B
Vendor security profile
budibase
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs59
Critical13
CISA KEV0
Public exploit47
Patch rate%15
Avg. CVSS8.0
12-month vulnerability rate
0
0
0
0
1
5
0
7
0
36
9
1
CVE KEV
CVE severity distribution
59toplam CVE
Critical13 (22%)
High38 (64%)
Medium8 (14%)
Patch and exploitation view
%15
Verified patch
%0
CISA KEV
%80
Public exploit
9Patch available
0Partial
0Workaround
0Vendor: no patch
50Unknown
Latest vulnerabilities
8.3
CVE-2026-103757
Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation
B
Patch status unknownEPSS %0
7.1
CVE-2026-100688
Budibase server before 3.45.0 Cross-Tenant Information Disclosure
B
Patch status unknownEPSS %0
7.0
CVE-2026-100687
Budibase Server before 3.45.0 Credential Exposure via External Table Broadcast
B
Patch status unknownEPSS %0
8.6
CVE-2026-100686
Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps
B
Patch status unknownEPSS %0
8.3
CVE-2026-100685
Budibase before 3.45.0 Information Disclosure via Chat Links
B
Patch status unknownEPSS %0
9.2
CVE-2026-100684
Budibase Server 3.41.0 before 3.45.0 Authentication Bypass via OIDC
B
Patch status unknownEPSS %0
8.9
CVE-2026-100683
Budibase before 3.45.0 SQL Injection via column-rename DDL
B
Patch status unknownEPSS %0
8.7
CVE-2026-100682
Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlink
B
Patch status unknownEPSS %1
6.3
CVE-2026-100681
Budibase before 3.45.0 SSRF and OAuth Token Exfiltration via Teams Webhook
B
Patch status unknownEPSS %0
8.6
CVE-2026-100680
Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import
B
Patch status unknownEPSS %0