All vulnerabilities

Servers and applications

CVE-2026-112816

Improper certificate validation in the HTTPS listener in LXD

Severity
Critical 10.0
Published
30 Oct 2026
Last changed
31 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
4.0.15, 5.0.11, 5.21.9, 6.10.1
Sources
CVE Program

Affected software

SoftwareAffected versions
LXDServers and applications · cna:canonical|lxd
  • From 4.0.14 before 4.0.15
  • From 5.0.10 before 5.0.11
  • From 5.21.8 before 5.21.9
  • From 6.9.0 before 6.10.1

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-112816