CVE-2026-33142

OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.34, the fix for CVE-2026-32306 ClickHouse SQL injection via aggregate query parameters added column name validation to the aggregateBy method but did not apply the same validation to three other query...

CVE-2026-33142: Improper Neutralization of Special Elements used in an SQL Command

OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.34, the fix for CVE-2026-32306 ClickHouse SQL injection via aggregate query parameters added column name validation to the aggregateBy method but did not apply the same validation to three other query...

PT-2026-26198

Name of the Vulnerable Software and Affected Versions OneUptime versions prior to 10.0.34 Description OneUptime, a service monitoring solution, contains a SQL injection issue. Specifically, the toSortStatement, toSelectStatement, and toGroupByStatement methods within the StatementGenerator...