Cyberpress OneUptime Command Injection Vulnerability Allows Full Server Takeover
Article Content
Browse articles 
A critical command injection vulnerability, tracked as CVE-2026-27728, has been identified in OneUptime, affecting versions prior to 10.0.7. This flaw enables authenticated users to execute arbitrary operating system commands on the Probe server, risking complete system compromise for organizations using the affected versions. Immediate patching is advised to mitigate this risk.
Ask AI about this cluster
Answers cite the sources they use
Updated 210d ago How this analysis works
Timeline
2026-02-25
CVE-2026-27728 published
2026-03-02
Cyberpress article published
2026-03-02
Gbhackers article published
More articles in this cluster (2)
Following this threat?
Track OneUptime and CVE-2026-27728 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active… 
Critical Citrix NetScaler Vulnerabilities Actively Exploited in Finland The National Cyber Security Centre Finland (NCSC-FI) issued an alert regarding critical vulnerabilities in Citrix NetScaler ADC and Gateway products, specifically CVE-2026-88771 and CVE-2026-88772, which are being actively exploited in Finland. These vulnerabilities allow attackers to execute remote code without…