CVE-2026-68745

Apache CloudStack versions 4.20.3.0 and 4.22.1.0 contain a certificate validation failure in SAML authentication that allows a malicious agent to forge a SAML response to the management server. The root cause is that SAML2 signature validation is silently skipped for certificate-less IdPs, enabli...