CVE-2026-47359 | Apache CloudStack up to 4.20.3.0/4.22.1.0 NAS backup provider plugin os command injection

August 21, 2026 Yanac

A vulnerability identified as very critical has been detected in Apache CloudStack up to 4.20.3.0/4.22.1.0. This vulnerability affects unknown code of the component NAS backup provider plugin. The manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-47359. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More