What is GHSA-mrqr-qxqw-9753?

GHSA-mrqr-qxqw-9753 is a security advisory published by GitHub Security Advisories with Low severity. A vulnerability has been found in YunaiV yudao-cloud 2026.03. This affects the function...

Which CVE IDs does GHSA-mrqr-qxqw-9753 cover?

GHSA-mrqr-qxqw-9753 covers the following CVE IDs: CVE-2026-9464. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mrqr-qxqw-9753?

GHSA-mrqr-qxqw-9753 has a CVSS v3 base score of 4.7, published by GitHub Security Advisories.

GHSA-mrqr-qxqw-9753LowCVSS 4.7

A vulnerability has been found in YunaiV yudao-cloud 2026.03. This affects the function...

Vendor

GitHub Security Advisories

Published

May 26, 2026

Last Modified

May 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-9464 →

📋 Description

A vulnerability has been found in YunaiV yudao-cloud 2026.03. This affects the function IotDataSinkHttpConfig of the file /admin-api/iot/data-sink/create of the component Admin API Endpoint. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2026-9464
https://github.com/fakebug111/my_public_bug/blob/main/issus05.md
https://vuldb.com/submit/813962
https://vuldb.com/vuln/365445
https://vuldb.com/vuln/365445/cti
https://github.com/advisories/GHSA-mrqr-qxqw-9753