https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-02T00:14:07.765171+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-120046 CVE-2026-120046 — Nezha 2.0.0 before 2.4.0 Startup NULL Pointer Dereference via Orphaned Service History 2026-11-02T00:14:07.766447+00:00

Affected: nezhahq nezha

Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats that allows authenticated users to crash the dashboard by deleting a service. Attackers can delete their own service via POST /api/v1/batch-delete/service, leaving orphaned service_histories rows that crash the non-TSDB dashboard on its next startup until removed manually.