Authenticated Host Claim via NAT in Nezha Monitoring

Publication date: 2026-06-12

Last updated on: 2026-06-15

Assigner: GitHub, Inc.

Description

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing. This issue has been patched in version 2.1.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-12

Last Modified

2026-06-15

Generated

2026-07-03

AI Q&A

2026-06-13

EPSS Evaluated

2026-07-02

NVD

CVE-2026-53520

Affected Vendors & Products

Vendor	Product	Version / Range
nezha_monitoring	nezha_monitoring	From 2.0.14 (inc) to 2.1.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

The vulnerability exists in Nezha Monitoring versions from 2.0.14 up to but not including 2.1.0. Authenticated users can claim the dashboard Host through NAT (Network Address Translation) and preempt all dashboard routing. This means that an authenticated user can take control over the dashboard host routing, potentially disrupting normal dashboard operations.

Impact Analysis

This vulnerability can impact you by allowing an authenticated user to interfere with the dashboard routing of Nezha Monitoring. While it does not affect confidentiality or integrity, it can cause a denial of service or disruption of availability, as indicated by the CVSS score which rates the impact on availability as high.

Mitigation Strategies

To mitigate this vulnerability, upgrade Nezha Monitoring to version 2.1.0 or later, where the issue has been patched.

Hi! I’m here to help you understand CVE-2026-53520. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70