CVE-2026-114442 | Apache HertzBeat aliasFields xpath injection

November 3, 2026 Yanac

A vulnerability, which was classified as critical, was found in Apache HertzBeat. Affected by this issue is some unknown functionality. Executing a manipulation of the argument aliasFields can lead to improper neutralization of data within xpath expressions.

This vulnerability is tracked as CVE-2026-114442. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More