OneUptime is a solution for monitoring and managing online services.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Feb 25, 2026 · NIST NVD

   Detected

   OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in allows any authenticated project user to execute arbitrary operating system commands on the Probe server by injecting shell metacharacters into a monitor's destination field. Version 10.0.7 fixes the vulnerability.

2. Jun 17, 2026 · NIST NVD

   Updated

   OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in allows any authenticated project user to execute arbitrary operating system commands on the Probe server by injecting shell metacharacters into a monitor's destination field. Version 10.0.7 fixes the vulnerability.

Affected

• cpe hackerbay/oneuptimeversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-27728

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-27728

  OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in allows any authenticated project user to execute arbitrary operating system commands on the Probe server

  nvd.nist.gov

References

• Patch · github.com
• Exploit · github.com