CVE-2026-59085

A Server-Side Request Forgery (SSRF) vulnerability exists in the webhook module of Apache CloudStack . This flaw allows an attacker to induce the server-side application to make requests to unintended locations via webhook delivery requests . The vulnerability affects versions 4.20.0.0 through 4....

CVE-2026-61398

Apache CloudStack is vulnerable to a Cross-Site Scripting (XSS) issue due to improper encoding or escaping of output in the user interface. This vulnerability is triggered when using the Instance Reset Password functionality. The flaw allows for the injection of malicious scripts into web pages v...

CVE-2026-61422

An authenticated Server-Side Request Forgery (SSRF) vulnerability exists in Apache CloudStack versions 4.20.3.0 and 4.21.0.0 through 4.22.1.0 . The flaw resides in the template and ISO registration functionality , where the system performs a live HTTP HEAD/GET call to determine file size for seco...

CVE-2026-62440

An Improper Access Control vulnerability exists in the Kubernetes Service (CKS) plugin of Apache CloudStack , affecting versions 4.21.0.0 through 4.22.1.0 . This flaw allows for cross-tenant manipulation of the Kubernetes cluster specifically during the processes of adding and removing nodes . To...

CVE-2025-66170

The CloudStack Backup plugin in versions 4.21.0.0 and 4.22.0.0 contains an improper authorization logic vulnerability. Authenticated users with account access in CloudStack environments where this plugin is enabled can leverage specific APIs to list backups from any account within the environment...

CVE-2026-50222

Apache CloudStack versions 4.18.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are vulnerable to missing authorization and insufficient access control validation within several userdata-related APIs. Specifically, the endpoints deleteUserData, linkUserDataToTemplate, resetUserDataForVirtualMa...

CVE-2025-66172

The CloudStack Backup plugin versions 4.21.0.0 and 4.22.0.0 contain an improper access logic vulnerability. This flaw allows any authenticated user with access to specific APIs to restore a volume from another user's backups and attach it to their own virtual machines in environments where the pl...

CVE-2026-59799

Apache CloudStack is affected by an improper privilege management vulnerability in its Two-factor authentication plugin . The flaw allows for a bypass of the two-factor authentication disable flow due to a missing privilege check. This issue impacts versions 4.18.0.0 through 4.20.3.0 and 4.21.0.0...

CVE-2026-68745

Apache CloudStack versions 4.20.3.0 and 4.22.1.0 are vulnerable to certificate validation failures within the SAML authentication process. This flaw allows a malicious agent to forge a SAML response to the management server by either spoofing the Identity Provider (IdP) IP address or registering ...

CVE-2026-59657

Apache CloudStack versions 4.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are vulnerable to a Cleartext Storage of Sensitive Information flaw. The issue occurs when using AsyncJob storage in the database, where sensitive information is stored without proper encryption. This could lead to un...

CVE-2026-59780

Apache CloudStack is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in its LDAP authentication plugin . The root cause is that the listLdapConfigurations API allows any authenticated user to list LDAP configurations; by default, this API is accessible to all default role...

CVE-2026-61399

Apache CloudStack is affected by an Improper Encoding or Escaping of Output vulnerability in its UI when using the Lock User functionality . This flaw leads to a Cross-Site Scripting (XSS) issue, which allows an attacker to inject malicious scripts into web pages viewed by other users. The vulner...

CVE-2026-66721

Apache CloudStack versions 4.12.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are vulnerable to a missing authorization issue in the listHostTags API. While Domain Admins are permitted to call this API, it fails to apply domain scoping, returning host tags for every host in the entire enviro...

CVE-2026-65613

Apache CloudStack versions 4.20.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are affected by an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. The flaw resides in the Webhook module and occurs specifically while listing and deleting deliveries , potentially allowi...

CVE-2026-66722

Apache CloudStack versions 4.15.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are vulnerable to an improper authorization flaw during CRUD operations on Project Roles and Project Role permissions. The system verifies that a caller is a Domain Admin but fails to validate whether the target pr...