EUVD-2026-63839

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Instance Reset Password functionality. This issue affects Apache CloudStack: from 4.15.1.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or...

CVE-2026-61398

Apache CloudStack is affected by a Cross-Site Scripting (XSS) vulnerability in the Instance Reset Password functionality of its UI, caused by improper encoding or escaping of output. The issue affects versions 4.15.1.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 . Users are advised to upgrade ...