CVE-2026-27728

Publication date

2026-02-25 16:25:09

Family

GitHub_M

State

PUBLISHED

Description

OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in `NetworkPathMonitor.performTraceroute()` allows any authenticated project user to execute arbitrary operating system commands on the Probe server by injecting shell metacharacters into a monitors destination field. Version 10.0.7 fixes the vulnerability.