Nezha
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 18 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 12, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Nezha Dashboard before 2.6.0 Multiple Authorization and Tenant Isolation Flaws
Nezha 2.0.0 before 2.4.0 Startup NULL Pointer Dereference via Orphaned Service History
Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint
Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig
Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer Tools
Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocket
Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocket
Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock
Nezha 1.8.0 before 2.3.13 Deadlock DoS via notification-group endpoints
Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri
Monitor Nezha in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.