CVE tracker

New vulnerabilities – clearly explained

Every newly published security vulnerability (CVE), continuously from the NVD, with the actively exploited ones from CISA and the probability of exploitation (EPSS) – each one researched individually: what is affected, what helps, what to do.

3published today

3424in the last 7 days

248of them critical

9newly exploited (7 days)

1 vulnerability · Vendor: Canonical

CVE-2026-112816Critical 10.030 Oct 2026, 18:17

Canonical LXD: Improper certificate validation allows cluster access

Improper certificate validation in the HTTPS listener of Canonical LXD allows an attacker who can reach the HTTPS API to authenticate as any trusted client. The attacker needs the public certificate of a trusted client, which does not have to be secret. A successful attack grants full access to the LXD cluster and the managed virtual machines, and depending on the impersonated user's privileges, root on the host. The CVE record gives a CVSS v4.0 score of 10.0 (Critical).

Canonical · LXD

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touch RSS feed

Data: NVD (NIST), CISA KEV, FIRST EPSS – updated continuously.