CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
2026-11-02T01:23:59Z•3627d3d993f2ac6951397d302ed81fe34bb08c2f44fe2d074904a562842c5f29
CVE-2026-111357CVE-2026-118539CVE-2026-97229CVE-2026-98432active-exploitationai-securityaptauthentication-bypassauthorization-bypasscloud-securitycritical-infrastructurecryptocurrency-theftdata-breachddosendpoint-securitymalwarephishingprivilege-escalationremote-code-executionstate-sponsoredsupply-chain-compromisevulnerabilities
What happened
The feed reports multiple major cybersecurity incidents and vulnerabilities, including a CVSS 10.0 Canonical LXD/MicroCloud client impersonation flaw, actively exploited Ivanti, Drupal, GitLab, and WordPress vulnerabilities, Linux kernel remote root execution, malware campaigns targeting government systems and AI users, supply-chain compromises, large-scale cryptocurrency theft, and state-sponsored intrusion activity. Several entries involve active exploitation or substantial data and asset impact.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 3627d3d993f2ac6951397d302ed81fe34bb08c2f44fe2d074904a562842c5f29
- Enrichment time
- 2026-11-02T01:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.