Skip to main content
ExploitPublished

Apache HertzBeat 1.8.0 · Remote Code Execution

Source Exploit-DB RSS Feed

0
Severity
Critical

Rated by Threat Radar

Data as of 20 May 2026, 19:19 UTC

What to do

AI-suggested

Until an official fix is available, consider restricting network access to the affected service and monitoring for suspicious activity related to this vulnerability.

Description

Apache HertzBeat 1.8.0 - Remote Code Execution

Indicators of compromise

Exploit source code

Exploit code for Apache HertzBeat 1.8.0 - Remote Code Execution12,220 characters
# Exploit Title: Apache HertzBeat 1.8.0 - Remote Code Execution 
# Google Dork: N/A
# Date: 2026-03-09
# Exploit Author: Brett Gervasoni
# Vendor Homepage: https://hertzbeat.apache.org/
# Software Link: https://github.com/apache/hertzbeat/releases
# Version: 1.8.0
# Tested on: Linux (Docker; official HertzBeat image, uid=0 in container)
# CVE: N/A

================================================================================
METADATA
===========================================================…

References

Community reviews

Loading reviews…