PatchTheCVEupkeeper vulnerabilities
Recent CVEs affecting upkeeper products. 7 tracked.
upkeeper has 7 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-11-19. Highest priority: CVE-2024-42466 (score 52/100).
- CVE-2025-11446 MEDIUM 6.5 UPGRADE Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows U
- CVE-2025-8663 MEDIUM 6.5 UPGRADE Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows U
- CVE-2024-42466 CRITICAL 9.8 UPGRADE Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper
- CVE-2024-42465 CRITICAL 9.8 UPGRADE Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper
- CVE-2024-42464 MEDIUM 6.5 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager
- CVE-2024-42463 MEDIUM 6.5 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager
- CVE-2024-42462 CRITICAL 9.8 UPGRADE Improper Authentication vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Byp
FAQ
How do I fix upkeeper vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is upkeeper being exploited right now?
None of the tracked upkeeper CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which upkeeper CVE should I patch first?
CVE-2024-42466 currently ranks highest (52/100): Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper.