CVE-2026-24343 | Apache Hertzbeat up to 1.7.x XPath Expression resource consumption

A vulnerability, which was classified as problematic, has been found in Apache Hertzbeat up to 1.7.x. Affected is an unknown function of the component XPath Expression Handler. Performing a manipulation results in resource consumption.

This vulnerability was named CVE-2026-24343. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.