nezha vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

NE

Product

nezha

by nezhahq · last CVE Oct 30, 2026

30

CVEs

0

On KEV

9.9

Max CVSS

9

New 30D

Vulnerabilities30 In the news0 Timeline

Severity mix

Critical 4High 4Medium 21Low 1

Severity

All severities30 Critical4 High4 Medium21 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add nezha to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-46717	7.7	0%	Jun 12	Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification Affected: >= 1.4.0, < 2.0.8
CVE-2026-49396	7.1	0%	Jun 12	Nezha Monitoring: Cross-site GET request can trigger stored cron commands on a victim's agents Affected: >= 1.0.0, < 2.0.14
CVE-2026-48119	7.1	0%	Jun 12	Nezha Monitoring: Authenticated agents can forge service-monitor results for other users' services Affected: >= 0.20.0, < 2.0.12
CVE-2026-47120	7.1	0%	Jun 12	Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check) Affected: >= 1.4.0, < 2.0.8