Uptime Kuma Vulnerability Allows Information Disclosure

CERT-Bund has released security advisory WID-SEC-2026-0811 concerning a vulnerability in Uptime Kuma, an open-source service monitoring software. The vulnerability, affecting versions prior to 2.2.1, allows a remote, authenticated attacker to exploit a flaw to disclose information. The advisory notes a CVSS Base Score of 6.5 (medium) and a Temporal Score of 5.9 (medium), indicating a moderate risk.

Organizations using Uptime Kuma, particularly those running Linux, other UNIX-like systems, or unspecified 'Other' operating systems, should review their deployment. While the advisory indicates mitigation is available, specific steps are not detailed in this summary. Affected parties should consult the full advisory and vendor documentation to implement necessary patches or workarounds to prevent unauthorized information disclosure and maintain system security.