CVE-2026-53520

MEDIUM CVSS 6.5 View on NVD ↗

Description

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing. This issue has been patched in version 2.1.0.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

https://github.com/nezhahq/nezha/security/advisories/GHSA-x6fg-52vr-hj4w

Published: Jun 12, 2026 22:16 UTC Modified: Jun 12, 2026 22:16 UTC