CVE-2026-59657: high-severity vulnerability in Apache CloudStack
Apache CloudStack: Sensitive Information Disclosure via Cleartext Storage in AsyncJob
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.3%
Cleartext Storage of Sensitive Information vulnerability in Apache CloudStack with AsyncJob storage in the database.
This issue affects Apache CloudStack: from 4.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0.
Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Apache Software Foundation · Apache CloudStackRelated CVEs — Apache CloudStack
In the same product, most dangerous first.
CVE-2024-41107HIGHApache CloudStack: SAML Signature ExclusionEPSS 17.8%CVE-2022-35741—Apache CloudStack SAML Single Sign-On XXEEPSS 8.0%CVE-2016-6813—CVE-2016-6813EPSS 5.6%CVE-2024-38346CRITICALApache CloudStack: Unauthenticated cluster service port leads to remote executionEPSS 3.3%CVE-2026-61400HIGHApache CloudStack: Get and Run Diagnostics Command InjectionEPSS 2.9%CVE-2022-26779—Apache Cloudstack insecure random number generation affects project email invitationEPSS 2.9%