{"id":"EUVD-2026-64139","enisaUuid":"856d4e3a-b720-397d-a7a1-b9a5e268f5a7","description":"Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O\u0026M tool. Nezha versions 1.14.13 through 1.14.14 and 2.0.0 through 2.0.9 do not bind stream identifiers created by CreateStream in service/rpc/io_stream.go to their creating user, and `GET /ws/terminal/:id` and `GET /ws/file/:id` only check whether the supplied UUID exists. An authenticated RoleMember who obtains a live stream UUID from logs, browser history, referer data, or telemetry can attach to another user\u0027s terminal or file-manager session, read and write target-server files, and execute shell commands. This issue is fixed in version 2.0.10.","datePublished":"Aug 21, 2026, 8:21:28 PM","dateUpdated":"Aug 21, 2026, 9:42:51 PM","baseScore":9.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","references":"https://github.com/nezhahq/nezha/security/advisories/GHSA-q6xx-5vr8-p898\nhttps://github.com/nezhahq/nezha/commit/6661d6a7fc1c269f55c7f4e775082ad23fbe0f54\nhttps://github.com/nezhahq/nezha/releases/tag/v2.0.10\n","aliases":"CVE-2026-62283\n","assigner":"GitHub_M","epss":0.55,"enisaIdProduct":[{"id":"2d10673b-3a90-3748-9dac-5f2f1bf11fd0","product":{"name":"nezha","vendor":{"name":"nezhahq"}},"product_version":"1.14.13, ≤ 1.14.14"},{"id":"7e9385fc-ba75-3458-9ae4-5c30f2230b9f","product":{"name":"nezha","vendor":{"name":"nezhahq"}},"product_version":"2.0.0, \u003c 2.0.10"}],"enisaIdVendor":[{"id":"f5790e1e-80b9-3069-90e1-abd104088c31","vendor":{"name":"nezhahq"}}],"enisaIdVulnerability":[{"id":"746dd523-c689-361e-a012-dd6ee87dcb49","vulnerability":{"id":"CVE-2026-62283","description":"Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O\u0026M tool. Nezha versions 1.14.13 through 1.14.14 and 2.0.0 through 2.0.9 do not bind stream identifiers created by CreateStream in service/rpc/io_stream.go to their creating user, and `GET /ws/terminal/:id` and `GET /ws/file/:id` only check whether the supplied UUID exists. An authenticated RoleMember who obtains a live stream UUID from logs, browser history, referer data, or telemetry can attach to another user\u0027s terminal or file-manager session, read and write target-server files, and execute shell commands. This issue is fixed in version 2.0.10.","datePublished":"Aug 21, 2026, 8:21:28 PM","dateUpdated":"Aug 21, 2026, 9:42:51 PM","status":"PUBLISHED","baseScore":9.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","references":"https://github.com/nezhahq/nezha/security/advisories/GHSA-q6xx-5vr8-p898\nhttps://github.com/nezhahq/nezha/commit/6661d6a7fc1c269f55c7f4e775082ad23fbe0f54\nhttps://github.com/nezhahq/nezha/releases/tag/v2.0.10\n","enisa_id":"EUVD-2026-64139\n","assigner":"GitHub_M","epss":0.55,"dataProcessed":"Nov 5, 2026, 7:15:00 AM","vulnerabilityProduct":[{"id":"6a767a53-cea9-3a1d-9f0a-7a746e4764ec","product":{"name":"nezha","vendor":{"name":"nezhahq"}},"product_version":"1.14.13, ≤ 1.14.14"},{"id":"f1cbdbc2-f452-3740-83ce-c1e3470793f8","product":{"name":"nezha","vendor":{"name":"nezhahq"}},"product_version":"2.0.0, \u003c 2.0.10"}],"vulnerabilityVendor":[{"id":"b702dd6f-0729-3214-8b1d-64e571fdf58a","vendor":{"name":"nezhahq"}}]}}],"enisaIdAdvisory":[]}