Threats Tagged 'cve-2026-59780'
View all threats tagged with 'cve-2026-59780'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-59780'
Click on any threat for detailed analysis and mitigation recommendations
Apache heeft meerdere kwetsbaarheden verholpen in Apache CloudStack, specifiek in versies 4.12.0.0 tot en met 4.22.1.0. Join the discussion | GCVE Database | 08/21/2026, 09:32:04 UTC Added: 08/21/2026, 14:22:27 UTC |
0 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's LDAP authentication plugin while listing LDAP providers. LDAP configurations can be listed by any authenticated user with access to the listLdapConfigurations API. By default, this API is available to all default roles. This issue affects Apache CloudStack: from 4.2.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue. Join the discussion | GCVE Database | 08/21/2026, 08:27:16 UTC Added: 08/21/2026, 14:22:26 UTC |
0 CVE-2026-59780 is a high-severity vulnerability in Apache CloudStack's LDAP authentication plugin that allows exposure of sensitive information to unauthorized actors. The issue arises because any authenticated user with access to the listLdapConfigurations API can list LDAP configurations, and this API is by default accessible to all default roles. This affects Apache CloudStack versions from 4.2.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. The vulnerability is fixed in versions 4.20.3.1 and 4.22.1.1 or later. Join the discussion | CVE Database V5 | 08/21/2026, 08:27:16 UTC Added: 08/21/2026, 11:03:58 UTC |
Showing 1 to 3 of 3 results