Nacos Vulnerabilities
61 vulnerabilities related to Nacos
- 2026-07-24Nacos /nacos/actuator 未授权访问漏洞
- 2025-09-05Nacos /nacos/v1/cs/configs 信息泄露漏洞
- 2025-09-05Nacos /nacos/v1/auth/users/login 默认口令漏洞
- 2025-09-05Nacos /nacos/v1/cs/configs 信息泄露漏洞
- 2025-09-05Nacos /nacos/v1/auth/users/login 默认口令漏洞
- 2025-09-01nacos-derby-rce: Nacos Derby 远程代码执行 RCE
- 2025-09-01nacos-unauthorized-config-download: Nacos 未授权下载配置信息
- 2025-09-01nacos-sync-login-bypass: Nacos-Sync 未授权进后台
- 2025-08-22Nacos /nacos/v1/auth/users 权限绕过漏洞（CVE-2021-43116）
- 2025-08-22Nacos /nacos/v1/auth/users 权限绕过漏洞（CVE-2021-43116）
- PoC2025-08-01CVE-2021-29441: Nacos <1.4.1 - Authentication Bypass
- PoC2025-08-01CVE-2021-29442: Nacos <1.4.1 - Authentication Bypass
- PoC2025-08-01nacos-create-user-unauthorized: Nacos Unauthorized Create User
- PoC2025-08-01nacos-authentication-bypass: Nacos < 2.2.0 - Authentication Bypass
- PoC2025-08-01nacos-config-server-sql-inject: Naocos Config Server SQL injection
- PoC2025-08-01nacos-core-auth-enabled-bypass: Nacos core.auth.enabled 权限绕过
- PoC2025-08-01nacos-default-password: Nacos Default Password
- PoC2025-08-01nacos-jraftserver-deserialization-rce: Nacos Jraft 远程代码执行 RCE
- PoC2025-08-01nacos-secret-default-key-unauth: Alibaba Nacos secret.key默认密钥 未授权访问漏洞
- PoC2025-08-01nacos-severidentity-bypass: Alibaba Nacos ServerIdentity 权限绕过
- PoC2025-08-01nacos-token-create-user: Nacos 默认密钥创建用户
- PoC2025-08-01nacos-default-login: Alibaba Nacos - Default Login
- PoC2025-08-01nacos-authentication-bypass: Nacos < 2.2.0 - Authentication Bypass
- PoC2025-08-01nacos-create-user: Alibaba Nacos - Unauthorized Account Creation
- PoC2025-08-01nacos-auth-bypass: Nacos 1.x - Authentication Bypass
- 2025-07-22Nacos Derby远程命令执行漏洞
- 2024-10-18Nacos /v1/cs/configs 信息泄露漏洞
- 2024-10-18Nacos /v1/cs/configs 信息泄露漏洞
- 2024-09-27Alibaba Nacos /users 权限绕过漏洞
- 2024-09-27Alibaba Nacos /users 权限绕过漏洞
- 2024-09-24Nacos未授权下载配置信息漏洞
- 2024-08-30Nacos Jraft 服务文件读取漏洞
- 2024-08-30Nacos Jraft 服务文件读取漏洞
- 2024-08-26Nacos Jraft 任意文件读写漏洞
- 2024-08-21Alibaba Nacos Jraft 未授权 任意文件写入漏洞
- 2024-07-18Alibaba Nacos removal 远程代码执行漏洞（下载恶意jar文件）
- 2024-07-18Alibaba Nacos removal 远程代码执行漏洞
- 2024-07-16NACOS /nacos/v1/cs/ops/data/removal 代码执行漏洞
- 2024-07-16NACOS /nacos/v1/cs/ops/data/removal 代码执行漏洞
- 2024-07-15Nacos /v1/cs/ops/data/removal 远程代码执行漏洞
- PoC2024-06-05Nacos未授权下载配置信息
- 2024-04-23Nacos Jraft Hessian反序列漏洞
- 2024-04-09Nacos 前台 RCE
- 2024-01-08Nacos-Sync未授权漏洞
- 2023-10-19Nacos jwt 权限绕过漏洞
- 2023-10-19Nacos jwt 权限绕过漏洞
- 2023-10-12Alibaba Nacos 存在未授权访问漏洞
- 2023-09-06Alibaba Nacos 存在未授权SQL语句执行
- 2023-08-17Nacos Nacos-Server 权限绕过漏洞（CVE-2021-29441）
- 2023-08-17Nacos Nacos-Server 权限绕过漏洞（CVE-2021-29441）
- 2023-08-13Alibaba NacosSync /serviceSync 路径未授权访问漏洞
- 2023-06-05Alibaba Nacos Jraft 反序列化漏洞
- 2023-05-17Alibaba Nacos serverIdentity 存在鉴权绕过
- 2023-05-17Alibaba Nacos 弱口令漏洞
- 2023-04-28Alibaba Nacos 登录口存在弱口令漏洞
- 2023-03-14Alibaba Nacos 默认密钥身份伪造漏洞
- 2021-12-29Alibaba Nacos 任意用户创建
- 2021-08-18Alibaba Nacos derby 未授权访问(CVE-2021-29442)
- 2021-08-18Alibaba Nacos /v1/cs/configs 未授权访问
- 2021-04-28Alibaba Nacos User-Agent 存在鉴权绕过
- 2021-01-22Alibaba Nacos 未授权访问漏洞