https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T04:09:26.454801+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-22829 CVE-2025-22829 — Apache CloudStack: Unauthorised access to dedicated resources in Quota plugin 2026-10-15T04:09:26.476181+00:00

Affected: Apache Software Foundation Apache CloudStack

The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0. Anyone with authenticated user-account access in CloudStack 4.20.0.0 environments, where this plugin is enabled and have access to specific APIs can enable or disable reception of quota-related emails for any account in the environment and list their configurations.

Quota plugin users using CloudStack 4.20.0.0 are recommended to upgrade to CloudStack version 4.20.1.0, which fixes this issue.