{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-112816", "tracking": { "current_release_date": "2026-11-04T10:28:15.180215Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-112816", "initial_release_date": "2026-10-30T17:38:24.138538Z", "revision_history": [ { "date": "2026-10-30T17:38:24.138538Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (6).| CWES updated (1)." }, { "date": "2026-10-30T17:38:30.415992Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-10-30T17:44:29.728117Z", "number": "3", "summary": "CVSS created.| CWES created (1).| Unknown change.| Products created (4).| References created (6).| Description created for source.| Unknown change." }, { "date": "2026-10-30T17:44:35.764926Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-10-30T19:28:02.341049Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-10-31T15:15:33.812236Z", "number": "6", "summary": "EPSS created.| Unknown change." }, { "date": "2026-10-31T15:15:44.654747Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-11-01T18:44:00.347878Z", "number": "8", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products connected (1)." }, { "date": "2026-11-01T18:44:05.041349Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-11-02T09:18:36.931578Z", "number": "10", "summary": "Source created.| CVE status created. (valid)" }, { "date": "2026-11-03T06:25:44.563018Z", "number": "11", "summary": "CVSS created.| CWES created (1).| Products created (150).| References created (9).| Description created for source.| Unknown change." }, { "date": "2026-11-03T06:25:54.353548Z", "number": "12", "summary": "NCSC Score updated." }, { "date": "2026-11-04T10:27:51.993206Z", "number": "13", "summary": "NCSC Score updated." } ], "status": "interim", "version": "13" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:semver/4.0.14|<4.0.15", "product": { "name": "vers:semver/4.0.14|<4.0.15", "product_id": "CSAFPID-9956903" } }, { "category": "product_version_range", "name": "vers:semver/5.0.10|<5.0.11", "product": { "name": "vers:semver/5.0.10|<5.0.11", "product_id": "CSAFPID-9956904" } }, { "category": "product_version_range", "name": "vers:semver/5.21.8|<5.21.9", "product": { "name": "vers:semver/5.21.8|<5.21.9", "product_id": "CSAFPID-9956905" } }, { "category": "product_version_range", "name": "vers:semver/6.9.0|<6.10.1", "product": { "name": "vers:semver/6.9.0|<6.10.1", "product_id": "CSAFPID-9956906" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.1", "product": { "name": "vers:unknown/lxd-0.1", "product_id": "CSAFPID-3658261" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.10", "product": { "name": "vers:unknown/lxd-0.10", "product_id": "CSAFPID-3658262" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.11", "product": { "name": "vers:unknown/lxd-0.11", "product_id": "CSAFPID-3658263" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.12", "product": { "name": "vers:unknown/lxd-0.12", "product_id": "CSAFPID-3658264" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.13", "product": { "name": "vers:unknown/lxd-0.13", "product_id": "CSAFPID-3658265" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.14", "product": { "name": "vers:unknown/lxd-0.14", "product_id": "CSAFPID-3658266" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.15", "product": { "name": "vers:unknown/lxd-0.15", "product_id": "CSAFPID-3658267" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.16", "product": { "name": "vers:unknown/lxd-0.16", "product_id": "CSAFPID-3658268" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.17", "product": { "name": "vers:unknown/lxd-0.17", "product_id": "CSAFPID-3658269" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.18", "product": { "name": "vers:unknown/lxd-0.18", "product_id": "CSAFPID-3658270" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.19", "product": { "name": "vers:unknown/lxd-0.19", "product_id": "CSAFPID-3658271" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.2", "product": { "name": "vers:unknown/lxd-0.2", "product_id": "CSAFPID-3658272" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.20", "product": { "name": "vers:unknown/lxd-0.20", "product_id": "CSAFPID-3658273" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.21", "product": { "name": "vers:unknown/lxd-0.21", "product_id": "CSAFPID-3658274" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.22", "product": { "name": "vers:unknown/lxd-0.22", "product_id": "CSAFPID-3658275" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.23", "product": { "name": "vers:unknown/lxd-0.23", "product_id": "CSAFPID-3658276" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.24", "product": { "name": "vers:unknown/lxd-0.24", "product_id": "CSAFPID-3658277" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.25", "product": { "name": "vers:unknown/lxd-0.25", "product_id": "CSAFPID-3658278" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.26", "product": { "name": "vers:unknown/lxd-0.26", "product_id": "CSAFPID-3658279" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.27", "product": { "name": "vers:unknown/lxd-0.27", "product_id": "CSAFPID-3658280" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.3", "product": { "name": "vers:unknown/lxd-0.3", "product_id": "CSAFPID-3658281" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.4", "product": { "name": "vers:unknown/lxd-0.4", "product_id": "CSAFPID-3658282" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.5", "product": { "name": "vers:unknown/lxd-0.5", "product_id": "CSAFPID-3658283" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.6", "product": { "name": "vers:unknown/lxd-0.6", "product_id": "CSAFPID-3658284" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.7", "product": { "name": "vers:unknown/lxd-0.7", "product_id": "CSAFPID-3658285" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.8", "product": { "name": "vers:unknown/lxd-0.8", "product_id": "CSAFPID-3658286" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.8.1", "product": { "name": "vers:unknown/lxd-0.8.1", "product_id": "CSAFPID-3658287" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-0.9", "product": { "name": "vers:unknown/lxd-0.9", "product_id": "CSAFPID-3658288" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0", "product": { "name": "vers:unknown/lxd-2.0.0", "product_id": "CSAFPID-3658289" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.beta1", "product": { "name": "vers:unknown/lxd-2.0.0.beta1", "product_id": "CSAFPID-3658290" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.beta2", "product": { "name": "vers:unknown/lxd-2.0.0.beta2", "product_id": "CSAFPID-3658291" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.beta3", "product": { "name": "vers:unknown/lxd-2.0.0.beta3", "product_id": "CSAFPID-3658292" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.beta4", "product": { "name": "vers:unknown/lxd-2.0.0.beta4", "product_id": "CSAFPID-3658293" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.rc1", "product": { "name": "vers:unknown/lxd-2.0.0.rc1", "product_id": "CSAFPID-3658294" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.rc2", "product": { "name": "vers:unknown/lxd-2.0.0.rc2", "product_id": "CSAFPID-3658295" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.rc3", "product": { "name": "vers:unknown/lxd-2.0.0.rc3", "product_id": "CSAFPID-3658296" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.rc4", "product": { "name": "vers:unknown/lxd-2.0.0.rc4", "product_id": "CSAFPID-3658297" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.rc5", "product": { "name": "vers:unknown/lxd-2.0.0.rc5", "product_id": "CSAFPID-3658298" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.rc6", "product": { "name": "vers:unknown/lxd-2.0.0.rc6", "product_id": "CSAFPID-3658299" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.rc7", "product": { "name": "vers:unknown/lxd-2.0.0.rc7", "product_id": "CSAFPID-3658300" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.rc8", "product": { "name": "vers:unknown/lxd-2.0.0.rc8", "product_id": "CSAFPID-3658301" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.0.0.rc9", "product": { "name": "vers:unknown/lxd-2.0.0.rc9", "product_id": "CSAFPID-3658302" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.1", "product": { "name": "vers:unknown/lxd-2.1", "product_id": "CSAFPID-3658303" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.10", "product": { "name": "vers:unknown/lxd-2.10", "product_id": "CSAFPID-3658304" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.10.1", "product": { "name": "vers:unknown/lxd-2.10.1", "product_id": "CSAFPID-3658305" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.11", "product": { "name": "vers:unknown/lxd-2.11", "product_id": "CSAFPID-3658306" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.12", "product": { "name": "vers:unknown/lxd-2.12", "product_id": "CSAFPID-3658307" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.13", "product": { "name": "vers:unknown/lxd-2.13", "product_id": "CSAFPID-3658308" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.14", "product": { "name": "vers:unknown/lxd-2.14", "product_id": "CSAFPID-3658309" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.15", "product": { "name": "vers:unknown/lxd-2.15", "product_id": "CSAFPID-3658310" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.16", "product": { "name": "vers:unknown/lxd-2.16", "product_id": "CSAFPID-3658311" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.17", "product": { "name": "vers:unknown/lxd-2.17", "product_id": "CSAFPID-3658312" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.18", "product": { "name": "vers:unknown/lxd-2.18", "product_id": "CSAFPID-3658313" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.19", "product": { "name": "vers:unknown/lxd-2.19", "product_id": "CSAFPID-3658314" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.2", "product": { "name": "vers:unknown/lxd-2.2", "product_id": "CSAFPID-3658315" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.20", "product": { "name": "vers:unknown/lxd-2.20", "product_id": "CSAFPID-3658316" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.21", "product": { "name": "vers:unknown/lxd-2.21", "product_id": "CSAFPID-3658317" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.3", "product": { "name": "vers:unknown/lxd-2.3", "product_id": "CSAFPID-3658318" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.4", "product": { "name": "vers:unknown/lxd-2.4", "product_id": "CSAFPID-3658319" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.4.1", "product": { "name": "vers:unknown/lxd-2.4.1", "product_id": "CSAFPID-3658320" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.5", "product": { "name": "vers:unknown/lxd-2.5", "product_id": "CSAFPID-3658321" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.6", "product": { "name": "vers:unknown/lxd-2.6", "product_id": "CSAFPID-3658322" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.6.1", "product": { "name": "vers:unknown/lxd-2.6.1", "product_id": "CSAFPID-3658323" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.6.2", "product": { "name": "vers:unknown/lxd-2.6.2", "product_id": "CSAFPID-3658324" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.7", "product": { "name": "vers:unknown/lxd-2.7", "product_id": "CSAFPID-3658325" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.8", "product": { "name": "vers:unknown/lxd-2.8", "product_id": "CSAFPID-3658326" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.9", "product": { "name": "vers:unknown/lxd-2.9", "product_id": "CSAFPID-3658327" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.9.1", "product": { "name": "vers:unknown/lxd-2.9.1", "product_id": "CSAFPID-3658328" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.9.2", "product": { "name": "vers:unknown/lxd-2.9.2", "product_id": "CSAFPID-3658329" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-2.9.3", "product": { "name": "vers:unknown/lxd-2.9.3", "product_id": "CSAFPID-3658330" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.0.0", "product": { "name": "vers:unknown/lxd-3.0.0", "product_id": "CSAFPID-3658331" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.0.0.beta1", "product": { "name": "vers:unknown/lxd-3.0.0.beta1", "product_id": "CSAFPID-3658332" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.0.0.beta2", "product": { "name": "vers:unknown/lxd-3.0.0.beta2", "product_id": "CSAFPID-3658333" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.0.0.beta3", "product": { "name": "vers:unknown/lxd-3.0.0.beta3", "product_id": "CSAFPID-3658334" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.0.0.beta4", "product": { "name": "vers:unknown/lxd-3.0.0.beta4", "product_id": "CSAFPID-3658335" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.0.0.beta5", "product": { "name": "vers:unknown/lxd-3.0.0.beta5", "product_id": "CSAFPID-3658336" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.0.0.beta6", "product": { "name": "vers:unknown/lxd-3.0.0.beta6", "product_id": "CSAFPID-3658337" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.0.0.beta7", "product": { "name": "vers:unknown/lxd-3.0.0.beta7", "product_id": "CSAFPID-3658338" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.1", "product": { "name": "vers:unknown/lxd-3.1", "product_id": "CSAFPID-3658339" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.10", "product": { "name": "vers:unknown/lxd-3.10", "product_id": "CSAFPID-3658340" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.11", "product": { "name": "vers:unknown/lxd-3.11", "product_id": "CSAFPID-3658341" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.12", "product": { "name": "vers:unknown/lxd-3.12", "product_id": "CSAFPID-3658342" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.13", "product": { "name": "vers:unknown/lxd-3.13", "product_id": "CSAFPID-3658343" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.14", "product": { "name": "vers:unknown/lxd-3.14", "product_id": "CSAFPID-3658344" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.15", "product": { "name": "vers:unknown/lxd-3.15", "product_id": "CSAFPID-3658345" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.16", "product": { "name": "vers:unknown/lxd-3.16", "product_id": "CSAFPID-3658346" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.17", "product": { "name": "vers:unknown/lxd-3.17", "product_id": "CSAFPID-3658347" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.18", "product": { "name": "vers:unknown/lxd-3.18", "product_id": "CSAFPID-3658348" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.19", "product": { "name": "vers:unknown/lxd-3.19", "product_id": "CSAFPID-3658349" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.2", "product": { "name": "vers:unknown/lxd-3.2", "product_id": "CSAFPID-3658350" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.20", "product": { "name": "vers:unknown/lxd-3.20", "product_id": "CSAFPID-3658351" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.21", "product": { "name": "vers:unknown/lxd-3.21", "product_id": "CSAFPID-3658352" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.22", "product": { "name": "vers:unknown/lxd-3.22", "product_id": "CSAFPID-3658353" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.23", "product": { "name": "vers:unknown/lxd-3.23", "product_id": "CSAFPID-3658354" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.3", "product": { "name": "vers:unknown/lxd-3.3", "product_id": "CSAFPID-3658355" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.4", "product": { "name": "vers:unknown/lxd-3.4", "product_id": "CSAFPID-3658356" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.5", "product": { "name": "vers:unknown/lxd-3.5", "product_id": "CSAFPID-3658357" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.6", "product": { "name": "vers:unknown/lxd-3.6", "product_id": "CSAFPID-3658358" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.7", "product": { "name": "vers:unknown/lxd-3.7", "product_id": "CSAFPID-3658359" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.8", "product": { "name": "vers:unknown/lxd-3.8", "product_id": "CSAFPID-3658360" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-3.9", "product": { "name": "vers:unknown/lxd-3.9", "product_id": "CSAFPID-3658361" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.0.0", "product": { "name": "vers:unknown/lxd-4.0.0", "product_id": "CSAFPID-3658087" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.0.14", "product": { "name": "vers:unknown/lxd-4.0.14", "product_id": "CSAFPID-9997364" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.1", "product": { "name": "vers:unknown/lxd-4.1", "product_id": "CSAFPID-3658362" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.10", "product": { "name": "vers:unknown/lxd-4.10", "product_id": "CSAFPID-3658363" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.11", "product": { "name": "vers:unknown/lxd-4.11", "product_id": "CSAFPID-3658364" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.12", "product": { "name": "vers:unknown/lxd-4.12", "product_id": "CSAFPID-3658365" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.13", "product": { "name": "vers:unknown/lxd-4.13", "product_id": "CSAFPID-3658366" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.14", "product": { "name": "vers:unknown/lxd-4.14", "product_id": "CSAFPID-3658367" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.15", "product": { "name": "vers:unknown/lxd-4.15", "product_id": "CSAFPID-3658368" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.16", "product": { "name": "vers:unknown/lxd-4.16", "product_id": "CSAFPID-3658369" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.17", "product": { "name": "vers:unknown/lxd-4.17", "product_id": "CSAFPID-3658370" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.18", "product": { "name": "vers:unknown/lxd-4.18", "product_id": "CSAFPID-3658371" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.19", "product": { "name": "vers:unknown/lxd-4.19", "product_id": "CSAFPID-3658372" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.2", "product": { "name": "vers:unknown/lxd-4.2", "product_id": "CSAFPID-3658373" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.20", "product": { "name": "vers:unknown/lxd-4.20", "product_id": "CSAFPID-3658374" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.21", "product": { "name": "vers:unknown/lxd-4.21", "product_id": "CSAFPID-3658375" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.22", "product": { "name": "vers:unknown/lxd-4.22", "product_id": "CSAFPID-3658376" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.23", "product": { "name": "vers:unknown/lxd-4.23", "product_id": "CSAFPID-3658377" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.24", "product": { "name": "vers:unknown/lxd-4.24", "product_id": "CSAFPID-3658378" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.3", "product": { "name": "vers:unknown/lxd-4.3", "product_id": "CSAFPID-3658379" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.4", "product": { "name": "vers:unknown/lxd-4.4", "product_id": "CSAFPID-3658380" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.5", "product": { "name": "vers:unknown/lxd-4.5", "product_id": "CSAFPID-3658381" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.6", "product": { "name": "vers:unknown/lxd-4.6", "product_id": "CSAFPID-3658382" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.7", "product": { "name": "vers:unknown/lxd-4.7", "product_id": "CSAFPID-3658383" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.8", "product": { "name": "vers:unknown/lxd-4.8", "product_id": "CSAFPID-3658384" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-4.9", "product": { "name": "vers:unknown/lxd-4.9", "product_id": "CSAFPID-3658385" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.0.0", "product": { "name": "vers:unknown/lxd-5.0.0", "product_id": "CSAFPID-3658386" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.0.10", "product": { "name": "vers:unknown/lxd-5.0.10", "product_id": "CSAFPID-9997365" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.1", "product": { "name": "vers:unknown/lxd-5.1", "product_id": "CSAFPID-3658387" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.10", "product": { "name": "vers:unknown/lxd-5.10", "product_id": "CSAFPID-3658388" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.11", "product": { "name": "vers:unknown/lxd-5.11", "product_id": "CSAFPID-3658389" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.12", "product": { "name": "vers:unknown/lxd-5.12", "product_id": "CSAFPID-3658390" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.13", "product": { "name": "vers:unknown/lxd-5.13", "product_id": "CSAFPID-3658391" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.14", "product": { "name": "vers:unknown/lxd-5.14", "product_id": "CSAFPID-3658392" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.15", "product": { "name": "vers:unknown/lxd-5.15", "product_id": "CSAFPID-3658393" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.16", "product": { "name": "vers:unknown/lxd-5.16", "product_id": "CSAFPID-3658394" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.17", "product": { "name": "vers:unknown/lxd-5.17", "product_id": "CSAFPID-3658395" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.2", "product": { "name": "vers:unknown/lxd-5.2", "product_id": "CSAFPID-3658398" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.21.8", "product": { "name": "vers:unknown/lxd-5.21.8", "product_id": "CSAFPID-9997366" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.3", "product": { "name": "vers:unknown/lxd-5.3", "product_id": "CSAFPID-3658401" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.4", "product": { "name": "vers:unknown/lxd-5.4", "product_id": "CSAFPID-3658402" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.5", "product": { "name": "vers:unknown/lxd-5.5", "product_id": "CSAFPID-3658403" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.6", "product": { "name": "vers:unknown/lxd-5.6", "product_id": "CSAFPID-3658404" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.7", "product": { "name": "vers:unknown/lxd-5.7", "product_id": "CSAFPID-3658405" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.8", "product": { "name": "vers:unknown/lxd-5.8", "product_id": "CSAFPID-3658406" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-5.9", "product": { "name": "vers:unknown/lxd-5.9", "product_id": "CSAFPID-3658407" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-6.10.0", "product": { "name": "vers:unknown/lxd-6.10.0", "product_id": "CSAFPID-9997367" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-6.8", "product": { "name": "vers:unknown/lxd-6.8", "product_id": "CSAFPID-8566805" } }, { "category": "product_version_range", "name": "vers:unknown/lxd-6.9", "product": { "name": "vers:unknown/lxd-6.9", "product_id": "CSAFPID-9729106" } } ], "category": "product_name", "name": "LXD" } ], "category": "vendor", "name": "Canonical" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-2752898" } } ], "category": "product_name", "name": "lxd" } ], "category": "product_family", "name": "bookworm" } ], "category": "vendor", "name": "Debian" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-112816", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "description", "text": "Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted certificate chain.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-112816" }, { "category": "description", "text": "Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted certificate chain.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-112816" }, { "category": "description", "text": "Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted certificate chain.", "title": "osvgit - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-112816.json?alt=media" }, { "category": "description", "text": "Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted certificate chain.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-112816" }, { "category": "other", "text": "0.00303", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" }, { "category": "other", "text": "10.0", "title": "CVSSV4 base score" }, { "category": "other", "text": "4.7", "title": "NCSC Score" }, { "category": "other", "text": "Is related to a product by vendor Canonical", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "Is related to (a version of) an uncommon product, The value of the most recent CVSS (V3) score, There is cwe data available from source Nvd", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-9956903", "CSAFPID-9956904", "CSAFPID-9956905", "CSAFPID-9956906", "CSAFPID-2752898", "CSAFPID-3658261", "CSAFPID-3658262", "CSAFPID-3658263", "CSAFPID-3658264", "CSAFPID-3658265", "CSAFPID-3658266", "CSAFPID-3658267", "CSAFPID-3658268", "CSAFPID-3658269", "CSAFPID-3658270", "CSAFPID-3658271", "CSAFPID-3658272", "CSAFPID-3658273", "CSAFPID-3658274", "CSAFPID-3658275", "CSAFPID-3658276", "CSAFPID-3658277", "CSAFPID-3658278", "CSAFPID-3658279", "CSAFPID-3658280", "CSAFPID-3658281", "CSAFPID-3658282", "CSAFPID-3658283", "CSAFPID-3658284", "CSAFPID-3658285", "CSAFPID-3658286", "CSAFPID-3658287", "CSAFPID-3658288", "CSAFPID-3658289", "CSAFPID-3658290", "CSAFPID-3658291", "CSAFPID-3658292", "CSAFPID-3658293", "CSAFPID-3658294", "CSAFPID-3658295", "CSAFPID-3658296", "CSAFPID-3658297", "CSAFPID-3658298", "CSAFPID-3658299", "CSAFPID-3658300", "CSAFPID-3658301", "CSAFPID-3658302", "CSAFPID-3658303", "CSAFPID-3658304", "CSAFPID-3658305", "CSAFPID-3658306", "CSAFPID-3658307", "CSAFPID-3658308", "CSAFPID-3658309", "CSAFPID-3658310", "CSAFPID-3658311", "CSAFPID-3658312", "CSAFPID-3658313", "CSAFPID-3658314", "CSAFPID-3658315", "CSAFPID-3658316", "CSAFPID-3658317", "CSAFPID-3658318", "CSAFPID-3658319", "CSAFPID-3658320", "CSAFPID-3658321", "CSAFPID-3658322", "CSAFPID-3658323", "CSAFPID-3658324", "CSAFPID-3658325", "CSAFPID-3658326", "CSAFPID-3658327", "CSAFPID-3658328", "CSAFPID-3658329", "CSAFPID-3658330", "CSAFPID-3658331", "CSAFPID-3658332", "CSAFPID-3658333", "CSAFPID-3658334", "CSAFPID-3658335", "CSAFPID-3658336", "CSAFPID-3658337", "CSAFPID-3658338", "CSAFPID-3658339", "CSAFPID-3658340", "CSAFPID-3658341", "CSAFPID-3658342", "CSAFPID-3658343", "CSAFPID-3658344", "CSAFPID-3658345", "CSAFPID-3658346", "CSAFPID-3658347", "CSAFPID-3658348", "CSAFPID-3658349", "CSAFPID-3658350", "CSAFPID-3658351", "CSAFPID-3658352", "CSAFPID-3658353", "CSAFPID-3658354", "CSAFPID-3658355", "CSAFPID-3658356", "CSAFPID-3658357", "CSAFPID-3658358", "CSAFPID-3658359", "CSAFPID-3658360", "CSAFPID-3658361", "CSAFPID-3658087", "CSAFPID-9997364", "CSAFPID-3658362", "CSAFPID-3658363", "CSAFPID-3658364", "CSAFPID-3658365", "CSAFPID-3658366", "CSAFPID-3658367", "CSAFPID-3658368", "CSAFPID-3658369", "CSAFPID-3658370", "CSAFPID-3658371", "CSAFPID-3658372", "CSAFPID-3658373", "CSAFPID-3658374", "CSAFPID-3658375", "CSAFPID-3658376", "CSAFPID-3658377", "CSAFPID-3658378", "CSAFPID-3658379", "CSAFPID-3658380", "CSAFPID-3658381", "CSAFPID-3658382", "CSAFPID-3658383", "CSAFPID-3658384", "CSAFPID-3658385", "CSAFPID-3658386", "CSAFPID-9997365", "CSAFPID-3658387", "CSAFPID-3658388", "CSAFPID-3658389", "CSAFPID-3658390", "CSAFPID-3658391", "CSAFPID-3658392", "CSAFPID-3658393", "CSAFPID-3658394", "CSAFPID-3658395", "CSAFPID-3658398", "CSAFPID-9997366", "CSAFPID-3658401", "CSAFPID-3658402", "CSAFPID-3658403", "CSAFPID-3658404", "CSAFPID-3658405", "CSAFPID-3658406", "CSAFPID-3658407", "CSAFPID-9997367", "CSAFPID-8566805", "CSAFPID-9729106" ] }, "references": [ { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-112816.json?alt=media" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112816" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-112816" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-112816" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-112816" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0464" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://discourse.ubuntu.com/t/lxd-4-0-15-lts-has-been-released/90571" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://discourse.ubuntu.com/t/lxd-5-0-11-lts-has-been-released/90570/1" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://discourse.ubuntu.com/t/lxd-5-21-9-lts-has-been-released/90565/1" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://discourse.ubuntu.com/t/lxd-6-10-1-lts-has-been-released/90024" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://discourse.ubuntu.com/t/security-advisory-critical-vulnerability-found-in-canonical-lxd-and-microcloud/90557" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/canonical/lxd/security/advisories/GHSA-99jp-jwmc-65p4" }, { "category": "external", "summary": "Reference - osv", "url": "https://canonical.com/lxd" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112816.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112816" } ], "title": "CVE-2026-112816" } ] }