CVE-2026-34840

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, OneUptime's SAML SSO implementation (App/FeatureSet/Identity/Utils/SSO.ts) has decoupled signature verification and identity extraction. isSignatureValid() verifies the first <Signature> element in the XML DOM using xml-crypto, while getEmail() always reads from assertion[0] via xml2js. An attacker can prepend an unsigned assertion containing an arbitrary identity before a legitimately signed assertion, resulting in authentication bypass. This issue has been patched in version 10.0.42.

• CWE-347

• https://github.com/OneUptime/oneuptime/commit/2fd7ede52f60444710628d6c1b34dee2ef9e57d1Patch
• https://github.com/OneUptime/oneuptime/releases/tag/10.0.42Product, Release Notes
• https://github.com/OneUptime/oneuptime/security/advisories/GHSA-5w5c-766x-265gExploit, Mitigation, Vendor Advisory

Published

Apr 2, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34834Bulwark Webmail is a self-hosted webmail client for Stalwart…7.5
• CVE-2026-34835Rack is a modular Ruby web server interface. From versions 3…6.5
• CVE-2026-34837Zammad is a web based open source helpdesk/customer support …4.3
• CVE-2026-34838Group-Office is an enterprise customer relationship manageme…9.9
• CVE-2026-34839Glances is an open-source system cross-platform monitoring t…6.5
• CVE-2026-3484A vulnerability was detected in PhialsBasement nmap-mcp-serv…8.8
• CVE-2026-34841Bruno is an open source IDE for exploring and testing APIs. …9.8
• CVE-2026-34847hoppscotch is an open source API development ecosystem. Prio…6.1
• CVE-2026-34848hoppscotch is an open source API development ecosystem. Prio…5.4
• CVE-2026-34849UAF vulnerability in the screen management module. Impact: S…4.7
• CVE-2026-3485A flaw has been found in D-Link DIR-868L 110b03. This affect…9.8
• CVE-2026-34850Race condition vulnerability in the notification service. Im…5.9