Sploitus

Exploit for POC_CVE-2026-46716

kitploit · 2026-09-08

Exploit Code

MARKDOWN8 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-HAERIN-L-POC_CVE-2026-46716
# CVE-2026-46716 — Nezha Monitoring Cross-Tenant RCE via Cron API Authorization Bypass

A lab environment for reproducing and detecting **CVE-2026-46716** , a critical vulnerability in Nezha Monitoring where the `POST /api/v1/cron` endpoint lacks admin privilege checks, allowing RoleMember users to achieve cross-tenant remote code execution.

* * *

## Vulnerability Overview