CVE-20XX-?

Apache Cloudstack CVEs.

Published CVEs affecting Apache Cloudstack, ranked by exploit odds.

1 CVEs · updated 2026-11-06 03:02 UTC

Reset all
  1. CVE-2026-68745

    Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the management server. The agent will have to spoof the ip address of the IdP or get an url of its own choosing registered in the management server, after which it can allow logging on with forged signatures. Users are recommended to upgrade to versions 4.20.3.1 or 4.22.1.1 and above, which fix this issue.

    Crypto Server Apache Cloudstack

    8.1 HIGH 0.2% exploit odds Fix listed

All CVEs affecting Apache Cloudstack that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.