PT-2026-49002 · Nezhahq · Nezha

Published 2026-06-12 · Updated 2026-06-12 · CVE-2026-53520

Mitre

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing. This issue has been patched in version 2.1.0.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-53520

Affected Products

Nezha

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-53520 · Security Note
• https://github.com/nezhahq/nezha/security/advisories/GHSA-x6fg-52vr-hj4w · Note