CVE-2026-24343 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from 1.7.1…
High CVSS: 8.8

CVE-2026-24343

Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat.

This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.
Vendor
Apache
Product
Hertzbeat
CWE
CWE-643
Yayın Tarihi
2026-02-10 10:15:59
Güncelleme
2026-02-11 17:56:14
Source Identifier
security@apache.org
KEV Date Added
-

Kategoriler

CWE-643 Hertzbeat HIGH Apache 2026

Referanslar

https://lists.apache.org/thread/b2k3jqwffrbo2sy6bl4n0f68kp8bfo1n http://www.openwall.com/lists/oss-security/2026/02/09/4