Apache Software Foundation Hertzbeat vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Apache Software Foundation Hertzbeat: 1 record(s), with affected versions and fixes.cpe:2.3:a:apache:hertzbeat
CVE-2026-24343
High · 8.8
CWE-643 Feb 10, 2026
Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions
Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat.
This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0.
Users are recommended to upgrade to version 1.8.0, which fixes the issue.