{"vulnerability": "cve-2026-53519", "sightings": [{"uuid": "d5fa8759-e655-4eee-94f4-02a0908e9036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53519", "type": "seen", "source": "https://t.me/xhqcankao/30153", "content": "\u54ea\u5412\u63a2\u9488\u9ad8\u5371\u6f0f\u6d1e\u5f15\u53d1\u4e3b\u673a\u5708\u6050\u614c\n\n\u77e5\u540d\u5f00\u6e90\u670d\u52a1\u5668\u76d1\u63a7\u5de5\u5177 Nezha\uff08\u54ea\u5412\u63a2\u9488\uff09\u8fd1\u671f\u88ab\u62ab\u9732\u5b58\u5728\u9ad8\u5371\u7684\u672a\u6388\u6743\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\uff08CVE-2026-53519\uff0cCVSS\u8bc4\u5206\u9ad8\u8fbe 9.1\uff09\u3002\u8be5\u6f0f\u6d1e\u5f71\u54cd 2.0.13 \u4e4b\u524d\u7684\u7248\u672c\uff0c\u653b\u51fb\u8005\u65e0\u9700\u4efb\u4f55\u6743\u9650\uff0c\u5373\u53ef\u5b9e\u73b0\u5bf9\u7ba1\u7406\u5458\u9762\u677f\u7684\u5b8c\u5168\u63a5\u7ba1\u3002\n\n\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u540e\u7aef\u8def\u7531\u7684\u5339\u914d\u7f3a\u9677\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u8d8a\u6743\u8bfb\u53d6\u670d\u52a1\u5668\u5de5\u4f5c\u76ee\u5f55\u4e0b\u7684\u4efb\u610f\u6587\u4ef6\u3002\u80fd\u76f4\u63a5\u4e0b\u8f7d\u5305\u542b\u6838\u5fc3\u5bc6\u94a5\u7684 config.yaml \u6587\u4ef6\u53ca SQLite \u6570\u636e\u5e93\u3002\u5728\u83b7\u53d6 JWT \u5bc6\u94a5\u548c\u7ba1\u7406\u5458 ID \u540e\uff0c\u653b\u51fb\u8005\u53ef\u81ea\u884c\u4f2a\u9020\u5408\u6cd5\u7684\u7ba1\u7406\u5458 Session \u5e76\u65e0\u611f\u767b\u5165\u540e\u53f0\uff0c\u83b7\u5f97\u5bf9\u6240\u6709\u670d\u52a1\u5668\u3001\u7528\u6237\u53ca\u5b9a\u65f6\u4efb\u52a1\u7684\u6700\u9ad8\u8bfb\u5199\u6743\u9650\u3002\u5b98\u65b9\u5df2\u7d27\u6025\u53d1\u5e03 2.0.13 \u7248\u672c\u4fee\u590d\u6b64\u95ee\u9898\u3002\n\n\u7531\u4e8e\u54ea\u5412\u63a2\u9488\u5728\u4e2d\u6587\u4e3b\u673a\u5708\u4e2d\u88c5\u673a\u91cf\u5f88\u5927\uff0c\u56e0\u6b64\u5f71\u54cd\u8303\u56f4\u6781\u5927\uff0cDMIT\u7b49\u4e3b\u673a\u8fd0\u8425\u5546\u5df2\u53d1\u5e03\u8b66\u544a\uff0c\u5efa\u8bae\u7528\u6237\u7acb\u5373\u91c7\u53d6\u63aa\u65bd\u3002", "creation_timestamp": "2026-08-29T20:00:25.906310Z"}, {"uuid": "d7315d11-aa87-41c0-94d6-76546d8e6341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53519", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116739855858486390", "content": "\ud83d\udee1\ufe0f CVE-2026-53519: CRITICAL path traversal in Nezha Monitoring (<2.0.13). Unauthenticated attackers can read arbitrary files via crafted URLs. Patch to 2.0.13+ ASAP! https://radar.offseq.com/threat/cve-2026-53519-cwe-22-improper-limitation-of-a-pat-3dc4f02c #OffSeq #CVE202653519 #infosec #vuln", "creation_timestamp": "2026-06-13T00:00:43.222613Z"}, {"uuid": "e8382400-be50-4bd1-899e-03fbe2ed7bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53519", "type": "published-proof-of-concept", "source": "https://github.com/nezhahq/nezha/security/advisories/GHSA-5c25-7vpj-9mqh", "content": "", "creation_timestamp": "2026-06-27T00:35:24.688398Z"}, {"uuid": "b4f62798-2541-4002-b89d-43ceede49158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53519", "type": "seen", "source": "https://t.me/GithubRedTeam/89007", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53519-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tar-xz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-15 19:47:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploit for CVE-2026-53519.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:42.354413Z"}, {"uuid": "cb4559d2-4380-41e7-9a89-70afe5767982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53519", "type": "seen", "source": "https://t.me/GithubRedTeam/89007", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53519-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tar-xz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-15 19:47:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploit for CVE-2026-53519.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:41.484080Z"}, {"uuid": "cc07d667-195f-4536-b703-c02fe172e778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53519", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89007", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53519-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tar-xz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-15 19:47:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploit for CVE-2026-53519.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:07.463654Z"}, {"uuid": "56c6e45f-03e8-4e4e-b944-6ea21831ebff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53519", "type": "seen", "source": "https://t.me/xhqcankao/30153", "content": "\u54ea\u5412\u63a2\u9488\u9ad8\u5371\u6f0f\u6d1e\u5f15\u53d1\u4e3b\u673a\u5708\u6050\u614c\n\n\u77e5\u540d\u5f00\u6e90\u670d\u52a1\u5668\u76d1\u63a7\u5de5\u5177 Nezha\uff08\u54ea\u5412\u63a2\u9488\uff09\u8fd1\u671f\u88ab\u62ab\u9732\u5b58\u5728\u9ad8\u5371\u7684\u672a\u6388\u6743\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\uff08CVE-2026-53519\uff0cCVSS\u8bc4\u5206\u9ad8\u8fbe 9.1\uff09\u3002\u8be5\u6f0f\u6d1e\u5f71\u54cd 2.0.13 \u4e4b\u524d\u7684\u7248\u672c\uff0c\u653b\u51fb\u8005\u65e0\u9700\u4efb\u4f55\u6743\u9650\uff0c\u5373\u53ef\u5b9e\u73b0\u5bf9\u7ba1\u7406\u5458\u9762\u677f\u7684\u5b8c\u5168\u63a5\u7ba1\u3002\n\n\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u540e\u7aef\u8def\u7531\u7684\u5339\u914d\u7f3a\u9677\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u8d8a\u6743\u8bfb\u53d6\u670d\u52a1\u5668\u5de5\u4f5c\u76ee\u5f55\u4e0b\u7684\u4efb\u610f\u6587\u4ef6\u3002\u80fd\u76f4\u63a5\u4e0b\u8f7d\u5305\u542b\u6838\u5fc3\u5bc6\u94a5\u7684 config.yaml \u6587\u4ef6\u53ca SQLite \u6570\u636e\u5e93\u3002\u5728\u83b7\u53d6 JWT \u5bc6\u94a5\u548c\u7ba1\u7406\u5458 ID \u540e\uff0c\u653b\u51fb\u8005\u53ef\u81ea\u884c\u4f2a\u9020\u5408\u6cd5\u7684\u7ba1\u7406\u5458 Session \u5e76\u65e0\u611f\u767b\u5165\u540e\u53f0\uff0c\u83b7\u5f97\u5bf9\u6240\u6709\u670d\u52a1\u5668\u3001\u7528\u6237\u53ca\u5b9a\u65f6\u4efb\u52a1\u7684\u6700\u9ad8\u8bfb\u5199\u6743\u9650\u3002\u5b98\u65b9\u5df2\u7d27\u6025\u53d1\u5e03 2.0.13 \u7248\u672c\u4fee\u590d\u6b64\u95ee\u9898\u3002\n\n\u7531\u4e8e\u54ea\u5412\u63a2\u9488\u5728\u4e2d\u6587\u4e3b\u673a\u5708\u4e2d\u88c5\u673a\u91cf\u5f88\u5927\uff0c\u56e0\u6b64\u5f71\u54cd\u8303\u56f4\u6781\u5927\uff0cDMIT\u7b49\u4e3b\u673a\u8fd0\u8425\u5546\u5df2\u53d1\u5e03\u8b66\u544a\uff0c\u5efa\u8bae\u7528\u6237\u7acb\u5373\u91c7\u53d6\u63aa\u65bd\u3002", "creation_timestamp": "2026-08-30T00:00:50.210169Z"}, {"uuid": "dc209ce7-4fd1-4cef-b464-cc740fcc0adf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53519", "type": "seen", "source": "https://t.me/xhqcankao/30153", "content": "\u54ea\u5412\u63a2\u9488\u9ad8\u5371\u6f0f\u6d1e\u5f15\u53d1\u4e3b\u673a\u5708\u6050\u614c\n\n\u77e5\u540d\u5f00\u6e90\u670d\u52a1\u5668\u76d1\u63a7\u5de5\u5177 Nezha\uff08\u54ea\u5412\u63a2\u9488\uff09\u8fd1\u671f\u88ab\u62ab\u9732\u5b58\u5728\u9ad8\u5371\u7684\u672a\u6388\u6743\u76ee\u5f55\u904d\u5386\u6f0f\u6d1e\uff08CVE-2026-53519\uff0cCVSS\u8bc4\u5206\u9ad8\u8fbe 9.1\uff09\u3002\u8be5\u6f0f\u6d1e\u5f71\u54cd 2.0.13 \u4e4b\u524d\u7684\u7248\u672c\uff0c\u653b\u51fb\u8005\u65e0\u9700\u4efb\u4f55\u6743\u9650\uff0c\u5373\u53ef\u5b9e\u73b0\u5bf9\u7ba1\u7406\u5458\u9762\u677f\u7684\u5b8c\u5168\u63a5\u7ba1\u3002\n\n\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u540e\u7aef\u8def\u7531\u7684\u5339\u914d\u7f3a\u9677\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u8d8a\u6743\u8bfb\u53d6\u670d\u52a1\u5668\u5de5\u4f5c\u76ee\u5f55\u4e0b\u7684\u4efb\u610f\u6587\u4ef6\u3002\u80fd\u76f4\u63a5\u4e0b\u8f7d\u5305\u542b\u6838\u5fc3\u5bc6\u94a5\u7684 config.yaml \u6587\u4ef6\u53ca SQLite \u6570\u636e\u5e93\u3002\u5728\u83b7\u53d6 JWT \u5bc6\u94a5\u548c\u7ba1\u7406\u5458 ID \u540e\uff0c\u653b\u51fb\u8005\u53ef\u81ea\u884c\u4f2a\u9020\u5408\u6cd5\u7684\u7ba1\u7406\u5458 Session \u5e76\u65e0\u611f\u767b\u5165\u540e\u53f0\uff0c\u83b7\u5f97\u5bf9\u6240\u6709\u670d\u52a1\u5668\u3001\u7528\u6237\u53ca\u5b9a\u65f6\u4efb\u52a1\u7684\u6700\u9ad8\u8bfb\u5199\u6743\u9650\u3002\u5b98\u65b9\u5df2\u7d27\u6025\u53d1\u5e03 2.0.13 \u7248\u672c\u4fee\u590d\u6b64\u95ee\u9898\u3002\n\n\u7531\u4e8e\u54ea\u5412\u63a2\u9488\u5728\u4e2d\u6587\u4e3b\u673a\u5708\u4e2d\u88c5\u673a\u91cf\u5f88\u5927\uff0c\u56e0\u6b64\u5f71\u54cd\u8303\u56f4\u6781\u5927\uff0cDMIT\u7b49\u4e3b\u673a\u8fd0\u8425\u5546\u5df2\u53d1\u5e03\u8b66\u544a\uff0c\u5efa\u8bae\u7528\u6237\u7acb\u5373\u91c7\u53d6\u63aa\u65bd\u3002", "creation_timestamp": "2026-08-31T00:00:09.107717Z"}]}