CVE-2026-59085

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.20.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0

Description A Server-Side Request Forgery (SSRF) issue exists in the webhook module, which can be exploited through webhook delivery requests. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location.

Recommendations Upgrade Apache CloudStack versions 4.20.0.0 through 4.20.3.0 to version 4.20.3.1 or later. Upgrade Apache CloudStack versions 4.21.0.0 through 4.22.1.0 to version 4.22.1.1 or later.