Information disclosure in Oneuptime

CVE-2026-32598

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.24, the password reset flow logs the complete password reset URL — containing the plaintext reset token — at INFO log level, which is enabled by default in…

EPSS: 0.000 (11.9th percentile) — read the EPSS interpretation.