https://cybercrime.club/tags/tls/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usMon, 02 Nov 2026 23:03:04 -0400https://cybercrime.club/posts/canonical-lxd-cve-2026-112816-mtls-certificate-chain-auth-bypass-microcloud/Mon, 02 Nov 2026 23:03:04 -0400https://cybercrime.club/posts/canonical-lxd-cve-2026-112816-mtls-certificate-chain-auth-bypass-microcloud/Canonical patched a CVSS 4.0 10.0 improper certificate validation bug in the LXD HTTPS listener that lets an attacker authenticate as any trusted client via a crafted certificate chain; MicroCloud is affected too.vulnerabilities