}