Is CVE-2026-105113 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-105113?

CVE-2026-105113 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-105113

Description

Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock leaks on a nil-map panic path. Any authenticated non-admin member can issue four notification API calls to permanently deadlock the alerting subsystem, then exhaust memory with blocking requests.