CVE-20XX-?
agent?

Apache Cloudstack CVEs.

Published CVEs affecting Apache Cloudstack, ranked by exploit odds.

2 CVEs · updated 2026-11-06 21:21 UTC

Reset all
  1. CVE-2026-59085

    Server-Side Request Forgery (SSRF) vulnerability in Apache CloudStack's webhook module, exploitable via webhook delivery requests. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.

    Disclosure Library Apache Cloudstack

    9.1 CRITICAL 0.6% exploit odds Fix listed
  2. CVE-2026-65613

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while listing and deleting deliveries. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.

    Disclosure Library Apache Cloudstack

    4.3 MEDIUM 0.5% exploit odds Fix listed

All CVEs affecting Apache Cloudstack that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.