CVE-2026-68745
⚠️ highSummary
Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the management server. The agent will have to spoof the ip address of the IdP or get an url of its own choosing registered in the management server, after which it can allow logging on with forged signatures. Users are recommended to upgrade to versions 4.20.3.1 or 4.22.1.1 and above, which fix this issue.
CVSS Score
8.1
High
EPSS Score
0.1
Exploit Probability
Published Date
2026-08-21
First Seen: 2026-08-22
📊 Relative Risk Intelligence
This CVE is High Risk - more severe than 76.8% of all 349,016 vulnerabilities in our database.
#80,815
Top 25% most severe
Severity Percentile
🎯 CISA SSVC Assessment Updated: Aug 24, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
🏆 Discovered By
Katriel Moses <katriel.moses@gmail.com> (reporter)
SSVC data provided by
CISA
Last Modified
2026-08-24
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)