netdata

Products

Exploited and recent CVEs

• CVE-2026-83597 High 7.0 Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution 0.1%
• CVE-2026-83600 Medium 6.5 Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent 0.5%
• CVE-2026-83598 High 7.8 Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair 0.2%
• CVE-2026-83603 High 8.4 Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE 0.3%
• CVE-2026-83601 Medium 6.5 Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write 0.4%
• CVE-2026-83602 Medium 6.5 Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK 0.4%
• CVE-2026-83599 High 7.5 Netdata: WebSocket Decompression Bomb 0.7%
• CVE-2025-71385 Medium 6.1 Netdata < 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg Endpoint 0.4%
• CVE-2024-32019 High 8.8 ndsudo: local privilege escalation via untrusted search path 1.2%
• CVE-2023-22497 Medium 6.5 Netdata is vulnerable to improper authentication 0.7%
• CVE-2023-22496 High 8.1 Netdata vulnerable to command injection 36.2%