nezhahq Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by nezhahq

JSON RSS CSV 🔔 Create Alert Trigger

12 June 2026

Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key
CVE-2026-53519
NezhahqNezha9.1CRITICAL
Nezha Monitoring: Cross-site GET request can trigger stored cron commands on a victim's agents
CVE-2026-49396
NezhahqNezha7.1HIGH
Nezha Monitoring: Authenticated agents can forge service-monitor results for other users' services
CVE-2026-48119
NezhahqNezha7.1HIGH
Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check)
CVE-2026-47120
NezhahqNezha7.1HIGH
Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification
CVE-2026-46717
NezhahqNezha7.7HIGH
Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron
CVE-2026-46716
NezhahqNezha9.9CRITICAL