CVE-2026-39117

An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php

  • Published Sep 29, 2026
  • CVSS 9.8 critical
  • 0.8% chance of exploitation in the next 30 days (EPSS)

CVE-2026-39117 at the National Vulnerability Database