CVE-2026-111387
6.5 MEDIUMpublic exploit availablePublished 2026-10-16 · Updated 2026-10-16
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read cleartext tokens embedded in every user's DDNS webhook profiles.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-212
Public exploit & PoC references
All references
- https://github.com/nezhahq/nezha/commit/36b742a7e9a81ed782363dd19efd77b7030fbd0f
- https://github.com/nezhahq/nezha/commit/39d398066d8c644fe452f74704e34ada6c7ab61e
- https://github.com/nezhahq/nezha/security/advisories/GHSA-hpfr-cmgc-f455
- https://www.vulncheck.com/advisories/nezha-2.2.5-before-2.3.15-information-disclosure-via-ddns-list-endpoint
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-107291PoC
- MEDIUMCVE-2026-107293PoC
- LOWCVE-2026-17511
- MEDIUMCVE-2026-73440
- HIGHCVE-2026-90860
- UNSCOREDCVE-2026-96879
Related by shared AI tags and CWE weakness class. Browse the full archive.