CVE-2026-111383 | NezhaHQ Nezha up to 2.3.14 WebSocket Transfer /api/v1/ws/transfer ServerTransferClass.Subscribe resource consumption

October 16, 2026 Yanac

A vulnerability, which was classified as problematic, was found in NezhaHQ Nezha up to 2.3.14. Affected is the function ServerTransferClass.Subscribe of the file /api/v1/ws/transfer of the component WebSocket Transfer. Executing a manipulation can lead to resource consumption.

The identification of this vulnerability is CVE-2026-111383. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More