Oneuptime

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 24
    Known Exploited: 0
    11
    Critical Level Threats
    11
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-80350

    OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URL

    Last Modified: Aug 26, 2026
    Published: Aug 26, 2026

    CVE-2026-45102

    OneUptime: RCE due to Node.js' vm module escape via error objects and infinite recursion

    Last Modified: May 30, 2026
    Published: May 27, 2026

    CVE-2026-35053

    OneUptime: Unauthenticated Workflow Execution via ManualAPI

    Last Modified: Apr 14, 2026
    Published: Apr 02, 2026

    CVE-2026-34840

    OneUptime SSO: Multi-Assertion Identity Injection via Decoupled Signature Verification

    Last Modified: Apr 14, 2026
    Published: Apr 02, 2026

    CVE-2026-34759

    OneUptime: Unauthenticated notification API endpoints - financial abuse via phone number purchase, service disruption, and SMTP credential exposure

    Last Modified: Apr 14, 2026
    Published: Apr 02, 2026
    Items Per Page
    Oneuptime Vulnerabilities & Security CVEs | CVE-DB