Uptime.kuma

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 7
    Known Exploited: 0
    0
    Critical Level Threats
    0
    High Level Threats
    7
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-33130

    Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh)

    Last Modified: Mar 25, 2026
    Published: Mar 20, 2026

    CVE-2026-32230

    Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page

    Last Modified: Mar 20, 2026
    Published: Mar 12, 2026

    CVE-2025-26042

    Uptime Kuma >== 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack.

    Last Modified: Apr 15, 2026
    Published: Mar 17, 2025

    CVE-2023-49805

    Uptime Kuma Missing Origin Validation in WebSockets

    Last Modified: Nov 21, 2024
    Published: Dec 11, 2023

    CVE-2023-49804

    Uptime Kuma Password Change Vulnerability

    Last Modified: Nov 21, 2024
    Published: Dec 11, 2023
    Items Per Page