PT-2026-133773
CVE-2026-120046
·
تاريخ النشر
2026-10-30
·
تاريخ التحديث
2026-10-30
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows authenticated users to crash the dashboard by deleting a service. Attackers can delete their own service via POST /api/v1/batch-delete/service, leaving orphaned service histories rows that crash the non-TSDB dashboard on its next startup until removed manually.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾