CVE-2026-46716 Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron

🗓️ 12 Jun 2026 21:00:46Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

RoleMember could run arbitrary shell on all servers via Cron in Nezha Monitoring; cross-tenant RCE.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2026-46716	17 May 202602:58	–	circl
CVE	CVE-2026-46716	12 Jun 202621:00	–	cve
Cvelist	CVE-2026-46716 Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron	12 Jun 202621:00	–	cvelist
GithubExploit	Exploit for CVE-2026-46716	30 May 202602:44	–	githubexploit
EUVD	EUVD-2026-36591	12 Jun 202621:00	–	euvd
Github Security Blog	Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron	23 May 202600:17	–	github
Github Security Blog	Nezha vulnerable to cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check	26 Jun 202622:31	–	github
NVD	CVE-2026-46716	12 Jun 202622:16	–	nvd
OSV	GHSA-99GV-2M7H-3HH9 Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron	23 May 202600:17	–	osv
OSV	GO-2026-5282 Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron in github.com/nezhahq/nezha	25 Jun 202618:43	–	osv

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46716.json
github	www.github.com/nezhahq/nezha/security/advisories/GHSA-99gv-2m7h-3hh9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-46716

08 Jul 2026 08:13Current

6Medium risk

Vulners AI Score6

CVSS 3.19.9

EPSS0.00339

role member cross tenant arbitrary shell cron task nezha monitoring