Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Netdata

First CVE: Mar 15, 2019Active for: 7 yearsTotal CVEs: 4

Netdata is a single-product open-source monitoring and observability platform that offers agent-based real-time metrics collection and visualization across distributed systems. Its vulnerability profile centers on the core Netdata agent and recurs through web-tier and access-control weakness classes, including exposure of resources to unintended spheres, improper authentication, input validation flaws, cross-site scripting, and command injection—patterns typical of a network-facing daemon with authentication and API components. Current severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
4
Total CVEs
More Total CVEs than 79% of tracked vendors
1.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 75% of tracked vendors
7.8
Avg CVSS Score
Higher Avg CVSS Score than 74% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Netdata over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 15, 2019
7 years ago
Most Recent CVE
Jul 2, 2026
24 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (4 CVEs).

4 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-22496CRITICAL
Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary
Jan 14, 20239.849NONO
CVE-2025-71385MEDIUM
Netdata before 2.3.1 reflects the user-supplied love query parameter of the api/v2/ilove.svg and api/v3/ilove.svg endpoints verbatim into the generated SVG document (into a text el
Jul 2, 20266.128NONO
CVE-2023-22497CRITICAL
Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when t
Jan 14, 20239.128NONO
CVE-2019-9834MEDIUM
The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation wi
Mar 15, 20196.126NOYES
View all 4 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products4 CVEs
50%
50%
Severity distribution among all CVEs352,719 CVEs
45%
40%
11%
MediumCritical
Attack Vector
Local0 (0.0%)
Network4 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (50.0%)
Unknown0 (0.0%)
Required2 (50.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None4 (100.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (4 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
25.0% of CVEs· 78th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Netdata.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Netdata — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Netdata's Products

View all 3 CNAs →

Top CWEs