vulnerability
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
HighCVSS 10.0
Summary
A critical vulnerability in Canonical's LXD and MicroCloud allows attackers to impersonate trusted clients by presenting a stolen public certificate.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data
Also covered by 22 other source(s)
- Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
- Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
- OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
- Vulnérabilité dans les produits Microsoft (26 octobre 2026)
- Multiples vulnérabilités dans Microsoft .Net (26 octobre 2026)
- Node2Shell Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
- Microsoft releases emergency .NET security fixes for Google Brotli bug
- Vulnérabilité dans les produits Palo Alto Networks (27 octobre 2026)
- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
- Microsoft releases out-of-band Windows fixes with certificate updates
- GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
- CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
- Lessons from Cybersecurity Black Week
- TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
- Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
- In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security
- CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
- Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress