Vulnerabilidades en nezhahq
29 resultadosCVE-2026-101088MEDIUMNezha before 2.3.1 Denial of Service via Concurrent Server DeleteEPSS 0.2%CVE-2026-105112MEDIUMNezha 1.8.0 before 2.3.13 Deadlock DoS via notification-group endpointsEPSS 0.2%CVE-2026-49396HIGHNezha Monitoring: Cross-site GET request can trigger stored cron commands on a victim's agentsEPSS 0.2%CVE-2026-101089LOWNezha before 2.2.7 Information Disclosure via /api/v1/profileEPSS 0.2%CVE-2026-111385MEDIUMNezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer ToolsEPSS —CVE-2026-111383HIGHNezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocketEPSS —CVE-2026-111386MEDIUMNezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfigEPSS —CVE-2026-111384HIGHNezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocketEPSS —CVE-2026-111387HIGHNezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List EndpointEPSS —