Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-34758

OneUptime: Missing Authentication on Notification Endpoints

Description

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OneUptime oneuptime

  • < 10.0.42affected

References