EUVD-2026-64139Published
Nezha Monitoring: Cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-62283 · Microsoft / collected KEV context
cve-program · CVE-2026-62283
- https://github.com/nezhahq/nezha/security/advisories/GHSA-q6xx-5vr8-p898
- https://github.com/nezhahq/nezha/commit/6661d6a7fc1c269f55c7f4e775082ad23fbe0f54
- https://github.com/nezhahq/nezha/releases/tag/v2.0.10
euvd · EUVD-2026-64139
- https://github.com/nezhahq/nezha/security/advisories/GHSA-q6xx-5vr8-p898
- https://github.com/nezhahq/nezha/commit/6661d6a7fc1c269f55c7f4e775082ad23fbe0f54
- https://github.com/nezhahq/nezha/releases/tag/v2.0.10
nvd · CVE-2026-62283
- https://github.com/nezhahq/nezha/commit/6661d6a7fc1c269f55c7f4e775082ad23fbe0f54
- https://github.com/nezhahq/nezha/releases/tag/v2.0.10
- https://github.com/nezhahq/nezha/security/advisories/GHSA-q6xx-5vr8-p898
osv · GHSA-q6xx-5vr8-p898
- https://github.com/nezhahq/nezha/security/advisories/GHSA-q6xx-5vr8-p898
- https://github.com/nezhahq/nezha
osv · GO-2026-5821
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.