CVE-2026-61397 | Apache CloudStack up to 4.20.3.0/4.22.1.0 OAuth2 Authentication Plugin information disclosure

August 21, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Apache CloudStack up to 4.20.3.0/4.22.1.0. This affects an unknown part of the component OAuth2 Authentication Plugin. Executing a manipulation can lead to information disclosure.

This vulnerability is handled as CVE-2026-61397. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More