B
Vendor security profile
backstage
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs44
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
44toplam CVE
Uncertain44 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
44Unknown
Latest vulnerabilities
4.3
CVE-2026-106495Backstage: Improper access control in backend action invocation
Patch status unknownEPSS %0
7.7
CVE-2026-106557Backstage: Improper input validation in TechDocs Markdown extension configuration
Patch status unknownEPSS %0
5.3
CVE-2026-106563Backstage: Improper entity validation in deprecated Kubernetes services endpoint
Patch status unknownEPSS %0
4.3
CVE-2026-106562Backstage: Incorrect authorization in search engine permission filtering
Patch status unknownEPSS %0
5.0
CVE-2026-106561Backstage: Sensitive information disclosure in Kubernetes resource queries
Patch status unknownEPSS %0
7.1
CVE-2026-106560Backstage: Improper repository path validation in a Scaffolder backend module
Patch status unknownEPSS %0
6.3
CVE-2026-106559Backstage: Improper input validation in Confluence to Markdown scaffolder module
Patch status unknownEPSS %0
8.8
CVE-2026-106558Backstage: Improper validation of TechDocs MkDocs configuration
Patch verifiedEPSS %0
7.7
CVE-2026-106556Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization
Patch verifiedEPSS %0