T
Vendor security profile
Test
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
10toplam CVE
Uncertain10 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
10Unknown
Latest vulnerabilities
8.8
CVE-2026-78088
Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parameter
C
Patch status unknownEPSS %1
5.9
CVE-2026-84373
Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
V
Patch verifiedEPSS %1
6.5
CVE-2026-16586
Contest Gallery <= 30.0.6 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId'
C
Patch status unknownEPSS %1
9.4
CVE-2026-73653
Vitest: Browser Mode provider commands bypass the file-access permission gate
V
Patch verifiedEPSS %1
7.1
CVE-2026-70561
TestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.php
T
Patch status unknownEPSS %0
5.9
CVE-2026-48061
Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header
L
Patch status unknownEPSS %0
5.9
CVE-2026-47429
Path traversal in Vitest.dev
V
Patch verifiedEPSS %1
5.1
CVE-2022-50896
Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)
T
Patch status unknownEPSS %0
8.8
CVE-2025-63748
Unrestricted file upload in Testmanagement Qatraq
T
Patch status unknownEPSS %0
9.8
CVE-2025-63747
Vulnerability in Testmanagement Qatraq
T
Patch status unknownEPSS %0