CVE-2026-120046

Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows authenticated users to crash the dashboard by deleting a service. Attackers can delete their own service via POST /api/v1/batch-delete/service, leaving orphaned servicehistorie...

CVE-2026-120046

Nezha versions 2.0.0 before 2.4.0 are vulnerable to a NULL pointer dereference in the ServiceSentinel.loadTodayStats function. An authenticated user can trigger this by deleting their own service via POST /api/v1/batch-delete/service, which leaves orphaned service_histories rows. These orphaned r...

EUVD-2026-114328

Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows authenticated users to crash the dashboard by deleting a service. Attackers can delete their own service via POST /api/v1/batch-delete/service, leaving orphaned servicehistorie...

CVE-2026-120046 Nezha 2.0.0 before 2.4.0 Startup NULL Pointer Dereference via Orphaned Service History

Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows authenticated users to crash the dashboard by deleting a service. Attackers can delete their own service via POST /api/v1/batch-delete/service, leaving orphaned servicehistorie...

CVE-2026-120046: nezhahq nezha: Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that…

Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows authenticated users to crash the dashboard by deleting a service. Attackers can delete their own service via POST /api/v1/batch-delete/service, leaving orphaned servicehistorie...