CVE-2026-50222

Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Userdata reference APIs. Several userdata-related APIs in Apache CloudStack, including deleteUserData, linkUserDataToTemplate, resetUserDataForVirtualMachine, deployVirtualMachin...

CVE-2026-50222

Apache CloudStack userdata-related APIs (deleteUserData , linkUserDataToTemplate , resetUserDataForVirtualMachine , deployVirtualMachine , and updateVirtualMachine ) exhibit missing or insufficient access control validation , potentially allowing cross-tenant/cross-account access to userdata reso...

EUVD-2026-63846

Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Userdata reference APIs. Several userdata-related APIs in Apache CloudStack, including deleteUserData, linkUserDataToTemplate, resetUserDataForVirtualMachine, deployVirtualMachin...

CVE-2026-50222 Apache CloudStack: Improper access control in Userdata reference APIs

Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Userdata reference APIs. Several userdata-related APIs in Apache CloudStack, including deleteUserData, linkUserDataToTemplate, resetUserDataForVirtualMachine, deployVirtualMachin...

PT-2026-79317

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.18.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Insufficient access control validation in several userdata-related APIs may allow unauthorized cross-tenant or cross-account...