{"id":"CVE-2026-112816","aliases":[],"cve":{"records":[{"id":"CVE-2026-112816","source":"canonical","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-19T18:32:16.961Z","published":"2026-10-30T16:42:06.617Z","modified":"2026-10-30T17:18:21.262Z"}],"publishers":[{"name":"canonical","role":"CNA","organizationId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","modified":"2026-10-30T16:42:06.617Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-30T17:18:21.262Z"}],"references":[{"url":"https://github.com/canonical/lxd/security/advisories/GHSA-99jp-jwmc-65p4","tags":["vendor-advisory"],"source":"canonical"},{"url":"https://discourse.ubuntu.com/t/security-advisory-critical-vulnerability-found-in-canonical-lxd-and-microcloud/90557","tags":["vendor-advisory"],"source":"canonical"},{"url":"https://discourse.ubuntu.com/t/lxd-6-10-1-lts-has-been-released/90024","tags":["release-notes"],"source":"canonical"},{"url":"https://discourse.ubuntu.com/t/lxd-5-21-9-lts-has-been-released/90565/1","tags":["release-notes"],"source":"canonical"},{"url":"https://discourse.ubuntu.com/t/lxd-5-0-11-lts-has-been-released/90570/1","tags":["release-notes"],"source":"canonical"},{"url":"https://discourse.ubuntu.com/t/lxd-4-0-15-lts-has-been-released/90571","tags":["release-notes"],"source":"canonical"}],"weaknesses":[{"id":"CWE-295","description":"CWE-295 Improper certificate validation","source":"canonical"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-30T17:02:09.413887Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"total"}]}]},"title":"Improper certificate validation in the HTTPS listener in LXD","titleSource":"canonical","descriptionSource":"canonical","description":"Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted certificate chain.","score":10,"severity":"critical","published":"2026-10-30T16:42:06.617Z","modified":"2026-10-30T17:18:21.262Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Canonical","name":"LXD","platforms":["Linux"],"versions":[{"version":"4.0.14","status":"affected","lessThan":"4.0.15","versionType":"semver"},{"version":"5.0.10","status":"affected","lessThan":"5.0.11","versionType":"semver"},{"version":"5.21.8","status":"affected","lessThan":"5.21.9","versionType":"semver"},{"version":"6.9.0","status":"affected","lessThan":"6.10.1","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"canonical","url":"https://www.cve.org/CVERecord?id=CVE-2026-112816"}],"remediation":[],"references":["https://github.com/canonical/lxd/security/advisories/GHSA-99jp-jwmc-65p4","https://discourse.ubuntu.com/t/security-advisory-critical-vulnerability-found-in-canonical-lxd-and-microcloud/90557","https://discourse.ubuntu.com/t/lxd-6-10-1-lts-has-been-released/90024","https://discourse.ubuntu.com/t/lxd-5-21-9-lts-has-been-released/90565/1","https://discourse.ubuntu.com/t/lxd-5-0-11-lts-has-been-released/90570/1","https://discourse.ubuntu.com/t/lxd-4-0-15-lts-has-been-released/90571"],"sources":[{"name":"CVE","id":"CVE-2026-112816","modified":"2026-10-30T17:18:21.262Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-112816"}],"assessments":[{"source":"canonical","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","score":10}],"sourceAffected":[],"observedAt":"2026-10-30T17:32:01.770Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T01:00:32.474Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T17:40:32.407Z","attemptedAt":"2026-10-30T17:40:32.407Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-30T17:40:32.407Z","attemptedAt":"2026-10-30T17:40:32.407Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-10-30T17:40:32.407Z","attemptedAt":"2026-10-30T17:40:32.407Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T17:40:32.407Z","attemptedAt":"2026-10-30T17:40:32.407Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-112816","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112816","modified":"2026-10-30T17:17:14.427","score":10,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-10-30T17:40:32.407Z"}],"aiSummary":null}