SSRF in Altium 365

CVE-2026-11424

A server-side request forgery (SSRF) vulnerability exists in a GraphQL service component shared by Altium Enterprise Server and Altium 365. An authenticated user can submit a request whose input is treated as a URL by the server and used t…

Vulnerability class: Information Disclosure

EPSS: 0.002 (13.4th percentile) — read the EPSS interpretation.