Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: louislam Clear all filters
TI-2026-83016 CVE-2026-119552 · GHSA-hpf4-7mjx-jmh4

Race condition in Uptime Kuma lets attackers create extra admins

Priority LOW 28

Uptime Kuma through 2.5.8 contains a race condition in the Socket.IO first-run setup handler that allows unauthenticated attackers to create an additional administrator account.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00234 Published 2026-10-30 No fix listed CWE-367
TI-2026-51249 CVE-2026-73040 · GHSA-r5ph-2fqc-qvf3

Path traversal in louislam dockge

Priority HIGH 73

Dockge validates a stack name only on the write path.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00936 Published 2026-08-20 No fix listed CWE-22
TI-2026-49952 CVE-2026-71285 · GHSA-pf4v-rpp4-fp6r

Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages

Priority LOW 37

Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo value as a bare, unquoted JavaScript expression inside a <script> block rendered on every public sta…

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.00382 Published 2026-08-05 No fix listed CWE-79