#SecretKeys
CVE-2026-59155 - Nezha Monitoring: DDNS and Notification credential exposure via unredacted list API
CVE ID : CVE-2026-59155

Published : July 10, 2026, 10:16 p.m. | 1 hour, 32 minutes ago

Description : Nezha Monitoring is a self-hostable, lightweight, servers and website...
CVE-2026-59155 - Nezha Monitoring: DDNS and Notification credential exposure via unredacted list API
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Prior to 2.2.5, the GET /api/v1/ddns and GET /api/v1/notification endpoints return full resource objects including plaintext third-party API credentials, including Cloudflare API tokens, TencentCloud SecretKeys, Slack, Discord, and Telegram webhook URLs with embedded bot tokens, and Authorization …
cvefeed.io
July 11, 2026 at 12:51 AM
It looked like just another door…
until she found the key and the courage to use it.
Every secret is waiting to be discovered by eyes curious enough to see...

#HiddenMagic #SecretKeys #AliceVibes #FairyTaleStyle #MysteryShot #art #photo
April 26, 2025 at 6:07 AM