Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/Call/Email/WhatsApp abuse and phone number purchase. This issue has been patched in version 10.0.42.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-02 | 1 | Patch1 |
| 2026-04-03 | 3 | Disclosure3 |
CVE-2026-34758 OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management e… https://www.cve.org/CVERecord?id=CVE-2026-34758
Post summary
The post announces CVE‑2026‑34758, noting unauthenticated access in OneUptime before v10.0.42, but provides no PoC, exploit, patch, or evidence of active exploitation.
🚨 CVE-2026-34758: OneUptime: Missing Authenticatio... Unauthenticated SMS/call/email spam cannon with phone number purchasing - attackers can drain budgets and flood targets... https://zerodaysignal.com/vulnerability/CVE-2026-34758 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces CVE-2026-34758, describing an unauthenticated spam cannon that can drain budgets by purchasing phone numbers, but it offers no PoC, exploit code, patch information, or evidence of active exploitation.
🔴 CVE-2026-34758 - Critical OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Number management endpoints allows SMS/C... https://www.thehackerwire.com/vulnerability/CVE-2026-34758/ https://t.co/IfmGo3k8DH
Post summary
The post announces the critical CVE‑2026‑34758 in OneUptime, noting unauthenticated access to specific endpoints, but offers no proof‑of‑concept, exploit code, active usage, or patch details.
[CVE-2026-34758: CRITICAL] Cyber security alert: OneUptime platform had a vulnerability allowing unauthorized access to features. Make sure you update to version 10.0.42 to patch the issue.#cve,CVE-2026-34758,#cybersecurity https://cvefind.com/CVE-2026-34758
Post summary
The alert highlights CVE-2026-34758, a critical vulnerability in OneUptime that allows unauthorized feature access, and advises updating to version 10.0.42 to remediate the issue.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hackerbay | oneuptime | - | - | - |