CVE-2026-120046 | nezhahq Nezha up to 2.3.x ServiceSentinel service ServiceSentinel.loadTodayStats null pointer dereference

October 30, 2026 Yanac

A vulnerability described as problematic has been identified in nezhahq Nezha up to 2.3.x. The affected element is the function ServiceSentinel.loadTodayStats of the file /api/v1/batch-delete/service of the component ServiceSentinel. The manipulation results in null pointer dereference.

This vulnerability is identified as CVE-2026-120046. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More