Is CVE-2026-111387 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111387?

CVE-2026-111387 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-111387

Description

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read cleartext tokens embedded in every user's DDNS webhook profiles.