CVE-2026-53520

Published: Jun 12, 2026Modified: Jun 17, 2026Deferred

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: security-advisories@github.com (Secondary)

Description

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing. This issue has been patched in version 2.1.0.

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://github.com/nezhahq/nezha/security/advisories/GHSA-x6fg-52vr-hj4w

Source: security-advisories@github.com

https://github.com/nezhahq/nezha/security/advisories/GHSA-x6fg-52vr-hj4w

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.