XPath Injection in Apache Software Foundation Hertzbeat

CVE-2026-24343

Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0. Users are recommended to upgrade to version 1.8.0, which fixes…

EPSS: 0.000 (7.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References