Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/04/03 11:02 p.m.•21 views

CVE-2026-34758

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42...

9.1CVSS5.7AI score0.00495EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/04/02 6:49 p.m.•11 views

CVE-2026-34758 OneUptime: Missing Authentication on Notification Endpoints

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42...

9.1CVSS5.7AI score0.00495EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/04/02 6:49 p.m.•20 views

EUVD-2026-18511

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42...

9.1CVSS5.7AI score0.00495EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/04/02 6:49 p.m.•8 views

CVE-2026-34758

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42...

9.1CVSS5.7AI score0.00495EPSS
SaveExploits1References4Affected Software1
osv_cve
osv_cve
•added 2026/04/02 6:49 p.m.•21 views

CVE-2026-34758 OneUptime: Missing Authentication on Notification Endpoints

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42...

9.1CVSS5.9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/02 12:00 a.m.•7 views

CVE-2026-34758: Missing Authentication for Critical Function

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42...

9.1CVSS5.7AI score0.00495EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•29 views

PT-2026-29875

Name of the Vulnerable Software and Affected Versions OneUptime versions prior to 10.0.42 Description OneUptime, an open-source monitoring and observability platform, had an issue where unauthenticated access to Notification test and Phone Number management endpoints allowed for abuse, including...

9.1CVSS5.7AI score0.00495EPSS
SaveExploits1References11
Rows per page
Query Builder