CVE-2026-24343Disclosure(apache / hertzbeat)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue.

apache CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-643

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

hertzbeat

Threat summary

6 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 3 classified signals
Peaked 1d ago at 3 mentions (2026-02-10); latest day: 1
6 total mentions across 3 days

Affected systems

Vendors

apache

Products

hertzbeat

Deep dive

Activity timeline6 mentions / 3d

Signal classification2 categories

Disclosure

350.0%

General

350.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-09	2	Disclosure1General1
2026-02-10	3	Disclosure1General2
2026-02-16	1	Disclosure1

Full discourse6 posts

Open Source Security mailing list@oss_security241d
Disclosure
CVE-2026-24343: Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions https://www.openwall.com/lists/oss-security/2026/02/09/4 Severity: Important
Post summary
The text discloses CVE-2026-24343, noting it causes resource exhaustion through crafted XPath expressions, but provides no PoC, exploit, patch, or evidence of active exploitation.
00030380
4.4K followersView on X
Smurfs ✘@0xsmurfsr241d
General
CVE-2026-24343 เสร็จแล้ว :) พร้อมทดสอบกับเว็บที่มีช่องโหว่นี้ล่ะ นั่งศึกษา Process - Apache ตั้งนานจนรู้จักหลักการทำงานของมัน คือถ้าเว็บเก่าไม่ยอม Patched เวอร์ชั่นใหม่ก็สามารถ RCE รันทะลุไปยัน Admin Panel ได้เลย เดี๋ยวหาเหยื่อแป๊ป https://t.co/CDJIGxdWR8
Post summary
The user announces completion of work on CVE‑2026‑24343, noting it enables RCE to an Admin Panel on unpatched sites, but no PoC, exploit, or patch is disclosed.
10010137
164 followersView on X
Smurfs ✘@0xsmurfsr241d
General
เผื่อใครอยากไปลองฉีดกับเว็บที่ใช้ APC https://www.tenable.com/cve/CVE-2026-24343
Post summary
The post only references CVE-2026-24343 via a Tenable link, offering no concrete evidence of a PoC, exploit, or patch.
1000034
164 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds241d
General
CVE-2026-24343 CVE-2026-24343 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24343
Post summary
The post simply lists CVE-2026-24343 and links to a vulnerability detail page, without providing any further exploitation or mitigation information.
0000143
4.0K followersView on X
Cyberwatcher_@cyberwatcher_234d
Disclosure
Vulnérabilité XPath Injection dans Apache HertzBeat ! Un attaquant authentifié peut exécuter du code arbitraire. #Cybersecurity #InfoSec #Vulnerability https://cyberveille.esante.gouv.fr/alertes/apache-hertzbeat-cve-2026-24343-2026-02-16 https://cyberveille.esante.gouv.fr/alertes/apache-hertzbeat-cve-2026-24343-2026-02-16
Post summary
The post announces an XPath Injection vulnerability (CVE‑2026‑24343) in Apache HertzBeat that lets authenticated attackers execute arbitrary code, and links to an official advisory.
0000044
12 followersView on X
The Hacker Wire@TheHackerWire241d
Disclosure
🟠 CVE-2026-24343 - High Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0. Users are recom... https://www.thehackerwire.com/vulnerability/CVE-2026-24343/ https://t.co/22mL2BR7OO
Post summary
The tweet announces the discovery of CVE-2026-24343, an XPath injection flaw in Apache HertzBeat, providing basic details such as severity, type, and affected versions, but does not mention any PoC, exploit code, active exploitation, or patch.
0000038
112 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	apache	hertzbeat	-	-	-

Explore more

Back to dashboard apache CVEs hertzbeat vulnerabilities

What researchers are saying

CVE-2026-24343

Smurfs ✘[verified]@0xsmurfsrGeneral

The user announces completion of work on CVE‑2026‑24343, noting it enables RCE to an Admin Panel on unpatched sites, but no PoC, exploit, or patch is disclosed.

Smurfs ✘[verified]@0xsmurfsrGeneral

The post only references CVE-2026-24343 via a Tenable link, offering no concrete evidence of a PoC, exploit, or patch.

Open Source Security mailing list@oss_securityDisclosure

The text discloses CVE-2026-24343, noting it causes resource exhaustion through crafted XPath expressions, but provides no PoC, exploit, patch, or evidence of active exploitation.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The post simply lists CVE-2026-24343 and links to a vulnerability detail page, without providing any further exploitation or mitigation information.

Cyberwatcher_@cyberwatcher_Disclosure

The post announces an XPath Injection vulnerability (CVE‑2026‑24343) in Apache HertzBeat that lets authenticated attackers execute arbitrary code, and links to an official advisory.

The Hacker Wire@TheHackerWireDisclosure

The tweet announces the discovery of CVE-2026-24343, an XPath injection flaw in Apache HertzBeat, providing basic details such as severity, type, and affected versions, but does not mention any PoC, exploit code, active exploitation, or patch.