Apache Software Foundation Hertzbeat vulnerabilities

• apache software foundation hertzbeat Apache HertzBeat: incomplete XPath expression validation in aliasFields CVE-2026-114442 6.5 MediumNovember 3, 2026
• apache hertzbeat Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions CVE-2026-24343 8.8 HighFebruary 10, 2026
• apache hertzbeat, apache software foundation hertzbeat (incubating) +1 more Apache HertzBeat (incubating): Jmx JNDI injection vulnerability CVE-2025-48208 8.8 HighSeptember 9, 2025
• apache hertzbeat, apache software foundation hertzbeat (incubating) +1 more Apache HertzBeat (incubating): RCE by parse http sitemap xml response CVE-2025-24404 8.8 HighSeptember 9, 2025
• apache hertzbeat Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss CVE-2024-56736 6.5 MediumApril 16, 2025
• apache hertzbeat Apache HertzBeat: RCE by notice template injection vulnerability CVE-2024-41151 8.8 HighNovember 18, 2024
• apache hertzbeat Apache HertzBeat: Exposure sensitive token via http GET method with query string CVE-2024-45791 7.5 HighNovember 18, 2024
• apache hertzbeat Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities CVE-2024-45505 8.8 HighNovember 18, 2024
• apache hertzbeat Apache HertzBeat: RCE by snakeYaml deser load malicious xml CVE-2024-42323 Public exploit 8.8 HighSeptember 21, 2024