XPath Injection in Apache Software Foundation Hertzbeat
CVE-2026-24343
Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0. Users are recommended to upgrade to version 1.8.0, which fixes…
EPSS: 0.000 (7.7th percentile) — read the EPSS interpretation.
Affected products
- Apache Software Foundation Hertzbeat — versions 1.7.1
Weakness classification (CWE)
References
- lists.apache.org/thread/b2k3jqwffrbo2sy6bl4n0f68kp8bfo1n (vendor-advisory)