CVE-2026-94382 | henrygd Beszel up to 0.18.x Alerts /api/beszel/user-alerts system_id resource injection

September 21, 2026 Yanac

A vulnerability was found in henrygd Beszel up to 0.18.x. It has been classified as critical. Impacted is an unknown function of the file /api/beszel/user-alerts of the component Alerts Handler. Performing a manipulation of the argument system_id results in improper control of resource identifiers.

This vulnerability is known as CVE-2026-94382. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More