CRITICAL 9.8 NVD
CVE-2026-39117
An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.
An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php
References
- https://www.glimmernet.com/security/gt-2026-001-ssrf-66uptime-ping-servers/
- https://www.glimmernet.com/security/gt-2026-001-ssrf-66uptime-ping-servers/
This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-09-29 via NVD.
Risk Timeline
CVE Disclosed2026-09-29 · 0 days ago
Remediation Resources
Official Advisory
www.glimmernet.com/security/gt-2026-001-ssrf-66uptime-ping-servers/Official Advisory
www.glimmernet.com/security/gt-2026-001-ssrf-66uptime-ping-servers/
vulnfeed aggregates 10239 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.