SZB-4d25bb1960
EUVD-2026-114328 flags NULL pointer dereference in Nezha dashboard
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- nezhahq
- Product
- nezha
- First seen
Summary
EUVD-2026-114328 describes a NULL pointer dereference in Nezha 2.0.0 before 2.4.0, rated 6.0 (CVSS v3.1). Per the record, an authenticated user can crash the dashboard by deleting a service.
If you use nezhahq
Upgrade nezha to version 2.4.0 or later
Limit dashboard accounts to trusted users until upgraded
Restart the dashboard service if it becomes unresponsive
What the sources say 1
· Mastodon: “Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows authenticated users to crash the dashboard by deleting a service.” Source