Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 00:32:43 +0000 CVE-2025-66171 — Apache CloudStack: Any user can create a new VM from backups they should not have access to https://cve.radiocsirt.org/vuln/cve-2025-66171 <p><strong>Affected:</strong> Apache Software Foundation Apache CloudStack</p> <p>The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can create new VMs using backups of any other user of the environment.</p> <p>Backup plugin users using CloudStack 4.21.0.0+ are recommended to upgrade to CloudStack version 4.22.0.1, which fixes this issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache CloudStack</p> <p>The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is enabled and have access to specific APIs can create new VMs using backups of any other user of the environment.</p> <p>Backup plugin users using CloudStack 4.21.0.0+ are recommended to upgrade to CloudStack version 4.22.0.1, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/cve-2025-66171