CVE-2026-34758

Name of the Vulnerable Software and Affected Versions OneUptime versions prior to 10.0.42

Description OneUptime, an open-source monitoring and observability platform, had an issue where unauthenticated access to Notification test and Phone Number management endpoints allowed for abuse, including SMS, call, email, and WhatsApp spamming, as well as unauthorized phone number purchases. Attackers could potentially drain budgets and flood targets with unwanted messages.

Recommendations Update to version 10.0.42 or later.