Login Request a demo
AC
Product
Apache CloudStack
by Apache Software Foundation · last CVE Aug 21, 2026
27
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 4High 15Medium 7Low 1
Severity
All severities27Critical4High15Medium7Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache CloudStack to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-59085
9.1
1%
Aug 21
Apache CloudStack: Server-Side Request Forgery (SSRF) vulnerability in webhook module
Affected: 4.20.0.0 through 4.20.3.0; 4.21.0.0 through 4.22.1.0
CVE-2026-61398
9.1
1%
Aug 21
Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI
Affected: 4.15.1.0 through 4.20.3.0; 4.21.0.0 through 4.22.1.0
CVE-2026-62440
9.1
1%
Aug 21
Apache CloudStack: Improper access control in Kubernetes Service (CKS) cluster manipulation
Affected: 4.21.0.0 through 4.22.1.0
CVE-2026-25199
9.1
0%
May 8
Apache CloudStack: Proxmox Extension Allows Unauthorized Cross-Tenant Instance Access
Affected: 4.21.0 through 4.22.0
Showing 4