CVE-2026-68745

Apache CloudStack versions 4.20.3.0 and 4.22.1.0 (all platforms) suffer from certificate validation failures in their SAML authentication flow. The root cause is that SAML2 signature validation is silently skipped when the Identity Provider (IdP) is configured without a certificate. This allows a...