CVE-2026-61422

Apache CloudStack (versions 4.20.3.0 and 4.21.0.0 through 4.22.1.0) is affected by an authenticated pre-validation SSRF in its template and ISO registration functionality. When a user registers a template or ISO, CloudStack issues a live HTTP HEAD/GET request to determine file size for secondary ...