SSigNoz

Products

Exploited and recent CVEs

• CVE-2026-97056 Medium 6.8 SigNoz before 0.143.0 Insufficient Session Expiration Authentication Bypass 0.4%
• CVE-2026-97055 High 8.1 SigNoz before 0.143.0 Authentication Bypass via Empty JWT Secret 0.5%
• CVE-2026-93426 High 8.5 SigNoz 0.87.0 before 0.142.0 - SQL Injection in v5 Query Builder Field Key Names 0.5%
• CVE-2026-93292 High 8.5 SigNoz 0.88.0 before 0.142.1 - SQL Injection in Trace Funnel Analytics Query Builders 0.4%
• CVE-2026-92729 High 8.2 SigNoz 0.88.0 through 0.141.0 - Missing Authentication on Trace Funnel Analytics Endpoints 0.6%
• CVE-2026-63094 High 8.1 SigNoz < 0.134.0 SSO OAuth State Manipulation Session Token Theft 0.3%
• CVE-2026-57956 Medium 6.4 SigNoz < 0.133.0 - Cross-Organization Insecure Direct Object Reference in Alert Rules 0.4%
• CVE-2026-57955 High 8.5 SigNoz 0.130.1 - SQL Injection in Alert History Endpoints via Rule ID Parameter 0.3%