PT-2026-29481 · Autohomecorp · Frostmourne

Xcxr · Published 2026-04-01 · Updated 2026-04-01 · CVE-2026-5259

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was determined in AutohomeCorp frostmourne up to 1.0. The affected element is an unknown function of the file frostmourne-monitor/src/main/java/com/autohome/frostmourne/monitor/controller/AlarmController.java of the component Alarm Preview. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-5259

Affected Products

Frostmourne

References · 5

• 🔥 https://fx4tqqfvdw4.feishu.cn/docx/GE4GdxBxKoSvBOxhkTRcsawlnhc?from=from_copylink · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5259 · Security Note
• https://vuldb.com/vuln/354449/cti · Note
• https://vuldb.com/submit/780669 · Note
• https://vuldb.com/vuln/354449 · Note