VYPR

CloudStack NAS backup provider plugin

by Apache

CVEs (1)

  • CVE-2026-47359HigAug 21, 2026
    risk 0.57cvss 8.8epss 0.02

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache CloudStack's NAS backup provider plugin. The addBackupRepository API (available since 4.20.0.0) and updateBackupRepository API (introduced in 4.22.0.0) accept…