nezha vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

NE

Product

nezha

by nezhahq · last CVE Oct 16, 2026

29

CVEs

0

On KEV

9.9

Max CVSS

8

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 4High 4Medium 20Low 1

Severity

All severities29 Critical4 High4 Medium20 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add nezha to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-62283	9.9	1%	Aug 21	Nezha Monitoring: Cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check Affected: >= 1.14.13, <= 1.14.14; >= 2.0.0, < 2.0.10
CVE-2026-46716	9.9	0%	Jun 12	Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron Affected: >= 1.4.0, < 2.0.8
CVE-2026-101090	9.8	0%	Sep 27	Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri Affected: 2.2.3 through 2.2.3
CVE-2026-53519	9.1	2%	Jun 12	Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key Affected: < 2.0.13