A vulnerability was found in nezhahq nezha up to 2.0.13 and classified as problematic. This affects an unknown part of the component GET Request Handler. Such manipulation leads to cross-site request forgery.
This vulnerability is traded as CVE-2026-49396. The attack may be launched remotely. There is no exploit available.
It is suggested to upgrade the affected component.
