UP
Vendor
Uptime.kuma
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-33130 | UK Uptime Kuma Uptime.kuma | 6.5 | Mar 20 | Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh) |
| CVE-2026-32230 | UK Uptime Kuma Uptime.kuma | 5.3 | Mar 12 | Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page |
| CVE-2023-49805 | UK Uptime Kuma Uptime.kuma | 8.8 | Dec 11 | Uptime Kuma Missing Origin Validation in WebSockets |
| CVE-2023-49804 | UK Uptime Kuma Uptime.kuma | 7.8 | Dec 11 | Uptime Kuma Password Change Vulnerability |
| CVE-2023-49276 | UK Uptime Kuma Uptime.kuma | 6.1 | Dec 1 | Attribute Injection leading to XSS(Cross-Site-Scripting) in uptime-kuma |
| CVE-2023-44400 | UK Uptime Kuma Uptime.kuma | 7.8 | Oct 9 | Uptime Kuma has Persistentent User Sessions |
