matomo-analytics.js) injects…¶

Key facts

CVE-2026-71285 is a High (8.1) vulnerability: Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects…. This entry ships a detection-only PoC and a Docker test lab.


CVE	CVE-2026-71285
Severity	High (8.1)
Detection / prevention	—
PoC	poc.py
Source	2026/CVE-2026-71285/

Details¶

English | 한국어

Description¶

Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo siteId value as a bare, unquoted JavaScript expression inside a