CVE-2026-47268

🗓️ 12 Jun 2026 20:56:45Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 71 Views🌐 WEB

Authenticated Nezha dashboard can trigger blind SSRF via DDNS webhook; fixed in 2.0.10.

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2026-47268	19 May 202601:15	–	circl
Cvelist	CVE-2026-47268 Nezha Monitoring: Authenticated DDNS webhook configuration allows blind SSRF from the dashboard host	12 Jun 202620:56	–	cvelist
EUVD	EUVD-2026-36588	12 Jun 202620:56	–	euvd
Github Security Blog	Nezha's authenticated DDNS webhook configuration allows blind SSRF from the dashboard host	29 May 202622:10	–	github
Mend	CVE-2026-47268	12 Jun 202620:56	–	mend
NVD	CVE-2026-47268	12 Jun 202622:16	–	nvd
osv_cve	CVE-2026-47268 Nezha Monitoring: Authenticated DDNS webhook configuration allows blind SSRF from the dashboard host	12 Jun 202620:56	–	osv_cve
osv_ghsa	GHSA-6X26-5727-RRM9 Nezha's authenticated DDNS webhook configuration allows blind SSRF from the dashboard host	29 May 202622:10	–	osv_ghsa
osv_go	GO-2026-5194 Nezha's authenticated DDNS webhook configuration allows blind SSRF from the dashboard host in github.com/nezhahq/nezha in github.com/naiba/nezha	25 Jun 202618:43	–	osv_go
osv_opensuse	OPENSUSE-SU-2026:21483-1 Security update for govulncheck-vulndb	30 Jul 202609:09	–	osv_opensuse

Vulners

Node

nezhahq nezhaRange0.20.0–2.0.10

[
  {
    "vendor": "nezhahq",
    "product": "nezha",
    "versions": [
      {
        "version": ">= 0.20.0, < 2.0.10",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/nezhahq/nezha/security/advisories/GHSA-6x26-5727-rrm9

Parameter	Position	Path	Description	CWE
webhook_url	request body	/api/ddns/profiles	Authenticated users can create or update a DDNS profile with an arbitrary webhook_url, allowing for blind SSRF when the DDNS trigger is activated.	CWE-918

25 Oct 2026 23:10Current

8High risk

Vulners AI Score8

CVSS 3.16.4

EPSS0.00219

SSVC

CWE-918