https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:15:19.818482+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-21572 cnvd-2026-21572 2026-10-06T16:15:19.823869+00:00 cnvd-2026-21572 https://cve.radiocsirt.org/vuln/euvd-2026-309365 EUVD-2026-309365 2026-10-06T16:15:19.823908+00:00 EUVD-2026-309365 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66172 fkie_cve-2025-66172 2026-10-06T16:15:19.823923+00:00

The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can restore a volume from any other user's backups and attach the volume to their own VMs.

Backup plugin users using CloudStack 4.21.0.0+ are recommended to upgrade to CloudStack version 4.22.0.1, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-jp26-gvwc-cc96 GHSA-jp26-gvwc-cc96 2026-10-06T16:15:19.823960+00:00

The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can restore a volume from any other user's backups and attach the volume to their own VMs.

Backup plugin users using CloudStack 4.21.0.0+ are recommended to upgrade to CloudStack version 4.22.0.1, which fixes this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1438 WID-SEC-W-2026-1438 — Apache CloudStack: Mehrere Schwachstellen 2026-10-06T16:15:19.823979+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache CloudStack ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Dateien zu Manipulieren.