CVE-2026-116069
NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field
Albert-Weasker niubigeo
CVSS
6.9MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
What fixes it
- 0.3.2niubigeoCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying a crafted domain value to POST /audit-plan. Attackers can submit IP literals, localhost, or private and link-local hosts to read loopback, internal-network, or cloud metadata responses returned in the plan's siteEvidence JSON.
Text from CVE List
Affected versions 1
- niubigeoaffected: all versions before 0.3.2CVE List
References 7
- github.com/Albert-Weasker/niubigeo/commit/299b9e71881d445e976012ad75ecdd05ce802715Fixvia CVE List
- github.com/Albert-Weasker/niubigeo/releases/tag/v0.3.2Fixvia CVE List
- vulncheck.com/advisories/niubigeo-before-0.3.2-unauthenticated-ssrf-via-audit-plan-domain-fieldAdvisoryvia CVE List
- github.com/Albert-Weasker/niubigeo/issues/242Referencevia CVE List
- github.com/Albert-Weasker/niubigeoReferencevia CVE List
- github.com/Albert-Weasker/niubigeo/blob/25d1f06e87c73d1df98bb82a2cfebacc0c215111/src/server.ts#L875-L894Referencevia CVE List
- github.com/Albert-Weasker/niubigeo/blob/25d1f06e87c73d1df98bb82a2cfebacc0c215111/src/keywords/site-evidence.ts#L127-L149Referencevia CVE List