CVE-2026-59655 | Apache CloudStack up to 4.20.3.0/4.22.1.0 OAuth authentication plugin information disclosure

August 21, 2026 Yanac

A vulnerability marked as problematic has been reported in Apache CloudStack up to 4.20.3.0/4.22.1.0. Impacted is an unknown function of the component OAuth authentication plugin. This manipulation causes information disclosure.

The identification of this vulnerability is CVE-2026-59655. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More