CVE-2026-111383

The Nezha monitoring tool (versions 2.0.13 before 2.3.15 ) is vulnerable to a resource exhaustion flaw. Authenticated users can exploit the /api/v1/ws/transfer WebSocket endpoint to open unbounded concurrent connections. Specifically, the ServerTransferClass.Subscribe function allows the creation...