Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:nezhahq:nezha_monitoring:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Nezha Monitoring Pre-Auth Path Traversal via Dashboard Prefix Confusion (CVE-2026-53519)

A critical pre-authentication path traversal vulnerability, CVE-2026-53519, in Nezha Monitoring's dashboard allows an unauthenticated attacker to read arbitrary files from the server's working directory, leading to the exfiltration of the `jwt_secret_key` and full administrative account takeover.

PoC Nezha Monitoring path-traversal unauthenticated webserver credential-access privilege-escalation nezha-monitoring cve
1r 4t 1c updated