https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:15:16.958123+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-95930 CVE-2026-95930 — iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery 2026-10-06T15:15:16.974264+00:00

Affected: iFlytek astron-agent

A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the function UrlCheckTool.checkUrl of the component debugToolV2 API endpoint. The manipulation of the argument endPoint leads to server-side request forgery. The attack can be initiated remotely. Upgrading to version reward-1575 addresses this issue. The identifier of the patch is 45ee5fb647e9894e73b0d7720fa94a66e4540bbb. The affected component should be upgraded.