CVE-2026-61422

Apache CloudStack is affected by an authenticated pre-validation SSRF in its template and ISO registration functionality. When a user registers a template or ISO, CloudStack issues a live HTTP HEAD/GET request to determine file size for secondary storage usage-limit checks before URL validation i...