> TritonInfoSec News
Home / Nov 02, 2026 / Story
0
#3 The Hacker News general November 01, 2026 at 08:51 UTC

CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

By [email protected] (The Hacker News)

AI Summary

A CVSS 10.0 vulnerability in Canonical's LXD and MicroCloud allows an attacker to impersonate a trusted client without possessing the client's private key — requiring only network access to the HTTPS API and the target's public certificate. Successful exploitation grants full cluster access, including control over virtual machines, making this critical for any organization running LXD or MicroCloud in multi-tenant or cloud environments. Canonical patches should be applied immediately given the maximum severity rating and low attack complexity.

Read full article → https://thehackernews.com/2026/11/critical-lxd-and…

Relevance score: 88.0/100

# More from November 02

  1. 1
    FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist The Hacker News
  2. 2
    FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer
  3. 4
    New Android SMS of Death exploit can remotely crash unpatched phones BleepingComputer
  4. 5
    Alpine Linux rebuilds GitLab after attempted RCE attack BleepingComputer
  5. 6
    Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script The Hacker News
  6. 7
    NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection The Hacker News
  7. 8
    Northflank security breach leads to abuse of customers' AI API keys BleepingComputer
  8. 9
    Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data The Hacker News
  9. 10
    Syrian Hacker Gets Prison Time in US After Over a Decade on the Run SecurityWeek