CVE-2026-59085 | Apache CloudStack up to 4.20.3.0/4.22.1.0 Webhook server-side request forgery

August 21, 2026 Yanac

A vulnerability labeled as critical has been found in Apache CloudStack up to 4.20.3.0/4.22.1.0. This issue affects some unknown processing of the component Webhook Module. The manipulation results in server-side request forgery.

This vulnerability was named CVE-2026-59085. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More