CVE-2026-59799

Apache CloudStack is affected by an improper privilege management vulnerability in its Two-factor authentication plugin . The flaw allows for a bypass of the two-factor authentication disable flow due to a missing privilege check. This issue impacts versions 4.18.0.0 through 4.20.3.0 and 4.21.0.0...