tag
Config-Disclosure
Not disclosed (unauthenticated path traversal leading to full admin JWT forgery)
Nezha Dashboard Path Traversal → JWT Secret Leak → Token Forgery — CVE-2026-53519
CVE-2026-53519 (GHSA-5c25-7vpj-9mqh)·
Nezha Dashboard (monitoring/agent management panel)
unpatched
Critical
HPE Aruba AOS-CX Pre-Auth REST API Bypass via nginx Version Smuggling (CVE-2026-23813)
CVE-2026-23813·
HPE Aruba Networking AOS-CX
patched