Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

netdata — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in netdata, with AI-generated Chinese analysis, references, and POCs.

Vendor: netdata

CVE ID Title CVSS Severity Published
CVE-2026-83597 Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution CWE-269 7.0 High 2026-09-22
CVE-2026-83600 Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent CWE-193 6.5 Medium 2026-09-22
CVE-2026-83598 Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair CWE-269 7.8 High 2026-09-22
CVE-2026-83603 Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE CWE-73 8.4 High 2026-09-22
CVE-2026-83601 Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write CWE-190 6.5 Medium 2026-09-22
CVE-2026-83602 Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK CWE-284 6.5 Medium 2026-09-22
CVE-2026-83599 Netdata: WebSocket Decompression Bomb CWE-409 7.5 High 2026-09-22
CVE-2025-71385 Netdata < 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg Endpoint CWE-79 6.1 Medium 2026-07-02
CVE-2024-32019 ndsudo: local privilege escalation via untrusted search path CWE-426 8.8 High 2024-04-12
CVE-2023-22497 Netdata is vulnerable to improper authentication CWE-287 6.5 Medium 2023-01-14
CVE-2023-22496 Netdata vulnerable to command injection CWE-20 8.1 High 2023-01-14

All 11 known CVE vulnerabilities affecting netdata with full Chinese analysis, references, and POCs where available.