Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-120046 1 Nezhahq 1 Nezha 2026-11-05 5.3 Medium
Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows authenticated users to crash the dashboard by deleting a service. Attackers can delete their own service via POST /api/v1/batch-delete/service, leaving orphaned service_histories rows that crash the non-TSDB dashboard on its next startup until removed manually.