VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 10, 2026· Updated Feb 10, 2026

Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions

CVE-2026-24343

Description

Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat.

This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.

Affected products

2
  • Apache/HertzBeatllm-create2 versions
    >=1.7.1, <1.8.0+ 1 more
    • (no CPE)range: >=1.7.1, <1.8.0
    • (no CPE)range: 1.7.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.

CVE-2026-24343 · VYPR