CVE-2026-111323: Server-Side Request Forgery (SSRF) in samugit83 RedAmon

CVE-2026-111323 is an SSRF vulnerability in samugit83's RedAmon product affecting versions up to 7.0.1. The issue is in the agent POST /tradecraft/verify endpoint where the validate_url function inadequately validates URLs by only checking the initial hostname. This allows attackers to supply public URLs that redirect or DNS-rebind to internal network addresses, including sensitive cloud metadata services. Consequently, attackers can retrieve internal content via the model-generated summary response. The vulnerability is unauthenticated and remotely exploitable over the network with low attack complexity and no required privileges or user interaction.

An unauthenticated attacker can exploit this SSRF vulnerability to access internal network resources, including cloud metadata services, potentially exposing sensitive information. The vulnerability allows the attacker to receive internal content through the application's response, which may lead to information disclosure. However, there is no indication of privilege escalation, code execution, or direct system compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, users should consider restricting access to the vulnerable endpoint or implementing network-level protections to prevent SSRF exploitation. Monitor vendor communications for updates on remediation.