← All advisories

High severity8.8NVD Advisory· Published Feb 10, 2026· Updated Jun 17, 2026

CVE-2026-24343

CVE-2026-24343

Description

Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat.

This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.

Affected products

3

Apache/HertzBeat3 versions
cpe:2.3:a:apache:hertzbeat:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apache:hertzbeat:*:*:*:*:*:*:*:*range: >=1.7.1,<1.8.0
- (no CPE)range: from 1.7.1 before 1.8.0
- (no CPE)range: 1.7.1

Patches

Vulnerability mechanics

References

2

www.openwall.com/lists/oss-security/2026/02/09/4nvdMailing ListThird Party Advisory
lists.apache.org/thread/b2k3jqwffrbo2sy6bl4n0f68kp8bfo1nnvdMailing ListVendor Advisory

News mentions

0

No linked articles in our index yet.