CVE-2026-68745

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-68745

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68745.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-68745

Published

2026-08-21T08:21:29Z

Modified

2026-08-29T03:46:51Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Apache CloudStack: SAML2 Signature Validation Silently Skipped for Cert-less IdP

Details

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the management server. The agent will have to spoof the ip address of the IdP or get an url of its own choosing registered in the management server, after which it can allow logging on with forged signatures.

Users are recommended to upgrade to versions 4.20.3.1 or 4.22.1.1 and above, which fix this issue.

Database specific

{
    "cna_assigner": "apache",
    "cwe_ids": [
        "CWE-347"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68745.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "4.5.2"
                },
                {
                    "last_affected": "4.20.3.0"
                },
                {
                    "introduced": "4.21.0.0"
                },
                {
                    "last_affected": "4.22.1.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/apache/cloudstack

Affected ranges

Type

GIT

Repo

https://github.com/apache/cloudstack

Events

Introduced

348ce953a99246a756b527994f7745a7be038234

Last Affected

348ce953a99246a756b527994f7745a7be038234

Database specific

Show details

{
    "cpe": "cpe:2.3:a:apache:cloudstack:4.22.1.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.22.1.0"
        },
        {
            "last_affected": "4.22.1.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

4.*

4.22.1.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68745.json"