EUVD-2026-63842

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's LDAP authentication plugin while listing LDAP providers. LDAP configurations can be listed by any authenticated user with access to the listLdapConfigurations API. By default, this API is available to...

CVE-2026-59780

Apache CloudStack 's LDAP authentication plugin contains an information disclosure vulnerability in the listLdapConfigurations API. By default, this API is accessible to all authenticated users with default roles, allowing them to retrieve LDAP provider configurations that should be restricted. T...

EUVD-2026-63841

Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable flow. This issue affects Apache CloudStack: from 4.18.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to...

CVE-2026-59799

Apache CloudStack contains an Improper Privilege Management vulnerability in its Two-factor authentication plugin . The root cause is a missing privilege check in the two-factor authentication disable flow, which allows an attacker to bypass the 2FA disable flow . Affected versions: 4.18.0.0 thro...

CVE-2026-61397

Apache CloudStack is affected by an OAuth2 Token Cross-Request Leak in its OAuth2 authentication plugin and Google OAuth integration, classified as Exposure of Sensitive Information to an Unauthorized Actor . The vulnerability allows sensitive OAuth2 tokens to leak across requests, potentially ex...

EUVD-2026-63840

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth2 authentication plugin and Google OAuth integration. This issue affects Apache CloudStack: from 4.19.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to...

EUVD-2026-63839

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Instance Reset Password functionality. This issue affects Apache CloudStack: from 4.15.1.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or...

CVE-2026-61398

Apache CloudStack is affected by a Cross-Site Scripting (XSS) vulnerability in the Instance Reset Password functionality of its UI, caused by improper encoding or escaping of output. The issue affects versions 4.15.1.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 . Users are advised to upgrade ...

EUVD-2026-63838

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Lock User Functionality. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later,...

CVE-2026-61399

Apache CloudStack is affected by an Improper Encoding or Escaping of Output vulnerability (XSS) in the UI Lock User Functionality . The flaw allows unsanitized output when the lock user feature is invoked, potentially enabling cross-site script injection. Affected versions span 4.20.0.0 through 4...

CVE-2026-61400 Apache CloudStack: Get and Run Diagnostics Command Injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache CloudStack's run and get diagnostics functionality for the system VMs and virtual routers. An authenticated user holding the permissions required to invoke either getDiagnosticsData or...

EUVD-2026-63837

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache CloudStack's run and get diagnostics functionality for the system VMs and virtual routers. An authenticated user holding the permissions required to invoke either getDiagnosticsData or...

CVE-2026-61400

Apache CloudStack is affected by a command injection vulnerability in the getDiagnosticsData and runDiagnostics APIs used for system VM and Virtual Router diagnostics. An authenticated user with Admin role permissions can achieve arbitrary command execution as root on the affected instances, resu...

CVE-2026-61422

Apache CloudStack is affected by an authenticated pre-validation SSRF in its template and ISO registration functionality. When a user registers a template or ISO, CloudStack issues a live HTTP HEAD/GET request to determine file size for secondary storage usage-limit checks before URL validation i...

EUVD-2026-63836

Authenticated pre-validation SSRF vulnerability in Apache CloudStack's template and ISO registration functionality. When registering a template or ISO, CloudStack makes a live HTTP HEAD/GET call to determine file size for secondary storage usage-limit checks, and this happens before URL validatio...

CVE-2026-62440

An Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service (CKS) plugin allows cross-tenant manipulation of the Kubernetes cluster during node addition and removal operations. The flaw means that a tenant may be able to interfere with cluster node operations belonging to a...

EUVD-2026-63835

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service CKS plugin, allowing cross-tenant manipulation of the Kubernetes cluster while adding and removing nodes. This issue affects Apache CloudStack: from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versi...

EUVD-2026-63834

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while listing and deleting deliveries. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versio...

CVE-2026-65613

Apache CloudStack 's Webhook module is affected by an exposure of sensitive information vulnerability that occurs while listing and deleting webhook deliveries. The CVELIST entry characterizes this as incorrect access on webhook deliveries, indicating that unauthorized actors can access sensitive...

EUVD-2026-63833

Missing authorization issue for domain admins in CloudStack's host tags listing functionality. Domain Admins, by default, have permission to call the listHostTags API, but the API returns host tags for every host in the environment without domain scoping. It should instead be restricted to only t...