<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: oneuptime</title><description>Every new CVE for oneuptime.</description><link>https://agentprime.io/</link><item><title>CVE-2026-112047: OneUptime 14.0.2 before 14.0.69 Incorrect Authorization in Kubernetes AI Actions</title><link>https://agentprime.io/advisories/CVE-2026-112047/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-112047/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 18 Oct 2026 12:19:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-80350: OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URL</title><link>https://agentprime.io/advisories/CVE-2026-80350/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-80350/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Aug 2026 10:09:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-45102: OneUptime: RCE due to Node.js&apos; vm module escape via error objects and infinite recursion</title><link>https://agentprime.io/advisories/CVE-2026-45102/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-45102/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 May 2026 18:50:19 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-35053: OneUptime: Unauthenticated Workflow Execution via ManualAPI</title><link>https://agentprime.io/advisories/CVE-2026-35053/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-35053/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Apr 2026 18:55:49 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-34840: OneUptime SSO: Multi-Assertion Identity Injection via Decoupled Signature Verification</title><link>https://agentprime.io/advisories/CVE-2026-34840/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34840/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Apr 2026 18:52:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34759: OneUptime: Unauthenticated notification API endpoints - financial abuse via phone number purchase, service disruption, and SMTP credential exposure</title><link>https://agentprime.io/advisories/CVE-2026-34759/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34759/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Apr 2026 18:50:55 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-34758: OneUptime: Missing Authentication on Notification Endpoints</title><link>https://agentprime.io/advisories/CVE-2026-34758/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34758/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Apr 2026 18:49:29 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-33396: OneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe</title><link>https://agentprime.io/advisories/CVE-2026-33396/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33396/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Mar 2026 13:40:12 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-30958: OneUptime: Path Traversal — Arbitrary File Read (No Auth)</title><link>https://agentprime.io/advisories/CVE-2026-30958/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-30958/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Mar 2026 17:01:43 GMT</pubDate><category>CVE</category></item></channel></rss>