CVE-2026-5563

CVE-2026-5563 is a SQL injection vulnerability identified in AutohomeCorp Frostmourne version 1.0 and earlier. The flaw exists in the httpTest function within the Alarm Preview component's API endpoint at /api/monitor-api/alarm/previewData, allowing attackers to manipulate database queries through malicious input. The vulnerability has a CVSS score of 6.3 (Medium), indicating moderate risk with a network-based attack vector requiring low complexity and user authentication. The attack can result in limited compromise of confidentiality, integrity, and availability. The EPSS score of 0.0001 suggests current exploitation likelihood is minimal, though this metric varies across the vulnerability landscape. Exploitation status shows moderate community awareness with a FAUCET Risk Score of 44.0. While proof-of-concept exploit code has been released publicly, the vulnerability is not currently listed on the Known Exploited Vulnerabilities catalog and does not appear on active exploitation tracking lists. This suggests the threat remains theoretical rather than actively weaponized in the wild at present.