← Database

CVE-2026-24343

HIGH CVSS: 8.8 Published: 2026-02-10 Modified: 2026-06-17

Description

Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue.

Affected Platforms

Apache Hertzbeat

Weakness Type

CWE-643

References