Skip to content
Threat Feed
Subscribe

Product

Nezha Monitoring (< 2.0.13)

1 brief RSS
critical advisory

Nezha Monitoring Pre-Auth Path Traversal via Dashboard Prefix Confusion (CVE-2026-53519)

A critical pre-authentication path traversal vulnerability, CVE-2026-53519, in Nezha Monitoring's dashboard allows an unauthenticated attacker to read arbitrary files from the server's working directory, leading to the exfiltration of the `jwt_secret_key` and full administrative account takeover.

PoC Nezha Monitoring path-traversal unauthenticated webserver credential-access privilege-escalation nezha-monitoring cve
1r 4t 1c updated