ON
Vendor
OneUptime
26
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112047 | ON oneuptime OneUptime | 5.4 | Oct 18 | OneUptime 14.0.2 before 14.0.69 Incorrect Authorization in Kubernetes AI Actions |
| CVE-2026-80350 | ON OneUptime OneUptime | 7.1 | Aug 26 | OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URL |
| CVE-2026-45102 | ON oneuptime OneUptime | 9.9 | May 27 | OneUptime: RCE due to Node.js' vm module escape via error objects and infinite recursion |
| CVE-2026-35053 | ON oneuptime OneUptime | 9.8 | Apr 2 | OneUptime: Unauthenticated Workflow Execution via ManualAPI |
| CVE-2026-34840 | ON oneuptime OneUptime | 8.1 | Apr 2 | OneUptime SSO: Multi-Assertion Identity Injection via Decoupled Signature Verification |
| CVE-2026-34759 | ON oneuptime OneUptime | 8.1 | Apr 2 | OneUptime: Unauthenticated notification API endpoints - financial abuse via phone number purchase, service disruption, and SMTP credential exposure |
| CVE-2026-34758 | ON oneuptime OneUptime | 9.1 | Apr 2 | OneUptime: Missing Authentication on Notification Endpoints |
| CVE-2026-33396 | ON oneuptime OneUptime | 9.9 | Mar 26 | OneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe |
| CVE-2026-33142 | ON oneuptime OneUptime | 8.1 | Mar 20 | OneUptime: ClickHouse SQL Injection via unvalidated column identifiers in sort, select, and groupBy parameters |
| CVE-2026-33143 | ON oneuptime OneUptime | 7.5 | Mar 20 | OneUptime: WhatsApp Webhook Missing Signature Verification |
| CVE-2026-32598 | ON oneuptime OneUptime | 6.5 | Mar 12 | OneUptime: Password Reset Token Logged at INFO Level |
| CVE-2026-32308 | ON oneuptime OneUptime | 7.6 | Mar 12 | OneUptime: Stored XSS via Mermaid Diagram Rendering (securityLevel: "loose") |
| CVE-2026-32306 | ON oneuptime OneUptime | 9.9 | Mar 12 | OneUptime ClickHouse SQL Injection via Aggregate Query Parameters |
| CVE-2026-30959 | ON oneuptime OneUptime | 5.0 | Mar 10 | OneUptime has WhatsApp Resend Verification Authorization Bypass |
| CVE-2026-30958 | ON oneuptime OneUptime | 8.6 | Mar 10 | OneUptime: Path Traversal — Arbitrary File Read (No Auth) |
| CVE-2026-30957 | ON oneuptime OneUptime | 9.9 | Mar 10 | OneUptime Synthetic Monitor RCE via exposed Playwright browser object |
| CVE-2026-30956 | ON oneuptime OneUptime | 9.9 | Mar 10 | OneUptime has authorization bypass via client‑controlled is-multi-tenant-query header |
| CVE-2026-30921 | ON oneuptime OneUptime | 9.9 | Mar 9 | OneUptime Synthetic Monitor RCE via exposed Playwright browser object |
| CVE-2026-30920 | ON oneuptime OneUptime | 8.6 | Mar 9 | OneUptime has broken access control in GitHub App installation flow that allows unauthorized project binding |
| CVE-2026-30887 | ON oneuptime OneUptime | 9.9 | Mar 9 | OneUptime Affected by Unsandboxed Code Execution in Probe Allows Any Project Member to Achieve RCE |
| CVE-2026-28787 | ON oneuptime OneUptime | 9.0 | Mar 6 | OneUptime has WebAuthn 2FA bypass: server accepts client-supplied challenge instead of server-stored value, allowing credential replay |
| CVE-2026-27728 | ON oneuptime OneUptime | 8.8 | Feb 25 | OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec() |
| CVE-2026-27574 | ON oneuptime OneUptime | 9.9 | Feb 21 | OneUptime: node:vm sandbox escape in probe allows any project member to achieve RCE |
| CVE-2025-66028 | ON oneuptime OneUptime | 8.2 | Nov 26 | OneUptime is Vulnerable to Privilege Escalation via Login Response Manipulation |
| CVE-2025-65966 | ON oneuptime OneUptime | 8.1 | Nov 26 | OneUptime Unauthorized User Creation via API |
| CVE-2024-29194 | ON oneuptime OneUptime | 8.3 | Mar 24 | OneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation |