Apache · Apache Hertzbeat · CVE-2026-24343
**Name of the Vulnerable Software and Affected Versions**
Apache HertzBeat versions 1.7.1 through 1.7.9
**Description**
An issue exists in Apache HertzBeat related to improper neutralization of data within XPath expressions, potentially leading to XPath Injection. This could allow for crafted XPath expressions to cause uncontrolled resource consumption.
**Recommendations**
Upgrade to version 1.8.0 to resolve the issue.