CVE-2026-50112 is a critical Apache CloudStack flaw enabling cross-tenant remote code execution as root on KVM hosts. Upgrade to 4.20.3.1 or 4.22.1.1.
Apache CloudStack
Urgent: Apache CloudStack patches critical flaws (CVE-2026-25199, CVE-2026-25077) enabling VM hijacking and KVM host RCE. Secure your cloud environment now.
Apache CloudStack LTS updates patch five security flaws, including two critical vulnerabilities in Kubernetes and admin access, risking full system compromise.
Discover the important security advisory for Apache CloudStack regarding CVE-2024-50386 and the necessary LTS updates to address the flaw.
Learn about the latest security releases from Apache CloudStack. Find out how CVE-2024-45219 could compromise KVM-based infrastructure.
Urgent security advisory for Apache CloudStack users: Update now to address critical vulnerabilities CVE-2024-42062 and CVE-2024-42222.
A security advisory regarding a critical vulnerability (CVE-2024-41107) in its open-source cloud computing platform, Apache CloudStack
The critical severity of CVE-2024-29008 highlights the risk of potential infrastructure takeover if left unpatched.