Security Advisory

CVE-2026-30959

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-03-10 17:06:33

Last updated 2026-03-10 17:59:05

Assigner GitHub_M

CVSS score 5.3

State PUBLISHED

Description

OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any authenticated user to trigger a verification code resend for any UserWhatsApp record by ID. Ownership is not validated (unlike the verify endpoint). This affects the UserWhatsAppAPI.ts endpoint and the UserWhatsAppService.ts service.

← Browse all CVEs View on cve.org ↗