Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OneUptime is a solution for monitoring and managing online services. Prior to 10.0.20, OneUptime Synthetic Monitors allow low-privileged project users to submit custom Playwright code that is executed on the oneuptime-probe service. In the current implementation, this untrusted code is run inside Node's vm and is given live host Playwright objects such as browser and page. This creates a distinct server-side RCE primitive: the attacker does not need the classic this.constructor.constructor(...) sandbox escape. Instead, the attacker can directly use the injected Playwright browser object to reach browser.browserType().launch(...) and spawn an arbitrary executable on the probe host/container. This vulnerability is fixed in 10.0.20.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-09 | 1 | Disclosure1 |
| 2026-03-10 | 7 | Disclosure7 |
| 2026-03-12 | 1 | Disclosure1 |
| 2026-03-29 | 1 | Patch1 |
🚨 CVE-2026-30921 (CVSS: 9.9) 10.0.20以前のOneUptime Synthetic Monitorsで、低権限ユーザーによるPlaywrightコード送信が可能。不正コードがNode vm内で実行され、browserオブジェクトを介して任意実行可能（RCE）。10.0.20で修正。 https://maruomosquit.com/vulnerability/CVE-2026-30921/ #脆弱性 #セキュリティ
Post summary
CVE-2026-30921 enables remote code execution via Playwright code sent by low‑privileged users; the vulnerability is fixed in OneUptime 10.0.20.
🔴 https://dailycve.com/oneuptime-remote-code-execution-#cve-2026-30921-critical-2/ Nuxt, URI Scheme Bypass, CVE-2024-34344 (Critical)
Post summary
The tweet links to a DailyCVE article announcing a remote code execution vulnerability (CVE‑2026‑30921) and a URI scheme bypass in Nuxt (CVE‑2024‑34344), but it offers only the basic classification without detailed exploit or mitigation information.
[CVE-2026-30921: CRITICAL] Prior to version 10.0.20, OneUptime had a vulnerability allowing low-privileged users to execute untrusted Playwright code on the server-side, enabling remote code execution. Updat...#cve,CVE-2026-30921,#cybersecurity https://cvefind.com/CVE-2026-30921
Post summary
The post announces the CVE‑2026‑30921 vulnerability in OneUptime, noting that low‑privileged users can run untrusted Playwright code on the server, resulting in remote code execution.
CVE-2026-30921 OneUptime Synthetic Monitors Remote Code Execution via Playwright Browser Object https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30921
Post summary
The text announces a new CVE—CVE-2026-30921—reporting a remote code execution flaw in OneUptime Synthetic Monitors via a Playwright browser object, but provides no PoC, exploit code, or patch information.
🔴 CVE-2026-30921 - Critical OneUptime is a solution for monitoring and managing online services. Prior to 10.0.20, OneUptime Synthetic Monitors allow low-privileged project users to submit custom Playwright code tha... https://www.thehackerwire.com/vulnerability/CVE-2026-30921/ https://t.co/MJZm7vQi6w
Post summary
A new critical vulnerability (CVE‑2026‑30921) in OneUptime allows low‑privileged users to run arbitrary Playwright scripts via Synthetic Monitors, potentially leading to code execution. No active exploitation, patches, or PoC details are cited in the excerpt.
🚨*CVE* CVE-2026-30921 OneUptime is a solution for monitoring and managing online services. Prior to 10.0.20, OneUptime Synthetic Monitors allow low-privileged project users to submit custo… https://www.cve.org/CVERecord?id=CVE-2026-30921 ----- Traducción: CVE-2026-30921 One… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑30921, noting that before OneUptime 10.0.20, low‑privileged project users could submit custom code via Synthetic Monitors, but no PoC, exploit, patch, or active exploitation details are provided.
CVE-2026-30921 OneUptime is a solution for monitoring and managing online services. Prior to 10.0.20, OneUptime Synthetic Monitors allow low-privileged project users to submit custo… https://www.cve.org/CVERecord?id=CVE-2026-30921
Post summary
The CVE-2026-30921 record indicates that OneUptime's Synthetic Monitors allow low‑privileged users to submit custom content, suggesting a potential vulnerability. No proof‑of‑concept, exploit code, active exploitation, patch, or false‑positive claim is provided.
🔴 OneUptime, Remote Code Execution, #CVE-2026-30921 (Critical) https://dailycve.com/oneuptime-remote-code-execution-cve-2026-30921-critical/
Post summary
The text announces the discovery of a critical remote code execution vulnerability (CVE-2026-30921) in OneUptime, but provides no additional details or evidence of exploitation.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-30921 - OneUptime Synthetic Monitor RCE via exposed Playwright browser object Intel Report: https://ift.tt/dcjpNyP
Post summary
An advisory alerts to CVE-2026-30921—a remote code execution flaw in OneUptime Synthetic Monitor involving an exposed Playwright browser object. No proof of concept, exploit code, or patch details are provided.
🚨 CVE-2026-30921: OneUptime Synthetic Monitor RCE ... Playwright browser object injection bypasses Node.js vm sandbox entirely - no constructor escapes needed when you can s... https://zerodaysignal.com/vulnerability/CVE-2026-30921 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The text announces a new RCE vulnerability (CVE-2026-30921) in OneUptime Synthetic Monitor, describing the technical bypass technique but lacking PoC, exploit code, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hackerbay | oneuptime | - | - | - |