CVE-2026-59799 | Apache CloudStack up to 4.20.3.0/4.22.1.0 Two-factor Authentication privileges management

August 21, 2026 Yanac

A vulnerability classified as critical has been found in Apache CloudStack up to 4.20.3.0/4.22.1.0. The impacted element is an unknown function of the component Two-factor Authentication. Performing a manipulation results in improper privilege management.

This vulnerability is identified as CVE-2026-59799. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More