https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T12:31:53.728528+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-20837 cnvd-2024-20837 2026-10-10T12:31:53.804289+00:00 cnvd-2024-20837 https://cve.radiocsirt.org/vuln/euvd-2026-200809 EUVD-2026-200809 2026-10-10T12:31:53.804328+00:00 EUVD-2026-200809 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29007 fkie_cve-2024-29007 2026-10-10T12:31:53.804343+00:00

The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects presented by external servers when downloading templates or ISOs. Users are recommended to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-29xc-2rhm-5f2q GHSA-29xc-2rhm-5f2q 2026-10-10T12:31:53.804374+00:00

The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects presented by external servers when downloading templates or ISOs. Users are recommended to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.

 https://cve.radiocsirt.org/vuln/gsd-2024-29007 gsd-2024-29007 2026-10-10T12:31:53.804390+00:00 gsd-2024-29007 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0802 WID-SEC-W-2024-0802 — Apache CloudStack: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2026-10-10T12:31:53.804401+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache CloudStack ausnutzen, um die Authentifizierung zu umgehen, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern und so die Kontrolle über das System zu übernehmen.