NE
Vendor
nezhahq
29
CVEs
0
On KEV
8
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111387 | NE nezha nezhahq | 6.5 | Oct 16 | Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint |
| CVE-2026-111386 | NE nezha nezhahq | 4.3 | Oct 16 | Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig |
| CVE-2026-111385 | NE nezha nezhahq | 4.8 | Oct 16 | Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer Tools |
| CVE-2026-111384 | NE nezha nezhahq | 6.5 | Oct 16 | Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocket |
| CVE-2026-111383 | NE nezha nezhahq | 6.5 | Oct 16 | Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocket |
| CVE-2026-100394 | NE nezha nezhahq | 6.5 | Oct 14 | Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant |
| CVE-2026-105113 | NE nezha nezhahq | 6.5 | Oct 3 | Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock |
| CVE-2026-105112 | NE nezha nezhahq | 5.3 | Oct 3 | Nezha 1.8.0 before 2.3.13 Deadlock DoS via notification-group endpoints |
| CVE-2026-101090 | NE nezha nezhahq | 9.8 | Sep 27 | Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri |
| CVE-2026-101089 | NE nezha nezhahq | 3.1 | Sep 27 | Nezha before 2.2.7 Information Disclosure via /api/v1/profile |
| CVE-2026-101088 | NE nezha nezhahq | 5.3 | Sep 27 | Nezha before 2.3.1 Denial of Service via Concurrent Server Delete |
| CVE-2026-101087 | NE nezha nezhahq | 4.3 | Sep 27 | Nezha 2.0.10 through 2.3.2 SSRF Denylist Bypass IPv6 |
| CVE-2026-101086 | NE nezha nezhahq | 6.5 | Sep 27 | Nezha Dashboard before 2.3.5 Task Type Validation Bypass |
| CVE-2026-101085 | NE nezha nezhahq | 6.5 | Sep 27 | Nezha before 2.3.8 Denial of Service via Alert Rule |
| CVE-2026-62283 | NE nezha nezhahq | 9.9 | Aug 21 | Nezha Monitoring: Cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check |
| CVE-2026-59155 | NE nezha nezhahq | 6.9 | Jul 10 | Nezha Monitoring: DDNS and Notification credential exposure via unredacted list API |
| CVE-2026-53523 | NE nezha nezhahq | 6.8 | Jun 12 | Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection |
| CVE-2026-53522 | NE nezha nezhahq | 6.5 | Jun 12 | Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS |
| CVE-2026-53521 | NE nezha nezhahq | 6.4 | Jun 12 | Nezha Monitoring: Stored future DDNS profile ID allows unauthorized use of another user's DDNS profile context |
| CVE-2026-53520 | NE nezha nezhahq | 6.5 | Jun 12 | Nezha Monitoring: Authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing |
| CVE-2026-53519 | NE nezha nezhahq | 9.1 | Jun 12 | Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key |
| CVE-2026-49397 | NE nezha nezhahq | 5.3 | Jun 12 | Nezha Monitoring: Private services (`EnableShowInService: false`) are enumerable via per-server endpoints, leaking name and timing data |
| CVE-2026-49396 | NE nezha nezhahq | 7.1 | Jun 12 | Nezha Monitoring: Cross-site GET request can trigger stored cron commands on a victim's agents |
| CVE-2026-48119 | NE nezha nezhahq | 7.1 | Jun 12 | Nezha Monitoring: Authenticated agents can forge service-monitor results for other users' services |
| CVE-2026-47124 | NE nezha nezhahq | 6.5 | Jun 12 | Nezha WebSocket server stream discloses cross-tenant server telemetry to authenticated members |
| CVE-2026-47120 | NE nezha nezhahq | 7.1 | Jun 12 | Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check) |
| CVE-2026-46717 | NE nezha nezhahq | 7.7 | Jun 12 | Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification |
| CVE-2026-46716 | NE nezha nezhahq | 9.9 | Jun 12 | Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron |
| CVE-2026-47268 | NE nezha nezhahq | 6.4 | Jun 12 | Nezha Monitoring: Authenticated DDNS webhook configuration allows blind SSRF from the dashboard host |