CL
Product
Cloudstack
65
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 12High 25Medium 18Low 1
Watch
Add Cloudstack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47359 | 8.8 | Aug 21 | Apache CloudStack: OS Command Injection due to unsanitized mount command Affected: 4.20.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-50112 | 8.8 | Aug 21 | Apache CloudStack: RCE and SSRF in direct download, metalink and NFS templates Affected: 4.14.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-59799 | 8.8 | Aug 21 | Apache CloudStack: Missing Privilege Check in Two-Factor Authentication Disable Flow Affected: 4.18.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-61400 | 8.8 | Aug 21 | Apache CloudStack: Get and Run Diagnostics Command Injection Affected: 4.20.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-25077 | 8.8 | May 8 | Apache CloudStack: Unauthenticated Command Injection in Direct Download Templates Affected: 4.11.0.0 before 4.20.3.0; 4.21.0.0 before 4.22.0.1 |
| CVE-2025-47849 | 8.8 | Jun 10 | A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can get the API key and… Affected: 4.10.0.0 before 4.19.3.0; 4.20.0.0 before 4.20.1.0 |
| CVE-2025-47713 | 8.8 | Jun 10 | A privilege escalation vulnerability exists in Apache CloudStack versions 4.10.0.0 through 4.20.0.0 where a malicious Domain Admin user in the ROOT domain can reset the password… Affected: 4.10.0.0 before 4.19.3.0; 4.20.0.0 before 4.20.1.0 |
| CVE-2024-45693 | 8.8 | Oct 16 | Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing validation of the origin of the requests Affected: 4.15.1.0 before 4.18.2.4; 4.19.0.0 before 4.19.1.2 |
| CVE-2024-45219 | 8.5 | Oct 16 | Account users in Apache CloudStack by default are allowed to upload and register templates for deploying instances and volumes for attaching them as data disks to their existing… Affected: 4.0.0 before 4.18.2.4; 4.19.0.0 before 4.19.1.2 |
| CVE-2026-68745 | 8.1 | Aug 21 | Apache CloudStack: SAML2 Signature Validation Silently Skipped for Cert-less IdP Affected: 4.5.2 before 4.20.3.1; 4.22.1.0 |
| CVE-2025-66467 | 8.1 | May 8 | Apache CloudStack: MinIO policy remains intact on bucket deletion Affected: 4.19.0.0 before 4.20.3.0; 4.21.0.0 before 4.22.0.1 |
| CVE-2025-66172 | 8.1 | May 8 | Apache CloudStack: Any user can attach a volume in their VMs from backups they should not have access to Affected: 4.21.0.0 before 4.22.0.1 |
| CVE-2025-26521 | 8.1 | Jun 10 | When an Apache CloudStack user-account creates a CKS-based Kubernetes cluster in a project, the API key and the secret key of the 'kubeadmin' user of the caller account are used… Affected: 4.17.0.0 before 4.19.3.0; 4.20.0.0 before 4.20.1.0 |
| CVE-2024-41107 | 8.1 | Jul 19 | The CloudStack SAML authentication (disabled by default) does not enforce signature check Affected: 4.5.0 before 4.18.2.2; 4.19.0.0 before 4.19.1.0 |
| CVE-2026-59654 | 7.5 | Aug 21 | Apache CloudStack: DoS caused by database connections leak Affected: 4.7.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-50222 | 7.5 | Aug 21 | Apache CloudStack: Improper access control in Userdata reference APIs Affected: 4.18.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-59655 | 7.5 | Aug 21 | Apache CloudStack: Unauthenticated OAuth provider client-secret disclosure Affected: 4.19.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-59657 | 7.5 | Aug 21 | Apache CloudStack: Sensitive Information Disclosure via Cleartext Storage in AsyncJob Affected: 4.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-59780 | 7.5 | Aug 21 | Apache CloudStack: LDAP provider configuration disclosure Affected: 4.2.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2026-61397 | 7.5 | Aug 21 | Apache CloudStack: OAuth2 Token Cross-Request Leak Affected: 4.19.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2022-26779 | 7.5 | Mar 15 | Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens Affected: before 4.16.1.0 |
| CVE-2024-29007 | 7.3 | Apr 4 | The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects… Affected: 4.9.1.0 before 4.18.1.1; 4.19.0.0 |
| CVE-2026-66722 | 7.2 | Aug 21 | Apache CloudStack: ProjectRole & ProjectRolePermission authorization issue Affected: 4.15.0.0 before 4.20.3.1; 4.21.0.0 before 4.22.1.1 |
| CVE-2024-42062 | 7.2 | Aug 7 | CloudStack account-users by default use username and password based authentication for API and UI access Affected: 4.10.0.0 before 4.18.2.3; 4.19.0.0 before 4.19.1.1 |
| CVE-2024-45462 | 7.1 | Oct 16 | The logout operation in the CloudStack web interface does not expire the user session completely which is valid until expiry by time or restart of the backend service Affected: 4.15.1.0 before 4.18.2.4; 4.19.0.0 before 4.19.1.2 |
Showing 25