What’s Vulnerable › Vulnerabilities

CVE-2026-53521: Nezha Monitoring: Stored future DDNS profile ID allows unauthorized use of another user's DDNS profile context

• Severity: medium (CVSS 6.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-12 · updated 2026-10-25
• Weakness: CWE-863

Description

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, PATCH /server/{id} accepts and persists nonexistent ddns_profiles IDs for a member-owned server. If another user later creates a DDNS profile with one of those IDs, the DDNS worker resolves the stored ID and dispatches an update using the other user's DDNS profile configuration in the context of the attacker's server. This issue has been patched in version 2.1.0.

Affected products

• nezhahq nezha: from 2.0.14, < 2.1.0

References

• https://github.com/nezhahq/nezha/security/advisories/GHSA-39g2-8x68-pmx8
• https://github.com/nezhahq/nezha/security/advisories/GHSA-39g2-8x68-pmx8

Get alerted when CVE-2026-53521 or the next vulnerability affects your stack