https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:48:50.190025+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-49396 CVE-2026-49396 — Nezha Monitoring: Cross-site GET request can trigger stored cron commands on a victim's agents 2026-10-06T16:48:50.206763+00:00

Affected: nezhahq nezha

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.0.0 to before version 2.0.14, cross-site GET request can trigger stored cron commands on a victim's agents. This issue has been patched in version 2.0.14.