Read the docs

netdata

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

netdata records in CISA KEV

No netdata vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Netdata 4 records HIGH

Records

12 records

TI-2023-08744 CVE-2023-22496

Netdata vulnerable to command injection

Priority HIGH 76

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.36171 Published 2023-01-14 Fixed in 1.36.0-409, 1.37 CWE-20
TI-2023-08745 CVE-2023-22497

Netdata is vulnerable to improper authentication

Priority HIGH 72

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00699 Published 2023-01-14 Fixed in 1.36.0-409, 1.37 CWE-287
TI-2026-57699 CVE-2026-83599

Netdata: WebSocket Decompression Bomb

Priority MEDIUM 40

Netdata is an open source observability tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00742 Published 2026-09-22 Fixed in 2.11.0 CWE-409
TI-2025-43503 CVE-2025-71385 · GHSA-rwcv-c3fr-4hrw

Netdata < 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg Endpoint

Priority LOW 24

Netdata before 2.3.1 reflects the user-supplied love query parameter of the api/v2/ilove.svg and api/v3/ilove.svg endpoints verbatim into the generated SVG document (into a text element) without HTML or XML escaping, and…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0043 Published 2026-07-02 Fixed in 2.3.1 CWE-79
Open these records in search →