Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, PATCH /server/{id} accepts and persists nonexistent ddns_profiles IDs for a member-owned server. If another user later creates a DDNS profile with one of those IDs, the DDNS worker resolves the stored ID and dispatches an update using the other user's DDNS profile configuration in the context of the attacker's server. This issue has been patched in version 2.1.0.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-28 | 1 | Active Exploitation1 |
| 2026-06-14 | 1 | General1 |
| 2026-06-27 | 1 | Disclosure1 |
CVE-2026-53521 Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, PATCH /server/{id} accept… https://www.cve.org/CVERecord?id=CVE-2026-53521
Post summary
The post announces CVE-2026‑53521 affecting Nezha Monitoring between versions 2.0.14 and 2.1.0, lists a vulnerable PATCH /server/{id} endpoint, and provides no exploit or patch details.
🟠 Nezha Monitoring, Second-Order Authorization Bypass, #CVE-2026-53521 (Medium) -DC-Jun2026-724 https://dailycve.com/nezha-monitoring-second-order-authorization-bypass-cve-2026-53521-medium-dc-jun2026-724/
Post summary
The post announces CVE-2026-53521, a medium‑severity Second‑Order Authorization Bypass in Nezha Monitoring, without mentioning patches, exploits, or active use.
📰 CISA Flags CVE-2026-53521 as Critical Threat Amid F5 BIG-IP Exploits The U. What do you think? 💭 👉 https://apemanor.com/article/ac631072-9f70-425f-a1ea-f6d341763f71 #Tech #News #Discussion https://t.co/dgHspFRt1e
Post summary
The tweet cites a CISA advisory labeling CVE‑2026‑53521 a critical threat amid F5 BIG‑IP exploits, but it offers no PoC, code, patch, or detailed technical information.