<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: nezha</title><description>Every new CVE for nezha.</description><link>https://agentprime.io/</link><item><title>CVE-2026-120046: Nezha 2.0.0 before 2.4.0 Startup NULL Pointer Dereference via Orphaned Service History</title><link>https://agentprime.io/advisories/CVE-2026-120046/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-120046/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 18:52:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-111387: Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-111387/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111387/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 01:17:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-111386: Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig</title><link>https://agentprime.io/advisories/CVE-2026-111386/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111386/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 01:17:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-111385: Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer Tools</title><link>https://agentprime.io/advisories/CVE-2026-111385/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111385/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 01:17:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-111384: Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocket</title><link>https://agentprime.io/advisories/CVE-2026-111384/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111384/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 01:17:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-111383: Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocket</title><link>https://agentprime.io/advisories/CVE-2026-111383/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111383/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 01:17:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-105113: Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock</title><link>https://agentprime.io/advisories/CVE-2026-105113/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105113/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 03 Oct 2026 12:14:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-105112: Nezha 1.8.0 before 2.3.13 Deadlock DoS via notification-group endpoints</title><link>https://agentprime.io/advisories/CVE-2026-105112/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-105112/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 03 Oct 2026 12:14:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101089: Nezha before 2.2.7 Information Disclosure via /api/v1/profile</title><link>https://agentprime.io/advisories/CVE-2026-101089/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101089/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 27 Sep 2026 20:50:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101088: Nezha before 2.3.1 Denial of Service via Concurrent Server Delete</title><link>https://agentprime.io/advisories/CVE-2026-101088/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101088/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 27 Sep 2026 20:49:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101087: Nezha 2.0.10 through 2.3.2 SSRF Denylist Bypass IPv6</title><link>https://agentprime.io/advisories/CVE-2026-101087/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101087/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 27 Sep 2026 20:49:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101086: Nezha Dashboard before 2.3.5 Task Type Validation Bypass</title><link>https://agentprime.io/advisories/CVE-2026-101086/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101086/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 27 Sep 2026 20:49:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101085: Nezha before 2.3.8 Denial of Service via Alert Rule</title><link>https://agentprime.io/advisories/CVE-2026-101085/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101085/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 27 Sep 2026 20:49:57 GMT</pubDate><category>CVE</category></item></channel></rss>