CVE-2026-80350 | OneUptime up to 12.0.6 Webhook Target Check SSRFProtection.ts SSRFProtection.validateWebhookTargetIsSafe server-side request forgery

August 26, 2026 Yanac

A vulnerability labeled as problematic has been found in OneUptime up to 12.0.6. Affected by this issue is the function SSRFProtection.validateWebhookTargetIsSafe of the file Common/Server/Utils/SSRFProtection.ts of the component Webhook Target Check. The manipulation results in server-side request forgery.

This vulnerability was named CVE-2026-80350. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More