CVE-2026-61399

Published: Ago 21, 2026 Last Modified: Ago 21, 2026

ExploitDB:

Other exploit source:

Google Dorks:

AI Translation Available

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Lock User Functionality.

This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0.

Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.

116

Draft

Abstraction: Class Structure: Simple

Security Scopes Affected:

Integrity Confidentiality Availability Access Control

Potential Impacts:

Modify Application Data Execute Unauthorized Code Or Commands Bypass Protection Mechanism

Technologies: Not Technology-Specific, AI/ML, Database Server, Web Server

Likelihood of Exploit: High

https://lists.apache.org/thread/g6cwddtjrwbh1d56wjz4cfp3fzfm4kbc