B
Vendor security profile
Basekick-Labs
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit1
Patch rate%0
Avg. CVSS7.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
5
0
0
CVE KEV
CVE severity distribution
5toplam CVE
High4 (80%)
Medium1 (20%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%20
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
6.9
CVE-2026-55678
Arc: Unauthenticated cluster node admission when `cluster.shared_secret` is unset
B
Patch status unknownEPSS %1
8.3
CVE-2026-48106
Arc Enterprise cluster replication accepts unauthenticated MsgReplicateSync messages, enabling cluster-wide data injection from any TLS-trusted peer
B
Patch status unknownEPSS %0
8.3
CVE-2026-48105
Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide path-traversal worm primitive
B
Patch status unknownEPSS %0
7.1
CVE-2026-47735
Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks
B
Patch status unknownEPSS %0
8.8
CVE-2026-48050
Arc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS
B
Patch status unknownEPSS %1