VulnSocial

CVE-2024-42323PoC(apache / hertzbeat)

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating).  This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.0. Users are recommended to upgrade to version 1.6.0, which fixes the issue.

apache CVEsBack to dashboard
1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-502

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • hertzbeat

Threat summary

  • Public PoC is present in monitored signal
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-12); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
apache
Products
hertzbeat

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-12: 1Mentions · 2026-07-23: 1PoC Mentioned / Linked · 2026-07-12: 1Technical Details · 2026-07-12: 1Technical Details · 2026-07-23: 107-1207-23
Signal classification2 categories
PoC
150.0%
Disclosure
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-07-121
PoC1
2026-07-231
Disclosure1
Full discourse2 posts
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2024-42323 - high 🚨 Apache HertzBeat < 1.6.0 - SnakeYAML Deserialization Remote Code Execution > Apache HertzBeat versions before 1.6.0 use a vulnerable version of the SnakeYAML libr... 👾 https://cloud.projectdiscovery.io/library/CVE-2024-42323 @pdnuclei #NucleiTempl...

    Post summary

    The post announces CVE‑2024‑42323 as a high‑severity RCE in older Apache HertzBeat versions utilizing vulnerable SnakeYAML, without providing a PoC, exploit, active exploitation evidence, or patch information.

    020124716
    1.3K followersView on X
  • r0otk3r@r0otk3r
    PoC

    🚨 CVE-2024-42323: Apache HertzBeat RCE 🔗https://www.youtube.com/watch?v=Hwguw5TBkdc #Cybersecurity #Infosec #AppSec #RCE #Java #SnakeYAML #CVE202442323 #HertzBeat https://t.co/XwLP8hxcrw

    Post summary

    The tweet announces a remote code execution flaw in Apache HertzBeat, linking to a YouTube video likely showcasing the vulnerability, but provides no evidence of active exploitation, a patch, or detailed exploit code.

    0001038
    43 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appapachehertzbeat---

Explore more

Back to dashboardapache CVEshertzbeat vulnerabilities