{"id":"EUVD-2025-199748","revision":"b764ec98302f4f0d9b23b2545dc00608","records":[{"revision":"b764ec98302f4f0d9b23b2545dc00608","observedAt":"2026-10-27T23:52:57.863+00:00","statement":{"source":"euvd","id":"EUVD-2025-199748","aliases":["CVE-2025-65966","GHSA-m449-vh5f-574g"],"title":"OneUptime is a solution for monitoring and managing online services. In version 9.0.5598, a low-permission user can create new accounts through a direct API request instead of being restricted to the intended interface. This issue has been …","description":"OneUptime is a solution for monitoring and managing online services. In version 9.0.5598, a low-permission user can create new accounts through a direct API request instead of being restricted to the intended interface. This issue has been patched in version 9.1.0.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","score":8.8,"severity":null}],"references":["https://github.com/OneUptime/oneuptime/security/advisories/GHSA-m449-vh5f-574g"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-199748","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Nov 26, 2025, 6:10:16 PM","dateUpdated":"Nov 26, 2025, 6:41:53 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-199748","identifiers":["EUVD-2025-199748","CVE-2025-65966","GHSA-m449-vh5f-574g"]},"retained":false,"historicalAffected":[]}],"coverage":[]}