https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:12:47.575016+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-21570 cnvd-2026-21570 2026-10-05T23:12:47.578354+00:00 cnvd-2026-21570 https://cve.radiocsirt.org/vuln/euvd-2026-309313 EUVD-2026-309313 2026-10-05T23:12:47.578387+00:00 EUVD-2026-309313 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66171 fkie_cve-2025-66171 2026-10-05T23:12:47.578401+00:00

The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can create new VMs using backups of any other user of the environment.

Backup plugin users using CloudStack 4.21.0.0+ are recommended to upgrade to CloudStack version 4.22.0.1, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-5f56-5m8x-gjf9 GHSA-5f56-5m8x-gjf9 2026-10-05T23:12:47.578432+00:00

The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can create new VMs using backups of any other user of the environment.

Backup plugin users using CloudStack 4.21.0.0+ are recommended to upgrade to CloudStack version 4.22.0.1, which fixes this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1438 WID-SEC-W-2026-1438 — Apache CloudStack: Mehrere Schwachstellen 2026-10-05T23:12:47.578482+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache CloudStack ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Dateien zu Manipulieren.