CVE Intelligence

Albert-Weasker vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Albert-Weasker products: 1 record(s), with severity, exploitation and fixes.

Niubigeo 1

Exploited only (KEV) →

CVE-2026-116069 Medium · 6.5 CWE-918 Oct 25, 2026
NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field
NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying a crafted domain value to POST /audit-plan. Attackers can submit IP literals, localhost, or private and link-local hosts to read loopback, internal-network, or cloud metadata responses returned in the plan's siteEvidence JSON.