CVE-2026-116069Published
NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-116069 · Microsoft / collected KEV context
cve-program · CVE-2026-116069
- https://github.com/Albert-Weasker/niubigeo/issues/242
- https://github.com/Albert-Weasker/niubigeo
- https://github.com/Albert-Weasker/niubigeo/blob/25d1f06e87c73d1df98bb82a2cfebacc0c215111/src/server.ts#L875-L894
- https://github.com/Albert-Weasker/niubigeo/blob/25d1f06e87c73d1df98bb82a2cfebacc0c215111/src/keywords/site-evidence.ts#L127-L149
- https://github.com/Albert-Weasker/niubigeo/commit/299b9e71881d445e976012ad75ecdd05ce802715
- https://github.com/Albert-Weasker/niubigeo/releases/tag/v0.3.2
- https://www.vulncheck.com/advisories/niubigeo-before-0.3.2-unauthenticated-ssrf-via-audit-plan-domain-field
Related operational evidence
Explicit CVE identifiers- NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field · Newly collected advisory · 25 Oct 2026