CVE-2018-18836: My-Netdata Netdata

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

Affected products

Published 2019-06-18. Last modified 2026-06-17.