ByteOS Network

CVE Vulnerability Details :

CVE-2026-48119

PUBLISHED

More Info Official Page

Assigner-GitHub_M

Assigner Org ID-a0819718-46f1-4df5-94e2-005712e83aaa

Published At-12 Jun, 2026 | 21:03

Updated At-12 Jun, 2026 | 21:03

▼CVE Numbering Authority (CNA)

Nezha Monitoring: Authenticated agents can forge service-monitor results for other users' services

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.12, authenticated agents can forge service-monitor results for other users' services. This issue has been patched in version 2.0.12.

Affected Products

Vendor

nezhahq

Product

nezha

Versions

Affected

>= 0.20.0, < 2.0.12

Problem Types

Type	CWE ID	Description
CWE	CWE-862	CWE-862: Missing Authorization

Type: CWE

CWE ID: CWE-862

Description: CWE-862: Missing Authorization

Metrics

Version	Base score	Base severity	Vector
3.1	7.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Version: 3.1

Base score: 7.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

References

Hyperlink	Resource
https://github.com/nezhahq/nezha/security/advisories/GHSA-4g6j-g789-rghm	x_refsource_CONFIRM

Hyperlink: https://github.com/nezhahq/nezha/security/advisories/GHSA-4g6j-g789-rghm

Resource:

x_refsource_CONFIRM

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References