CVE-2026-46716
CRITICAL EPSS 25.8%
Published Jun 12, 20262w ago · Modified Jun 17, 20261w ago
9.9 CVSS 3.1
Published Jun 12, 2026 2w ago
Last Modified Jun 17, 2026 1w ago
Description
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, a RoleMember user can create a scheduled cron task with Cover=CronCoverAll, Servers=[] and an arbitrary Command. At every tick of the scheduler, the dashboard pushes that command to every server in the global ServerShared map — including servers that belong to other tenants (admin's servers, other members' servers). Each agent runs the command and returns the output, which is then sent to the attacker's own NotificationGroup → attacker-controlled webhook. This issue has been patched in version 2.0.8.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Changed
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
25.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 3
CWE-269 Improper Privilege Management Authorization
CWE-78 OS Command Injection Injection
CWE-862 Missing Authorization Authorization
References 1
- github.com https://github.com/nezhahq/nezha/security/advisories/GHSA-99gv-2m7h-3hh9
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.