CVE-2026-27728

OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in "NetworkPathMonitor.performTraceroute" allows any authenticated project user to execute arbitrary operating system commands on the Probe server by injecting shell...

CVE-2026-27728: Improper Neutralization of Special Elements used in an OS Command

OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in NetworkPathMonitor.performTraceroute allows any authenticated project user to execute arbitrary operating system commands on the Probe server by injecting shell...