CVE-2026-24343
High · 8.8CVSS
8.8
EPSS
0.8%
Published
Feb 10, 2026
CISA due date
—
The record
Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-44962 Plesk contains an XPath injection vulnerability in the APS Application Catalog search… CWE-643
- CVE-2026-40699 A vulnerability exists in the undisclosed pages in the Configuration utility that may… CWE-643
- GHSA-r7vr-wg3f-8hr9 Concrete5 CMS contains an XPath injection vulnerability CWE-643
- CVE-2022-50807 Concrete5 CMS contains an XPath injection vulnerability CWE-643