CVE-2026-101087 | NezhaHQ Nezha up to 2.3.2 URL Validator server-side request forgery (EUVD-2026-88022)

September 27, 2026 Yanac

A vulnerability described as critical has been identified in NezhaHQ Nezha up to 2.3.2. This affects an unknown function of the component URL Validator. Executing a manipulation can lead to server-side request forgery.

This vulnerability appears as CVE-2026-101087. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More