{"id":"EUVD-2026-36595","enisaUuid":"527dbf34-0fc5-3847-8198-8af0400eb177","description":"Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O\u0026M tool. From version 0.20.0 to before version 2.0.12, authenticated agents can forge service-monitor results for other users\u0027 services. This issue has been patched in version 2.0.12.","datePublished":"Jun 12, 2026, 9:03:17 PM","dateUpdated":"Jun 15, 2026, 7:27:29 PM","baseScore":7.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","references":"https://github.com/nezhahq/nezha/security/advisories/GHSA-4g6j-g789-rghm\n","aliases":"CVE-2026-48119\nGHSA-4g6j-g789-rghm\n","assigner":"GitHub_M","epss":0.31,"enisaIdProduct":[{"id":"52d1a732-92cc-3ba5-a09a-4b494682d349","product":{"name":"nezha","vendor":{"name":"nezhahq"}},"product_version":"0.20.0, \u003c 2.0.12"}],"enisaIdVendor":[{"id":"bc35c9d1-403b-3d7d-be49-18a93da3887c","vendor":{"name":"nezhahq"}}],"enisaIdVulnerability":[{"id":"2769dd4b-342d-310f-bcc9-76c2e1f8fba0","vulnerability":{"id":"CVE-2026-48119","description":"Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O\u0026M tool. From version 0.20.0 to before version 2.0.12, authenticated agents can forge service-monitor results for other users\u0027 services. This issue has been patched in version 2.0.12.","datePublished":"Jun 12, 2026, 9:03:17 PM","dateUpdated":"Jun 15, 2026, 7:27:29 PM","status":"PUBLISHED","baseScore":7.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","references":"https://github.com/nezhahq/nezha/security/advisories/GHSA-4g6j-g789-rghm\n","enisa_id":"EUVD-2026-36595\n","assigner":"GitHub_M","epss":0.31,"dataProcessed":"Nov 7, 2026, 7:22:59 AM","vulnerabilityProduct":[{"id":"224209fc-3c30-33ff-a97e-06a8d35806be","product":{"name":"nezha","vendor":{"name":"nezhahq"}},"product_version":"0.20.0, \u003c 2.0.12"}],"vulnerabilityVendor":[{"id":"f7fe2d06-d1d6-3a44-b57e-9157000e6449","vendor":{"name":"nezhahq"}}]}},{"id":"6d0898ef-380f-324c-8b67-770f487bd3e4","vulnerability":{"id":"GHSA-4g6j-g789-rghm","description":"Nezha\u0027s authenticated agents can forge service-monitor results for other users\u0027 services","datePublished":"Jun 1, 2026, 2:05:06 PM","dateUpdated":"Jun 26, 2026, 9:28:43 PM","baseScore":0.0,"references":"https://github.com/nezhahq/nezha/security/advisories/GHSA-4g6j-g789-rghm\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-48119\nhttps://github.com/nezhahq/nezha/commit/02129f16fb1572ef57c7e8dd7d03f84d39b8b586\nhttps://github.com/nezhahq/nezha\n","enisa_id":"EUVD-2026-36595\n","aliases":"GHSA-4g6j-g789-rghm\nCVE-2026-48119\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:03 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}