D
Vendor security profile
drakkan
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS5.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
2
0
2
CVE KEV
CVE severity distribution
5toplam CVE
Medium4 (80%)
Low1 (20%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
4.3
CVE-2026-103028
SFTPGo source-side file-pattern filter bypass during copy operations
D
Patch status unknown
6.5
CVE-2026-77375
SFTPGo: Denial of service via malformed SSH channel request
D
Patch status unknown
5.9
CVE-2026-49244
SFTPGo: Path confinement bypass in public browsable share partial ZIP download
D
Patch status unknownEPSS %0
3.7
CVE-2026-49245
SFTPGo: Stored XSS via inline parameter on public shares and user file download
D
Patch status unknownEPSS %0
5.3
CVE-2026-10031
SFTPGo 2.7.4 Permission Bypass via Symbolic Link Creation
D
Patch status unknownEPSS %0