CVE-2026-2532

A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the file backend/app/api/v1/endpoints/embedding_config.py of the component IP Address Handler. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.0.4 and 3.1.0 is capable of addressing this issue. The patch is named da853fdd8cbe9d42053b45d83f25708ba29b8b27. It is suggested to upgrade the affected component.

• CWE-918

• https://github.com/lintsinghua/DeepAudit/Product
• https://github.com/lintsinghua/DeepAudit/commit/da853fdd8cbe9d42053b45d83f25708ba29b8b27Patch
• https://github.com/lintsinghua/DeepAudit/issues/144Issue Tracking
• https://github.com/lintsinghua/DeepAudit/pull/145Issue Tracking, Patch
• https://github.com/lintsinghua/DeepAudit/releases/tag/v3.0.4Release Notes
• https://vuldb.com/?ctiid.346120Permissions Required, VDB Entry
• https://vuldb.com/?id.346120Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.748220Third Party Advisory, VDB Entry

Published

Feb 16, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25314Missing Authorization vulnerability in WP Messiah TOP Table …4.3
• CVE-2026-25315Missing Authorization vulnerability in hcaptcha hCaptcha for…5.3
• CVE-2026-25316Deserialization of Untrusted Data vulnerability in Brainstor…7.2
• CVE-2026-25317Missing Authorization vulnerability in tychesoftwares Print …7.5
• CVE-2026-25318Missing Authorization vulnerability in Wisernotify team Wise…4.3
• CVE-2026-25319Cross-Site Request Forgery (CSRF) vulnerability in wpzita Zi…4.3
• CVE-2026-25320Missing Authorization vulnerability in Cool Plugins Elemento…5.3
• CVE-2026-25321Missing Authorization vulnerability in PSM Plugins SupportCa…5.3
• CVE-2026-25322Cross-Site Request Forgery (CSRF) vulnerability in PublishPr…5.4
• CVE-2026-25323Missing Authorization vulnerability in MiKa OSM osm allows E…4.3
• CVE-2026-25324Authorization Bypass Through User-Controlled Key vulnerabili…5.3
• CVE-2026-25325Exposure of Sensitive System Information to an Unauthorized …5.3