CVE-2026-39117

CVSS 9.8 (critical) · published 2026-09-29

An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php

Weakness: CWE-94

Source: NVD CVE-2026-39117

References

• https://www.glimmernet.com/security/gt-2026-001-ssrf-66uptime-ping-servers/
• https://www.glimmernet.com/security/gt-2026-001-ssrf-66uptime-ping-servers/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.