CVE-2024-42323: Apache Hertzbeat

High severity, CVSS 8.8. EPSS: 8.3% chance of exploitation in the next 30 days.

SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating).  This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.0. Users are recommended to upgrade to version 1.6.0, which fixes the issue.

Affected products

• Apache Hertzbeat: before 1.6.0 (fixed in 1.6.0)

Published 2024-09-21. Last modified 2026-06-17.