CVE Tools
Track your stack

Nezhahq

21 CVEs tracked since 2026. Since Jun 2026, none of them reached CISA KEV.

Nezhahq CVEs per month

Jun 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Nezhahq CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-06130
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-1080

Products

The products that kept showing up in Nezhahq's monthly top three, with their CVEs summed over those months.

  1. Nezha212 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Nezhahq.

  1. CVE-2026-111387Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint6.5
  2. CVE-2026-111386Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig4.3
  3. CVE-2026-111385Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer Tools4.8
  4. CVE-2026-111384Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocket6.5
  5. CVE-2026-111383Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocket6.5
  6. CVE-2026-100394Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant6.5
  7. CVE-2026-105113Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock6.5
  8. CVE-2026-105112Nezha 1.8.0 before 2.3.13 Deadlock DoS via notification-group endpoints5.3
  9. CVE-2026-101090Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri9.8
  10. CVE-2026-101089Nezha before 2.2.7 Information Disclosure via /api/v1/profile3.1
  11. CVE-2026-101088Nezha before 2.3.1 Denial of Service via Concurrent Server Delete5.3
  12. CVE-2026-101086Nezha Dashboard before 2.3.5 Task Type Validation Bypass6.5
  13. CVE-2026-101087Nezha 2.0.10 through 2.3.2 SSRF Denylist Bypass IPv64.3
  14. CVE-2026-101085Nezha before 2.3.8 Denial of Service via Alert Rule6.5
  15. CVE-2026-62283Nezha Monitoring: Cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check9.9

The record

Peak rank
#91 in Jun 2026
Busiest month shown
Jun 2026, 13 CVEs
Months with a KEV entry
0 since Jun 2026
Monthly snapshots
2 since 2026
Nezhahq's full record, month by month