Nezhahq vulnerabilities

Products

• Nezha 30

Newest

• nezhahq nezha Nezha 2.0.0 before 2.4.0 Startup NULL Pointer Dereference via Orphaned Service History CVE-2026-120046 6.0 MediumOctober 30, 2026
• nezhahq nezha Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint CVE-2026-111387 7.1 HighOctober 16, 2026
• nezhahq nezha Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig CVE-2026-111386 5.3 MediumOctober 16, 2026
• nezhahq nezha Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer Tools CVE-2026-111385 6.3 MediumOctober 16, 2026
• nezhahq nezha Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocket CVE-2026-111384 7.1 HighOctober 16, 2026
• nezhahq nezha Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocket CVE-2026-111383 7.1 HighOctober 16, 2026
• nezhahq nezha Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant CVE-2026-100394 Fix available 6.5 MediumOctober 14, 2026
• nezhahq nezha Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock CVE-2026-105113 7.1 HighOctober 3, 2026
• nezhahq nezha Nezha 1.8.0 before 2.3.13 Deadlock DoS via notification-group endpoints CVE-2026-105112 6.0 MediumOctober 3, 2026
• nezhahq nezha Nezha before 2.2.7 Information Disclosure via /api/v1/profile CVE-2026-101089 2.3 LowSeptember 27, 2026
• nezhahq nezha Nezha before 2.3.1 Denial of Service via Concurrent Server Delete CVE-2026-101088 6.0 MediumSeptember 27, 2026
• nezhahq nezha Nezha 2.0.10 through 2.3.2 SSRF Denylist Bypass IPv6 CVE-2026-101087 5.3 MediumSeptember 27, 2026
• nezhahq nezha Nezha Dashboard before 2.3.5 Task Type Validation Bypass CVE-2026-101086 7.1 HighSeptember 27, 2026
• nezhahq nezha Nezha before 2.3.8 Denial of Service via Alert Rule CVE-2026-101085 7.1 HighSeptember 27, 2026
• nezhahq nezha Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri CVE-2026-101090 9.3 CriticalSeptember 15, 2026
• nezhahq nezha Nezha Monitoring: DDNS and Notification credential exposure via unredacted list API CVE-2026-59155 Fix available 6.9 MediumJune 26, 2026
• nezhahq nezha Nezha Monitoring: Cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check CVE-2026-62283 Fix available 9.9 CriticalJune 26, 2026
• nezhahq nezha Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection CVE-2026-53523 Fix available 6.8 MediumJune 12, 2026
• nezhahq nezha Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS CVE-2026-53522 Fix available 6.5 MediumJune 12, 2026
• nezhahq nezha Nezha Monitoring: Stored future DDNS profile ID allows unauthorized use of another user's DDNS profile context CVE-2026-53521 Fix available 6.4 MediumJune 12, 2026
• nezhahq nezha Nezha Monitoring: Authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing CVE-2026-53520 Fix available 6.5 MediumJune 12, 2026
• nezhahq nezha Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key CVE-2026-53519 Public exploitFix available 9.1 CriticalJune 12, 2026
• nezhahq nezha Nezha Monitoring: Private services (`EnableShowInService: false`) are enumerable via per-server endpoints, leaking name and timing data CVE-2026-49397 Fix available 5.3 MediumJune 10, 2026
• nezhahq nezha Nezha Monitoring: Cross-site GET request can trigger stored cron commands on a victim's agents CVE-2026-49396 Fix available 7.1 HighJune 10, 2026
• nezhahq nezha Nezha Monitoring: Authenticated agents can forge service-monitor results for other users' services CVE-2026-48119 Fix available 7.1 HighJune 1, 2026
• nezhahq nezha Nezha Monitoring: Authenticated DDNS webhook configuration allows blind SSRF from the dashboard host CVE-2026-47268 Fix available 6.4 MediumMay 29, 2026
• nezhahq nezha Nezha WebSocket server stream discloses cross-tenant server telemetry to authenticated members CVE-2026-47124 Fix available 6.5 MediumMay 23, 2026
• nezhahq nezha Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron CVE-2026-46716 Public exploitFix available 9.9 CriticalMay 23, 2026
• nezhahq nezha Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check) CVE-2026-47120 Fix available 7.1 HighMay 23, 2026
• nezhahq nezha Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification CVE-2026-46717 Fix available 7.7 HighMay 23, 2026