N
Vendor security profile
nezhahq
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical2
CISA KEV0
Public exploit4
Patch rate%20
Avg. CVSS6.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
6
3
CVE KEV
CVE severity distribution
10toplam CVE
Critical2 (20%)
High3 (30%)
Medium4 (40%)
Low1 (10%)
Patch and exploitation view
%20
Verified patch
%0
CISA KEV
%40
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
6.5
CVE-2026-100394
Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant
N
Patch status unknownEPSS %0
7.1
CVE-2026-105113
Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock
N
Patch status unknownEPSS %0
6.0
CVE-2026-105112
Nezha 1.8.0 before 2.3.13 Deadlock DoS via notification-group endpoints
N
Patch status unknownEPSS %0
9.3
CVE-2026-101090
Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri
N
Patch status unknownEPSS %0
2.3
CVE-2026-101089
Nezha before 2.2.7 Information Disclosure via /api/v1/profile
N
Patch status unknownEPSS %0
6.0
CVE-2026-101088
Nezha before 2.3.1 Denial of Service via Concurrent Server Delete
N
Patch status unknownEPSS %0
5.3
CVE-2026-101087
Nezha 2.0.10 through 2.3.2 SSRF Denylist Bypass IPv6
N
Patch verifiedEPSS %0
7.1
CVE-2026-101086
Nezha Dashboard before 2.3.5 Task Type Validation Bypass
N
Patch verifiedEPSS %0
7.1
CVE-2026-101085
Nezha before 2.3.8 Denial of Service via Alert Rule
N
Patch status unknownEPSS %0
9.9
CVE-2026-62283
Nezha Monitoring: Cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check
N
Patch status unknownEPSS %1