VulnSocial

CVE-2026-2532Disclosure(lintsinghua / deepaudit)

LOWCVSS 9.8 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the file backend/app/api/v1/endpoints/embedding_config.py of the component IP Address Handler. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.0.4 and 3.1.0 is capable of addressing this issue. The patch is named da853fdd8cbe9d42053b45d83f25708ba29b8b27. It is suggested to upgrade the affected component.

lintsinghua CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • deepaudit

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Affected systems

Vendors
lintsinghua
Products
deepaudit

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-02-16: 3Technical Details · 2026-02-16: 202-16
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-2532 A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the file backend/app/api/v1/endpoints/embedding_config.… https://www.cve.org/CVERecord?id=CVE-2026-2532

    Post summary

    A CVE-2026-2532 vulnerability was reported in lintsinghua DeepAudit up to version 3.0.3, affecting unknown processing of a specific file endpoint, with no additional details on exploitation or fixes provided.

    00020550
    56.4K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-2532 Server-Side Request Forgery in lintsinghua DeepAudit IP Address Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2532

    Post summary

    CVE-2026-2532 is a disclosed SSRF vulnerability in lintsinghua's DeepAudit IP Address Handler.

    0001055
    4.0K followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-2532 📊 Severity: 6.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-2532 #CVE-2026-2532 #CVE #Medium #CyberSecurity #InfoSec https://t.co/sfvDIwe41U

    Post summary

    The tweet announces CVE-2026-2532 with a medium severity of 6.3 affecting unspecified products, without further exploitation, patch, or PoC details.

    0000040
    56 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Applintsinghuadeepaudit---

Explore more

Back to dashboardlintsinghua CVEsdeepaudit vulnerabilities