https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T21:55:49.206388+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-20875 cnvd-2025-20875 2026-10-14T21:55:49.209461+00:00 cnvd-2025-20875 https://cve.radiocsirt.org/vuln/euvd-2026-243782 EUVD-2026-243782 2026-10-14T21:55:49.209491+00:00 EUVD-2026-243782 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22829 fkie_cve-2025-22829 2026-10-14T21:55:49.209505+00:00

The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0. Anyone with authenticated user-account access in CloudStack 4.20.0.0 environments, where this plugin is enabled and have access to specific APIs can enable or disable reception of quota-related emails for any account in the environment and list their configurations.

Quota plugin users using CloudStack 4.20.0.0 are recommended to upgrade to CloudStack version 4.20.1.0, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-ppvv-98qr-pg74 GHSA-ppvv-98qr-pg74 2026-10-14T21:55:49.209535+00:00

The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0. Anyone with authenticated user-account access in CloudStack 4.20.0.0 environments, where this plugin is enabled and have access to specific APIs can enable or disable reception of quota-related emails for any account in the environment and list their configurations.

Quota plugin users using CloudStack 4.20.0.0 are recommended to upgrade to CloudStack version 4.20.1.0, which fixes this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1299 WID-SEC-W-2025-1299 — Apache CloudStack: Mehrere Schwachstellen 2026-10-14T21:55:49.209554+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache CloudStack ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen und um seine Privilegien zu erweitern.