netdata has 7 CVEs on record. Disclosure cadence is accelerating: 7 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 7. The median CVSS is 7.0 (high). None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.0
- Publish → KEV
- —
- Last 90 days
- 7 prev 0
Worst active — by depth score
CVE-2026-83600Medium· 6.5Netdata is an open source observability tool48CVE-2026-83603High· 8.4Netdata is an open source observability tool46CVE-2026-83598High· 7.8Netdata is an open source observability tool43CVE-2026-83599High· 7.5Netdata is an open source observability tool41CVE-2026-83597High· 7.0Netdata is an open source observability tool39
netdata vulnerabilities
CVEs affecting netdata, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2026-83597High· 7.0Netdata is an open source observability tool
Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as elevated interactive processes in the initiating user's desktop session. A low-pr…
CVE-2026-83603High· 8.4Netdata is an open source observability tool
Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller-controlled --socket_path from the low-privileged netdata…
CVE-2026-83601Medium· 6.5Netdata is an open source observability tool
Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized DIMENSION SLOT value that str2ull_encoded passes to pluginsd_rrddim_put_to_slot in src/plugins.d/pluginsd_internals.h witho…
CVE-2026-83600Medium· 6.5PoCNetdata is an open source observability tool
Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized CHART SLOT value that str2ull_encoded passes to pluginsd_rrdset_cache_put_to_slot in src/plugins.d/pluginsd_internals.h. Th…
CVE-2026-83598High· 7.8Netdata is an open source observability tool
Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powershell.exe runs as SYSTEM without -NoProfile and loads %USERPROFILE%\Documents\WindowsPowerShell\Microsoft.PowerShell…
CVE-2026-83602Medium· 6.5Netdata is an open source observability tool
Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/web_api_v3.c with HTTP_ACL_NOCHECK and HTTP_ACCESS_ANONYMOUS_DATA, causing unauthenticated PUT requests handled b…
CVE-2026-83599High· 7.5Netdata is an open source observability tool
Netdata is an open source observability tool. Prior to 2.11.0, Netdata's unauthenticated WebSocket server negotiates permessage-deflate before authentication, and src/web/websocket/websocket-compression.c allows websocket_client_decompre…