Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Server and Altium 365. An authenticated user can submit a request whose input is treated as a URL by the server and used to issue an outbound HTTP GET request without URL validation or destination filtering. The response body is then returned to the user. This allows an authenticated attacker to reach internal services and metadata endpoints that would not otherwise be accessible from the public network, and to retrieve their contents. The impact is information disclosure and internal infrastructure reconnaissance; the request primitive is limited to HTTP GET with no custom headers. Altium Enterprise Server is fixed in 8.1.1; the issue has been remediated in Altium 365 at the service level.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-11424 A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Server and Altium 365. An authenticated user can … https://www.cve.org/CVERecord?id=CVE-2026-11424
Post summary
The text announces an SSRF vulnerability (CVE‑2026‑11424) in Altium's GraphQL service, providing only basic technical details and no mention of PoC, exploit, or patch information.
CVE-2026-11424 Server-Side Request Forgery in Altium Enterprise Server and Altium 365 GraphQL https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11424
Post summary
The text announces the presence of a Server‑Side Request Forgery (CVE‑2026‑11424) impacting Altium products, but provides no details on PoC, exploitation, patches, or false‑positive claims.