Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-11424

A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Server and Altium 365. An authenticated user can submit a request whose input is treated as a URL by the server and used to issue an outbound HTTP GET request without URL validation or destination filtering. The response body is then returned to the user. This allows an authenticated attacker to reach internal services and metadata endpoints that would not otherwise be accessi
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:8f1d1cc387478348030f1da80204afd24ec1940e298cd9586b6cafc1bbada2a7
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
2

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","modules":["Platform Design (GraphQL FileDownloadService)"],"platforms":["Web"],"product":"Altium 365","vendor":"Altium","versions":[{"status":"affected","version":"unspecified"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a6576df7d584e3f3804229776df2221cf52fc35132c2090b53a9e5c0ded06c8e · sha256:7efd064839852dcb… · /containers/cna/affected/1

{"defaultStatus":"unaffected","modules":["Platform Design (GraphQL FileDownloadService)"],"platforms":["Web"],"product":"Altium Enterprise Server","vendor":"Altium","versions":[{"lessThan":"8.1.1","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a6576df7d584e3f3804229776df2221cf52fc35132c2090b53a9e5c0ded06c8e · sha256:7efd064839852dcb… · /containers/cna/affected/0
cwe · 2 assertions

{"cweId":"CWE-918","description":"CWE-918 Server-Side Request Forgery (SSRF)","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:a6576df7d584e3f3804229776df2221cf52fc35132c2090b53a9e5c0ded06c8e · sha256:7efd064839852dcb… · /containers/cna/problemTypes/0/descriptions/0

{"cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:a6576df7d584e3f3804229776df2221cf52fc35132c2090b53a9e5c0ded06c8e · sha256:7efd064839852dcb… · /containers/cna/problemTypes/1/descriptions/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","modules":["Platform Design (GraphQL FileDownloadService)"],"platforms":["Web"],"product":"Altium 365","vendor":"Altium","versions":[{"status":"affected","version":"unspecified"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a6576df7d584e3f3804229776df2221cf52fc35132c2090b53a9e5c0ded06c8e · sha256:7efd064839852dcb… · /containers/cna/affected/1
{"defaultStatus":"unaffected","modules":["Platform Design (GraphQL FileDownloadService)"],"platforms":["Web"],"product":"Altium Enterprise Server","vendor":"Altium","versions":[{"lessThan":"8.1.1","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a6576df7d584e3f3804229776df2221cf52fc35132c2090b53a9e5c0ded06c8e · sha256:7efd064839852dcb… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.3,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"H…
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:a6576df7d584e3f3804229776df2221cf52fc35132c2090b53a9e5c0ded06c8e · sha256:7efd064839852dcb… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

2 source assertions
{"cweId":"CWE-918","description":"CWE-918 Server-Side Request Forgery (SSRF)","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:a6576df7d584e3f3804229776df2221cf52fc35132c2090b53a9e5c0ded06c8e · sha256:7efd064839852dcb… · /containers/cna/problemTypes/0/descriptions/0
{"cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:a6576df7d584e3f3804229776df2221cf52fc35132c2090b53a9e5c0ded06c8e · sha256:7efd064839852dcb… · /containers/cna/problemTypes/1/descriptions/0

Source references

1 source assertion
{"url":"https://www.altium.com/platform/security-compliance/security-advisories"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a6576df7d584e3f3804229776df2221cf52fc35132c2090b53a9e5c0ded06c8e · sha256:7efd064839852dcb… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer