VulnerabilityDeferred

CVE-2026-53520

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool.

MEDIUM 6.5EPSS 0.28%

Does this matter?

Lower severity and a low EPSS score (0.28%). Track it; it rarely justifies an emergency change on its own.

Description

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing. This issue has been patched in version 2.1.0.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.28% probability · 21th percentile
CISA KEV: Not listed
Weakness: CWE-284
Source: security-advisories@github.com

References

https://github.com/nezhahq/nezha/security/advisories/GHSA-x6fg-52vr-hj4w
https://github.com/nezhahq/nezha/security/advisories/GHSA-x6fg-52vr-hj4w

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.