Back to all news
Security

CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

The Hacker News·November 1, 2026·1 min read
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

A critical CVSS 10.0 flaw in Canonical's LXD and MicroCloud lets attackers impersonate trusted clients without a private key. Exploitable over the network with the client's public certificate, it grants full access to the cluster and its virtual machines, posing a severe risk to affected deployments.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store