CVE-2026-5259
MEDIUMAutohomeCorp frostmourne Alarm Preview AlarmController.java server-side request forgery
Title source: cnaDescription
A vulnerability was determined in AutohomeCorp frostmourne up to 1.0. The affected element is an unknown function of the file frostmourne-monitor/src/main/java/com/autohome/frostmourne/monitor/controller/AlarmController.java of the component Alarm Preview. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Scores
CVSS v3
6.3
EPSS
0.0003
EPSS Percentile
9.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Details
CWE
CWE-918
Status
published
Products (1)
AutohomeCorp/frostmourne
1.0
Published
Apr 01, 2026
Tracked Since
Apr 01, 2026