CVE-2026-68745CWE-347

CVE-2026-68745

High · published August 21, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the management server. The agent will have to spoof the ip address of the IdP or get an url of its own choosing registered in the management server, after which it can allow logging on with forged signatures.

Users are recommended to upgrade to versions 4.20.3.1 or 4.22.1.1 and above, which fix this issue.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.9th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2026-08-21T13:16Z
Affected products (2)
ProductVersionsFixed in
apache/cloudstack≥ 4.5.2, < 4.20.3.14.20.3.1
apache/cloudstackall versions—
References (1)
https://lists.apache.org/thread/g6cwddtjrwbh1d56wjz4cfp3fzfm4kbc · [email protected]
EPSS history
Timeline
  • 21 AUG 08:21Z
    Apache CloudStack: SAML2 Signature Validation Silently Skipped for Cert-less IdP
    cvelistv5