Skip to content
OpenAdvisories

Vendor

OneUptime

26 known vulnerabilities.

Products

oneuptime 26
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-27574 Public exploit

    OneUptime: node:vm sandbox escape in probe allows any project member to achieve RCE

    OneUptime is a solution for monitoring and managing online services. In versions 9.5.13 and below, custom JavaScript monitor feature uses Node.js's node:vm module (explicitly documented as not a security mechanism) to execute user-supplied code, allowing triv…

    OneUptime oneuptime @oneuptime/common npm