Skip to content
Threat Feed
Subscribe

Tag

Oneuptime

2 briefs RSS
critical advisory

OneUptime Unauthenticated Endpoint Access Vulnerability (CVE-2026-34758)

OneUptime versions prior to 10.0.42 are vulnerable to unauthenticated access to Notification test and Phone Number management endpoints, leading to potential abuse of SMS, Call, Email, and WhatsApp functionalities, and unauthorized phone number purchases, fixed in version 10.0.42.

cve vulnerability oneuptime unauthenticated-access
2r 1t 1c
critical advisory

OneUptime Remote Command Execution via Playwright Script Abuse (CVE-2026-33396)

A low-privileged authenticated user can achieve remote command execution on the Probe container/host by abusing Synthetic Monitor Playwright script execution in OneUptime versions prior to 10.0.35.

OneUptime rce playwright cve-2026-33396 sandbox-escape execution linux
2r 1t