← Database

CVE-2026-59085

CRITICAL CVSS: 9.1 Published: 2026-08-21 Modified: 2026-08-27

Description

Server-Side Request Forgery (SSRF) vulnerability in Apache CloudStack's webhook module, exploitable via webhook delivery requests. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, which fixes the issue.

Affected Platforms

Apache Cloudstack

Weakness Type

CWE-918

References