netdata vulnerabilities
11 published CVEs name netdata among the affected products.
- 11Published CVEs11 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-83597
Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution
netdata · netdata
High7.0 - CVE-2026-83600
Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent
netdata · netdata
Medium6.5 - CVE-2026-83598
Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair
netdata · netdata
High7.8 - CVE-2026-83603
Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE
netdata · netdata
High8.4 - CVE-2026-83601
Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write
netdata · netdata
Medium6.5 - CVE-2026-83602
Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK
netdata · netdata
Medium6.5 - CVE-2026-83599
Netdata: WebSocket Decompression Bomb
netdata · netdata
High7.5 - CVE-2025-71385
Netdata < 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg Endpoint
netdata · netdata
Medium5.1 - CVE-2024-32019
ndsudo: local privilege escalation via untrusted search path
netdata · netdata
High8.8 - CVE-2023-22497
Netdata is vulnerable to improper authentication
netdata · netdata
Medium6.5