Vulnerabilities

TI-2026-25561 CVE-2026-33130

Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh)

MEDIUM 62

Uptime Kuma is an open source, self-hosted monitoring tool.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00354 Published 2026-03-20 Fixed in 2.2.1 CWE-1336

TI-2026-24760 CVE-2026-32230 · GHSA-c7hf-c5p5-5g6h

MEDIUM 63

Uptime Kuma is an open source, self-hosted monitoring tool.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00981 Published 2026-03-12 Fixed in 2.2.0 CWE-862

TI-2023-27212 CVE-2023-49805

LOW 38

Uptime Kuma is an easy-to-use self-hosted monitoring tool.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00376 Published 2023-12-11 Fixed in 1.23.9 CWE-1385

TI-2023-27211 CVE-2023-49804 · GHSA-88j4-pcx8-q4q3

HIGH 69

Uptime Kuma is an easy-to-use self-hosted monitoring tool.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00263 Published 2023-12-11 Fixed in 1.23.9 CWE-384

TI-2023-26912 CVE-2023-49276 · GHSA-v4v2-8h88-65qj

LOW 29

Uptime Kuma is an open source self-hosted monitoring tool.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00497 Published 2023-12-01 Fixed in 1.23.7 CWE-79

TI-2023-23906 CVE-2023-44400 · GHSA-g9v2-wqcj-j99g

HIGH 69

Uptime Kuma is a self-hosted monitoring tool.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00282 Published 2023-10-09 Fixed in 1.23.3 CWE-384