{"id":"CVE-2026-111323","title":"RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks only the initial hostname","summary":"RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks only the initial hostname. Attackers can submit a public URL that redir…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-918"],"vendor":"samugit83","product":"RedAmon","affected":["RedAmon <= 7.0.1"],"published":"2026-10-15","updated":"2026-10-16","sourceUpdated":"2026-10-16T19:17:04.183","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-111323","references":[{"url":"https://github.com/samugit83/redamon","label":"disclosure@vulncheck.com"},{"url":"https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/api.py#L1688","label":"disclosure@vulncheck.com"},{"url":"https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/orchestrator_helpers/tradecraft_lookup.py#L231","label":"disclosure@vulncheck.com"},{"url":"https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/orchestrator_helpers/tradecraft_lookup.py#L539","label":"disclosure@vulncheck.com"},{"url":"https://hackmd.io/@hieuPenguinnn/redamon-tradecraft-verify-unauth-ssrf","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/redamon-through-7.0.1-unauthenticated-ssrf-via-tradecraft-verify-endpoint","label":"disclosure@vulncheck.com"},{"url":"https://hackmd.io/@hieuPenguinnn/redamon-tradecraft-verify-unauth-ssrf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00403,"epssPercentile":0.34375,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-16T18:02:16.052853Z"},"ingestedAt":"2026-10-15T22:48:25.451Z","slug":"CVE-2026-111323","body":"## Overview\n\nRedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks only the initial hostname. Attackers can submit a public URL that redirects or DNS-rebinds to internal addresses like cloud metadata services, receiving fetched content through the model-generated summary.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":29.2,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":223186,"id":"CVE-2026-111323","ts":1792176240429,"field":"exploit_available","old":"false","new":"true"}]}