What’s Vulnerable › Products

Uptime.Kuma Uptime Kuma vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Uptime.Kuma Uptime Kuma version is affected

Latest Uptime.Kuma Uptime Kuma vulnerabilities

• CVE-2026-33130 — Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh) (CVSS 6.5)
• CVE-2026-32230 — Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page (CVSS 5.3)
• CVE-2023-49805 — Uptime Kuma Missing Origin Validation in WebSockets (CVSS 8.8)
• CVE-2023-49804 — Uptime Kuma Password Change Vulnerability (CVSS 7.8)
• CVE-2023-49276 — Attribute Injection leading to XSS(Cross-Site-Scripting) in uptime-kuma (CVSS 6.1)
• CVE-2023-44400 — Uptime Kuma has Persistentent User Sessions (CVSS 7.8)