LXD HTTPS listener flaw lets attackers impersonate trusted clients
CVSS 4.0 score is 10.0; fixed releases are 4.0.15, 5.0.11, 5.21.9, and 6.10.1.
74
Vendor
Canonical
- Mentions · 7d5
- Mentions · 30d56
- All mentions168
- First seenSep 7, 2026
- Last mentioned16h ago
Timeline
168 articles · newest firstLinux kernel TCP flaw CVE-2026-98432 allows remote root on MPTCP servers
Anthropic says an unreleased Claude model built a root exploit in about 53 minutes; no in-the-wild attacks are confirmed.
74
Ubuntu fixes .NET debug-proxy and Brotli flaws
The earlier Blazor debug-proxy fix in USN-8942-1 was incomplete and only dotnet10 and dotnet11 were affected.
58
Claude research model wrote a root exploit for Linux CVE-2026-98432
Anthropic calls it a lab test, not a real incident; upstream kernels are patched but several Ubuntu releases remain vulnerable.
76
Canonical restarts Ubuntu Core Desktop as a future immutable default
Daily images are expected in the Ubuntu 27.04 cycle, and the desktop can run only snap-packaged software.
32
Ubuntu ships .NET security updates in USN-8942-1
.NET 8, 10, and 11 move to 8.0.32, 10.0.13, and 11.0.0~rc2 on the listed Ubuntu releases.
34
Ubuntu Squid flaws allow request smuggling and cache crashes
CVE-2026-61642 can smuggle requests or poison caches; a separate digest bug crashes older Ubuntu releases.
44
USN-8922-2: Linux kernel (Azure) vulnerabilities
Ubuntu patched multiple Azure Linux kernel flaws that could let an attacker compromise the system.
28
USN-8883-2: Go vulnerability
Ubuntu fixes a Go 1.23 x/net/idna Punycode flaw that could bypass hostname access controls.
32
USN-8930-1: U-Boot vulnerabilities
Ubuntu fixed U-Boot flaws that could crash systems or execute code through NFS or HTTP handling.
44
USN-8929-1: Bind vulnerabilities
Ubuntu patched Bind flaws that could cause denial of service or DNS cache poisoning.
34
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
Linux vhost flaw CVE-2026-74580 lets local users gain root and, in some setups, escape a guest to the host.
75
USN-8926-1: urllib3 vulnerabilities
Ubuntu fixes three urllib3 flaws, including certificate validation bypass and denial-of-service bugs.
48
USN-8924-1: Linux kernel vulnerabilities
Ubuntu patches old Linux kernel flaws that leak PIDs or crash via malicious XFS and f2fs images.
22
Massive DDoS Attack Disrupts Ubuntu’s Canonical Websites and Security APIs
A DDoS attack disrupted Canonical’s Ubuntu websites and security APIs for just over four hours.
58
USN-8915-1: FFmpeg vulnerabilities
Ubuntu's USN-8915-1 fixes FFmpeg flaws, including possible code execution and several denial-of-service bugs.
40
Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted
Canonical's public websites were disrupted for over four hours by its second DDoS attack of 2026.
64
USN-8912-1: Perl DBI module vulnerabilities
Ubuntu's USN-8912-1 patches Perl DBI flaws that may allow code execution or denial of service.
34
USN-8911-1: Linux kernel (OEM) vulnerabilities
Ubuntu patched multiple Linux kernel OEM flaws that could let attackers compromise affected systems.
34
USN-8887-3: Linux kernel vulnerabilities
Ubuntu patched Linux kernel flaws, including AMD SEV-SNP issue CVE-2023-20585.
36
USN-8875-2: Linux kernel (NVIDIA) vulnerabilities
Ubuntu fixed NVIDIA Linux kernel flaws, including local crash bug CVE-2022-3114.
24
USN-8903-2: Linux kernel vulnerabilities
Ubuntu patched multiple Linux kernel flaws that could let an attacker compromise the system.
34
USN-8905-2: Linux kernel (GCP) vulnerabilities
Ubuntu patched GCP Linux kernel vulnerabilities that could allow an attacker to compromise the system.
30
USN-8908-1: BlueZ vulnerabilities
Ubuntu patched BlueZ flaws, including an A2DP stack overflow and an out-of-bounds memory read.
40
USN-8910-1: libxml2 vulnerabilities
Ubuntu patched libxml2 flaws, including a heap overflow that could crash the library or allow code execution.
44
USN-8906-1: Linux kernel (IBM) vulnerabilities
Ubuntu patched IBM Linux kernel flaws, including a local Arm TLB issue tracked as CVE-2025-10263.
38
USN-8905-1: Linux kernel (GCP) vulnerabilities
Ubuntu issued USN-8905-1 fixing multiple Linux kernel vulnerabilities on Google Cloud images.
32
USN-8904-1: Linux kernel (Azure) vulnerabilities
Ubuntu's USN-8904-1 patches multiple Azure Linux kernel flaws that could let an attacker compromise the system.
28
USN-8903-1: Linux kernel vulnerabilities
Ubuntu's USN-8903-1 fixes multiple Linux kernel flaws across architectures and drivers that could allow system compromise.
26
USN-8888-2: Linux kernel (Azure) vulnerabilities
Ubuntu patched Azure Linux kernels, including AMD SEV-SNP flaw CVE-2023-20585 that a local hypervisor attacker could abuse.
38
USN-8887-2: Linux kernel (AWS) vulnerabilities
Ubuntu's USN-8887-2 patches AWS Linux kernels, including AMD SEV-SNP issue CVE-2023-20585 exploitable by a hypervisor attacker.
38
USN-8896-1: GStreamer Ugly Plugins vulnerabilities
Ubuntu patches GStreamer Ugly Plugins flaws that could run code from crafted RealMedia or ASF files.
32
USN-8900-1: Go Networking vulnerabilities
Ubuntu patches Go networking flaws that can hang HTTP/2 connections or exhaust resources via HPACK.
30
USN-8897-1: lxml vulnerabilities
Ubuntu fixes lxml flaws that can bypass URL sanitization for XSS and leak local files via untrusted XML.
34
USN-8895-1: Sudo vulnerability
Ubuntu says Sudo time rules can be bypassed via TZ when timestamps omit a timezone.
32
USN-8894-1: poppler vulnerabilities
Ubuntu's USN-8894-1 fixes Poppler overflows and a null dereference that can crash or run code.
32
LSN-0122-1: Kernel Live Patch Security Notice
Ubuntu live patch LSN-0122-1 fixes Linux kernel use-after-free and NULL-dereference bugs in DLM, brcmfmac, and padata.
32
USN-8892-1: Ubuntu Pro for WSL vulnerability
Ubuntu Pro for WSL leaked subscription attach tokens in command-line arguments, risking unauthorized repository access.
28
USN-8890-1: libsoup vulnerabilities
Ubuntu fixed libsoup flaws that could cause denial of service, leak proxy data, or bypass security checks.
36
USN-8884-1: U-Boot vulnerabilities
Ubuntu patches U-Boot flaws where crafted ZFS or ext4 metadata can cause code execution or denial of service.
34
Related CVEs
by mentions- CVE-2025-10263<1%9.1Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &…
- CVE-2026-53221<1%9.8Linux kernel: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
- CVE-2026-53131<1%9.4Linux kernel: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t_eui64`, `xt_mac`, the `bitmap:ip,mac`…
- CVE-2025-38724<1%7.8Linux kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that…
- CVE-2023-20585<1%5.6Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds…
- CVE-2022-3114<1%5.5An issue was discovered in the Linux kernel through 5.16-rc6
- CVE-2026-52914<1%9.8Linux kernel: batman-adv: fix fragment reassembly length accounting batman-adv keeps a running payload length for queued…
- CVE-2026-53309<1%9.8Linux kernel: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
- CVE-2026-52931<1%9.8Linux kernel: batman-adv: tp_meter: avoid use of uninit sender vars batadv_tp_recv_ack() and batadv_tp_stop() are only…
- CVE-2025-71289<1%5.5Linux kernel: fs/ntfs3: handle attr_set_size() errors when truncating files
Appears with
- Canonicalorganization · 77
- Ubuntuproduct · 69
- Linux kernelproduct · 64
- Ubuntuorganization · 53
- Ubuntuvendor · 39
- Microsoftvendor · 10
- AMDvendor · 7
- Armvendor · 6
- Microsoftorganization · 5
- SEV-SNPproduct · 4
- Microsoft Azure Network Adapterproduct · 4
- Amazon Web Servicesorganization · 3
- Perlproduct · 3
- Red Hatvendor · 3
- Oraclevendor · 3
- Raspberry Piproduct · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.