CVE-2026-27728

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

March 2, 2026

Last Seen

March 2, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

OneUptime Command Injection Vulnerability Allows Full Server Takeover43.2

A critical command injection vulnerability, tracked as CVE-2026-27728, has been identified in OneUptime, affecting versions prior to 10.0.7. This flaw enables authenticated users to execute arbitrary operating system commands on the Probe server, risking complete system compromise for organizations...