Hypervisor

vulnerabilities 2026-05-11
Apache CloudStack CVE-2026-25077: Malicious Template Lands Code Execution on KVM Hosts
Apache CloudStack 4.20.3.0 and 4.22.0.1 ship fixes for seven flaws — the headliner lets any account user execute arbitrary code on KVM hypervisor hosts via a malicious template name.
cloudstack kvm rce cve-2026-25077 cloud hypervisor apache

Apache CloudStack CVE-2026-25077: Malicious Template Lands Code Execution on KVM Hosts