CVE-2026-2532

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-2532", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-02-15T09:08:25.777Z", "datePublished": "2026-02-16T03:02:09.038Z", "dateUpdated": "2026-02-23T10:04:56.694Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-02-23T10:04:56.694Z"}, "title": "lintsinghua DeepAudit IP Address embedding_config.py server-side request forgery", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-918", "lang": "en", "description": "Server-Side Request Forgery"}]}], "affected": [{"vendor": "lintsinghua", "product": "DeepAudit", "versions": [{"version": "3.0.0", "status": "affected"}, {"version": "3.0.1", "status": "affected"}, {"version": "3.0.2", "status": "affected"}, {"version": "3.0.3", "status": "affected"}, {"version": "3.0.4", "status": "unaffected"}, {"version": "3.1.0", "status": "unaffected"}], "modules": ["IP Address Handler"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the file backend/app/api/v1/endpoints/embedding_config.py of the component IP Address Handler. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.0.4 and 3.1.0 is capable of addressing this issue. The patch is named da853fdd8cbe9d42053b45d83f25708ba29b8b27. It is suggested to upgrade the affected component."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C"}}], "timeline": [{"time": "2026-02-15T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-02-15T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-02-20T07:24:21.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "fushuling (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.346120", "name": "VDB-346120 | lintsinghua DeepAudit IP Address embedding_config.py server-side request forgery", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.346120", "name": "VDB-346120 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.748220", "name": "Submit #748220 | lintsinghua DeepAudit v3.0.2 SSRF", "tags": ["third-party-advisory"]}, {"url": "https://github.com/lintsinghua/DeepAudit/issues/144", "tags": ["issue-tracking"]}, {"url": "https://github.com/lintsinghua/DeepAudit/pull/145", "tags": ["issue-tracking"]}, {"url": "https://github.com/lintsinghua/DeepAudit/commit/da853fdd8cbe9d42053b45d83f25708ba29b8b27", "tags": ["patch"]}, {"url": "https://github.com/lintsinghua/DeepAudit/releases/tag/v3.0.4", "tags": ["patch"]}, {"url": "https://github.com/lintsinghua/DeepAudit/", "tags": ["product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-17T16:04:54.435903Z", "id": "CVE-2026-2532", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-17T16:05:06.408Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-2532", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-17T16:04:54.435903Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-17T16:04:58.271Z"}}], "cna": {"tags": ["x_open-source"], "title": "lintsinghua DeepAudit IP Address embedding_config.py server-side request forgery", "credits": [{"lang": "en", "type": "reporter", "value": "fushuling (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C"}}], "affected": [{"vendor": "lintsinghua", "modules": ["IP Address Handler"], "product": "DeepAudit", "versions": [{"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "3.0.1"}, {"status": "affected", "version": "3.0.2"}, {"status": "affected", "version": "3.0.3"}, {"status": "unaffected", "version": "3.0.4"}, {"status": "unaffected", "version": "3.1.0"}]}], "timeline": [{"lang": "en", "time": "2026-02-15T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-02-15T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-02-20T07:24:21.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.346120", "name": "VDB-346120 | lintsinghua DeepAudit IP Address embedding_config.py server-side request forgery", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.346120", "name": "VDB-346120 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.748220", "name": "Submit #748220 | lintsinghua DeepAudit v3.0.2 SSRF", "tags": ["third-party-advisory"]}, {"url": "https://github.com/lintsinghua/DeepAudit/issues/144", "tags": ["issue-tracking"]}, {"url": "https://github.com/lintsinghua/DeepAudit/pull/145", "tags": ["issue-tracking"]}, {"url": "https://github.com/lintsinghua/DeepAudit/commit/da853fdd8cbe9d42053b45d83f25708ba29b8b27", "tags": ["patch"]}, {"url": "https://github.com/lintsinghua/DeepAudit/releases/tag/v3.0.4", "tags": ["patch"]}, {"url": "https://github.com/lintsinghua/DeepAudit/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the file backend/app/api/v1/endpoints/embedding_config.py of the component IP Address Handler. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.0.4 and 3.1.0 is capable of addressing this issue. The patch is named da853fdd8cbe9d42053b45d83f25708ba29b8b27. It is suggested to upgrade the affected component."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "Server-Side Request Forgery"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-02-23T10:04:56.694Z"}}}, "cveMetadata": {"cveId": "CVE-2026-2532", "state": "PUBLISHED", "dateUpdated": "2026-02-23T10:04:56.694Z", "dateReserved": "2026-02-15T09:08:25.777Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-02-16T03:02:09.038Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["IP Address Handler"], "product": "DeepAudit", "vendor": "lintsinghua", "versions": [{"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "3.0.1"}, {"status": "affected", "version": "3.0.2"}, {"status": "affected", "version": "3.0.3"}, {"status": "unaffected", "version": "3.0.4"}, {"status": "unaffected", "version": "3.1.0"}]}], "source": "cna@vuldb.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:lintsinghua:deepaudit:*:*:*:*:*:*:*:*", "matchCriteriaId": "7693F7E8-5BBD-4B68-99BF-85A143DE1D2A", "versionEndIncluding": "3.0.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the file backend/app/api/v1/endpoints/embedding_config.py of the component IP Address Handler. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.0.4 and 3.1.0 is capable of addressing this issue. The patch is named da853fdd8cbe9d42053b45d83f25708ba29b8b27. It is suggested to upgrade the affected component."}, {"lang": "es", "value": "Una vulnerabilidad fue detectada en lintsinghua DeepAudit hasta 3.0.3. Este problema afecta alg\u00fan procesamiento desconocido del archivo backend/app/API/v1/endpoints/embedding_config.py del componente Manejador de Direcci\u00f3n IP. Realizar una manipulaci\u00f3n resulta en falsificaci\u00f3n de petici\u00f3n del lado del servidor. Es posible iniciar el ataque remotamente. Actualizar a la versi\u00f3n 3.0.4 y 3.1.0 es capaz de abordar este problema. El parche se llama da853fdd8cbe9d42053b45d83f25708ba29b8b27. Se sugiere actualizar el componente afectado."}], "id": "CVE-2026-2532", "lastModified": "2026-06-17T10:31:15.467", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-2532", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-17T16:04:54.435903Z", "version": "2.0.3"}}]}, "published": "2026-02-16T04:15:52.093", "references": [{"source": "cna@vuldb.com", "tags": ["Product"], "url": "https://github.com/lintsinghua/DeepAudit/"}, {"source": "cna@vuldb.com", "tags": ["Patch"], "url": "https://github.com/lintsinghua/DeepAudit/commit/da853fdd8cbe9d42053b45d83f25708ba29b8b27"}, {"source": "cna@vuldb.com", "tags": ["Issue Tracking"], "url": "https://github.com/lintsinghua/DeepAudit/issues/144"}, {"source": "cna@vuldb.com", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/lintsinghua/DeepAudit/pull/145"}, {"source": "cna@vuldb.com", "tags": ["Release Notes"], "url": "https://github.com/lintsinghua/DeepAudit/releases/tag/v3.0.4"}, {"source": "cna@vuldb.com", "tags": ["Permissions Required", "VDB Entry"], "url": "https://vuldb.com/?ctiid.346120"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?id.346120"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?submit.748220"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.0.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.0.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.0.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "3.0.3"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "3.0.4"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "3.1.0"}}], "product": "deepaudit", "vendor": "lintsinghua"}], "analysis": {"en": {"generated_at": "2026-04-17T19:15:40.538268+00:00", "value": {"mitigation_remediation": ["Upgrade DeepAudit to version 3.0.4 or 3.1.0.", "Apply the patch commit da853fdd8cbe9d42053b45d83f25708ba29b8b27 to the embedding_config.py module if the framework version cannot be upgraded immediately.", "Restrict the DeepAudit server\u2019s outbound traffic to only trusted destinations using firewall rules or network ACLs.", "Implement strict input validation and sanitization on IP address fields to reject URLs or malformed data.", "If an upgrade is not possible, isolate the vulnerable DeepAudit instance from the internal network to prevent SSRF from reaching sensitive resources."], "summary": {"action": "Apply Patch", "impact": "Server\u2011Side Request Forgery"}, "threat_synthesis": {"affected_systems": "DeepAudit distributed by lintsinghua is vulnerable in all releases up to version 3.0.3. Versions 3.0.4 and 3.1.0 include a patch that eliminates the flaw. The vulnerability is present in the IP Address Handler component of backend/app/api/v1/endpoints/embedding_config.py.", "description_and_impact": "The vulnerability arises from improper handling of IP address input in the embedding_config.py module of DeepAudit. This flaw allows an attacker to craft a request that causes the server to make outbound HTTP requests to arbitrary URLs. The result is that the compromised server can reach internal or external resources, potentially leaking sensitive data or interacting with services that should be inaccessible. The weakness is a Server\u2011Side Request Forgery, identified as CWE\u2011918.", "risk_and_exploitability": "The CVSS score of 5.3 indicates moderate risk. EPSS is less than 1%, suggesting a low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog. Attackers can trigger the issue remotely by sending specially crafted data to the affected endpoint. Because the flaw permits arbitrary outbound requests, potential lateral movement or data exfiltration is possible, but exploitation would first require interaction with a vulnerable DeepAudit instance."}}}}, "created": "2026-02-16T09:42:31.216235+00:00", "updated": "2026-04-17T19:30:15.626109+00:00", "vendors": ["lintsinghua", "lintsinghua$PRODUCT$deepaudit"]}