Vulnerabilities

TI-2026-57697 CVE-2026-83597

Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution

LOW 32

Netdata is an open source observability tool.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00139 Published 2026-09-22 Fixed in 2.10.4 CWE-269

TI-2026-57700 CVE-2026-83600

Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent

MEDIUM 62

Netdata is an open source observability tool.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00548 Published 2026-09-22 Fixed in 2.10.4 CWE-193

TI-2026-57698 CVE-2026-83598

Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair

LOW 35

Netdata is an open source observability tool.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00156 Published 2026-09-22 Fixed in 2.10.4 CWE-269

TI-2026-57703 CVE-2026-83603

Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE

LOW 38

Netdata is an open source observability tool.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.0032 Published 2026-09-22 Fixed in 2.10.4 CWE-502

TI-2026-57701 CVE-2026-83601

Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write

MEDIUM 62

Netdata is an open source observability tool.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00371 Published 2026-09-22 Fixed in 2.10.4 CWE-190

TI-2026-57702 CVE-2026-83602

Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK

HIGH 68

Netdata is an open source observability tool.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00357 Published 2026-09-22 Fixed in 2.11.0 CWE-284

TI-2026-57699 CVE-2026-83599

Netdata: WebSocket Decompression Bomb

MEDIUM 40

Netdata is an open source observability tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00742 Published 2026-09-22 Fixed in 2.11.0 CWE-409

TI-2025-43503 CVE-2025-71385 · GHSA-rwcv-c3fr-4hrw

Netdata < 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg Endpoint

LOW 24

Netdata before 2.3.1 reflects the user-supplied love query parameter of the api/v2/ilove.svg and api/v3/ilove.svg endpoints verbatim into the generated SVG document (into a text element) without HTML or XML escaping, and…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0043 Published 2026-07-02 Fixed in 2.3.1 CWE-79

TI-2024-21114 CVE-2024-32019

ndsudo: local privilege escalation via untrusted search path

HIGH 73

Netdata is an open source observability tool.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01165 Published 2024-04-12 Fixed in 1.45.3, 1.45.0-169 CWE-426

TI-2023-08745 CVE-2023-22497

Netdata is vulnerable to improper authentication

HIGH 72

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00699 Published 2023-01-14 Fixed in 1.36.0-409, 1.37 CWE-287

TI-2023-08744 CVE-2023-22496

Netdata vulnerable to command injection

HIGH 76

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.36171 Published 2023-01-14 Fixed in 1.36.0-409, 1.37 CWE-20

TI-2019-07217 CVE-2019-9834 · GHSA-25rc-9mcg-m884

The Netdata web application through 1.13.0 allows remote attackers to inject their own…

LOW 36

The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.06156 Published 2019-03-15 No fix listed CWE-79

Vulnerabilities

Filters