A vulnerability labeled as critical has been found in AutohomeCorp frostmourne up to 1.0. The affected element is an unknown function of the file frostmourne-monitor/src/main/java/com/autohome/frostmourne/monitor/controller/AlarmController.java of the component Alarm Preview. Executing a manipulation can lead to server-side request forgery.

This vulnerability appears as CVE-2026-5259. The attack may be performed from remote. In addition, an exploit is available.