https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:49:15 +0000 https://cve.radiocsirt.org/vuln/cnvd-2026-21572 cnvd-2026-21572 https://cve.radiocsirt.org/vuln/cnvd-2026-21572 https://cve.radiocsirt.org/vuln/euvd-2026-309365 EUVD-2026-309365 https://cve.radiocsirt.org/vuln/euvd-2026-309365 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66172 <p>The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can restore a volume from any other user&#39;s backups and attach the volume to their own VMs.</p> <p>Backup plugin users using CloudStack 4.21.0.0+ are recommended to upgrade to CloudStack version 4.22.0.1, which fixes this issue.</p> <p>The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can restore a volume from any other user&#39;s backups and attach the volume to their own VMs.</p> <p>Backup plugin users using CloudStack 4.21.0.0+ are recommended to upgrade to CloudStack version 4.22.0.1, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-66172 https://cve.radiocsirt.org/vuln/ghsa-jp26-gvwc-cc96 <p>The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can restore a volume from any other user&#39;s backups and attach the volume to their own VMs.</p> <p>Backup plugin users using CloudStack 4.21.0.0+ are recommended to upgrade to CloudStack version 4.22.0.1, which fixes this issue.</p> <p>The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can restore a volume from any other user&#39;s backups and attach the volume to their own VMs.</p> <p>Backup plugin users using CloudStack 4.21.0.0+ are recommended to upgrade to CloudStack version 4.22.0.1, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-jp26-gvwc-cc96 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1438 <p>Ein Angreifer kann mehrere Schwachstellen in Apache CloudStack ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Dateien zu Manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Apache CloudStack ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Dateien zu Manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1438