CVE-2026-111386
Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to enumerate other tenants' server IDs through differential responses. Attackers can sweep sequential IDs against getServerConfig and setServerConfig, distinguishing 'permission denied' from success payloads to map other users' servers.
| CWE | CWE-204 |
| Vendor | nezhahq |
| Product | nezha |
| Published | Oct 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for nezhahq nezha
Be the first to know when new medium vulnerabilities affecting nezhahq nezha are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
nezhahq / nezha
1.7.0 < 2.3.15
References
github.com: https://github.com/nezhahq/nezha/security/advisories/GHSA-228w-p4h4-6rvw github.com: https://github.com/nezhahq/nezha/commit/36b742a7e9a81ed782363dd19efd77b7030fbd0f vulncheck.com: https://www.vulncheck.com/advisories/nezha-1.7.0-before-2.3.15-cross-tenant-server-id-enumeration-via-getserverconfig
Credits
🔍 Tan-JunWei