CVE-2026-111387 — Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint
Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits Webhoo…
Published: 2026-10-16 · CVSS: 7.1 · CVSS 4.0
Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read cleartext tokens embedded in every user's DDNS webhook profiles.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7