CVE-2026-59655

Apache CloudStack 's OAuth authentication plugin is vulnerable to unauthenticated disclosure of OAuth provider client-secrets when listing OAuth providers. This allows an unauthorized actor to access sensitive credential material without authentication. The issue affects versions 4.19.0.0 through...