CVE-2026-68745

Apache CloudStack versions 4.20.3.0 and 4.22.1.0 are vulnerable to certificate validation failures within the SAML authentication process. This flaw allows a malicious agent to forge a SAML response to the management server by either spoofing the Identity Provider (IdP) IP address or registering ...