CVE-2025-66171

creationtimestamp| type| source ---|---|--- 2026-05-09 04:41:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfgjejuxq2i...

CVE-2025-66171 Apache CloudStack: Any user can create a new VM from backups they should not have access to

The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can create new VMs using backups of any other user of the...

EUVD-2025-66171

Malicious code in tiara-moci82-crottsekebon npm...