CVE-2026-66797

Apache CloudStack versions 4.15.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are affected by an improper access control flaw in the annotation functionality. The addAnnotation and listAnnotation APIs perform an ownership check when an entity's UUID is specified but fail to honor its result,...