Tag: client impersonation attacks
1 article

LXD Flaw Exposes Servers to Client Impersonation Attacks
A critical flaw in LXD and MicroCloud, tracked as CVE-2026-112816, allows attackers to impersonate trusted clients without needing their private key, earning a maximum CVSS score of 10.0. This vulnerability enables hackers to log in by exploiting a faulty certificate check in the HTTPS API.