Advisories · Technology

louislam uptime-kuma.

Every CVE that names louislam uptime-kuma among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119552 CVE record

CVSS 6.3 Medium

Uptime Kuma through 2.5.8 Race Condition Admin Creation via Setup Handler
- louislam uptime-kuma
- Race condition
Not analysed yet 30 Oct 2026
CVE-2026-71285 CVE record

CVSS 8.1 High

Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages
- louislam uptime-kuma
- Cross-site scripting (XSS)
Not analysed yet 5 Aug 2026
CVE-2026-33130 CVE record

CVSS 6.5 Medium

Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh)
- louislam uptime-kuma
- File inclusion
- Code injection
Not analysed yet 20 Mar 2026
CVE-2023-49805 CVE record

CVSS 6.0 Medium

Uptime Kuma Missing Origin Validation in WebSockets
- louislam uptime-kuma
- CWE-1385
Not analysed yet 11 Dec 2023
CVE-2023-25811 CVE record

CVSS 6.3 Medium

Persistent Cross site scripting (XSS) in Uptime Kuma
- louislam uptime-kuma
- Cross-site scripting (XSS)
Not analysed yet 21 Feb 2023
CVE-2023-25810 CVE record

CVSS 6.3 Medium

Persistent Cross site scripting (XSS) through description in status page in Uptime Kuma
- louislam uptime-kuma
- Cross-site scripting (XSS)
Not analysed yet 21 Feb 2023