CVE-2026-111384 | nezhahq Nezha up to 2.3.14 File Manager /api/v1/ws/file/:id SetReadLimit memory allocation

October 16, 2026 Yanac

A vulnerability was found in nezhahq Nezha up to 2.3.14. It has been rated as problematic. This issue affects the function SetReadLimit of the file /api/v1/ws/file/:id of the component File Manager. Performing a manipulation of the argument ID results in uncontrolled memory allocation.

This vulnerability is cataloged as CVE-2026-111384. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More