Exploit for CVE-2026-53519

kitploit · 2026-09-10

Description

Pre-auth path traversal in Nezha Dashboard via /dashboard.. prefix leaks JWT secret for admin.

All known vulnerabilities by product

Nezha Monitoring

CVSS 9.1 for CVE-2026-53519

9.1

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:NONE

CVE Information

CVE-2026-53519

Exploit Details

Modified:2026-09-10 15:32

Last Seen:2026-09-10 21:45

Reporter:KitPloit

Other exploits for CVE-2026-53519

Exploit for CVE-2026-53519

2026-09-10 ivanesk315GITHUB

CVE-2026-53519-PoC

2026-09-07 KitPloitKITPLOIT

Exploit for CVE-2026-53519

2026-06-15 tar-xzGITHUB

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-IVANESK315-CVE-2026-53519
# Lab CVE-2026-53519 - Nezha Dashboard pre-auth path traversal

Lab tai hien lo hong **pre-auth path traversal via`/dashboard..` prefix confusion** trong Nezha Dashboard, dan toi leak `jwt_secret_key` -> forge JWT -> chiem quyen admin. Moi truong Docker, tach A/B theo version de so sanh **vuln vs patched**.

Exploit Code

Share

Share on social media: