VendorsUptime Kumauptime_kumaall versions
Vulnerabilities

Uptime Kuma Uptime Kuma

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2023-49805
Uptime Kuma Missing Origin Validation in WebSockets
Published 2023-12-11 · Modified
8.8EPSS 0.004
CVE-2023-44400
Uptime Kuma has Persistentent User Sessions
Published 2023-10-09 · Modified
7.8EPSS 0.003
CVE-2023-49804
Uptime Kuma Password Change Vulnerability
Published 2023-12-11 · Modified
7.8EPSS 0.003
CVE-2026-33130
Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh)
Published 2026-03-20 · Analyzed
6.5EPSS 0.005
CVE-2023-49276
Attribute Injection leading to XSS(Cross-Site-Scripting) in uptime-kuma
Published 2023-12-01 · Modified
6.3EPSS 0.005
CVE-2026-32230
Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page
Published 2026-03-12 · Analyzed
5.3EPSS 0.009