CVE-2026-5563 - AutohomeCorp frostmourne Alarm Preview previewData httpTest sql injection

Back Back to CVE browser

MEDIUM

AutohomeCorp frostmourne Alarm Preview previewData httpTest sql injection

Published Apr 5, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.32%

Description

A security flaw has been discovered in AutohomeCorp frostmourne up to 1.0. Affected is the function httpTest of the file /api/monitor-api/alarm/previewData of the component Alarm Preview. The manipulation results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Affected products

Vendor AutohomeCorp Product Frostmourne Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

AutohomeCorp

Frostmourne

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-19073
Advisory
https://fx4tqqfvdw4.feishu.cn/docx/M0u0dPZmZosY9Ax6OsScJ3Blnxf?from=from_copylink
exploit
https://vuldb.com/submit/782969
third-party-advisory
https://vuldb.com/vuln/355333
vdb-entrytechnical-description
https://vuldb.com/vuln/355333/cti
signaturepermissions-required

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-19073		Advisory
https://fx4tqqfvdw4.feishu.cn/docx/M0u0dPZmZosY9Ax6OsScJ3Blnxf?from=from_copylink		exploit
https://vuldb.com/submit/782969		third-party-advisory
https://vuldb.com/vuln/355333		vdb-entrytechnical-description
https://vuldb.com/vuln/355333/cti		signaturepermissions-required