Skip to content
OpenAdvisories

Vendor

SigNoz

8 known vulnerabilities.

Products

signoz 8
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-97056

    SigNoz before 0.143.0 Insufficient Session Expiration Authentication Bypass

    SigNoz versions from v0.98.0 up to (but not including) v0.143.0, when configured to use the opaque session tokenizer (which was not the default before v0.143.0), do not revoke a user's existing login sessions when the user's password is reset with a reset tok…

    SigNoz signoz
  • Medium 6.4
    CVE-2026-57956

    SigNoz < 0.133.0 - Cross-Organization Insecure Direct Object Reference in Alert Rules

    SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers ca…

    SigNoz signoz