CVE-2026-66722

Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin can create, update, delete, and list project roles and project role permissions for projects in any domain, not just their own. The check only confirms the caller is a Domain Admin, without verifying whether the target project belongs to their domain or subdomain. This allows a malicious Domain Admin to tamper with project roles and permissions across unrelated domains. This issue affects Apache CloudStack: from 4.15.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.

• CWE-285

• https://lists.apache.org/thread/g6cwddtjrwbh1d56wjz4cfp3fzfm4kbcMailing List, Vendor Advisory

Published

Aug 21, 2026

Last Modified

Aug 27, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-66711Subscriber Cross Site Scripting (XSS) in WooCommerce Multili…7.1
• CVE-2026-66712Unauthenticated Broken Access Control in Simple Membership <…7.5
• CVE-2026-66713Deserialization of Untrusted Data (CWE-502) in the Tribes-ba…9.8
• CVE-2026-6672The Affiliate Program Suite — SliceWP Affiliates plugin for …6.4
• CVE-2026-66720The GOOSE subscriber component improperly validates the UTC …6.5
• CVE-2026-66721Missing authorization issue for domain admins in CloudStack'…2.7
• CVE-2026-66723MWDB Core versions >=2.2.0 and <2.19.0 contain a missing aut…7
• CVE-2026-66724MWDB Core versions >=2.0.0 and <2.19.0 contain a missing aut…5.3
• CVE-2026-66729facil.io 0.6.0 through 0.7.6 contains an integer underflow v…8.7
• CVE-2026-6673Mattermost versions 11.7.x <= 11.7.0, 11.6.x <= 11.6.2, 11.5…6.4
• CVE-2026-66730facil.io 0.6.0 through 0.7.6 contains a denial-of-service vu…8.7
• CVE-2026-66731facil.io 0.7.5 through 0.7.6 contains a denial-of-service vu…8.7