E
Vendor security profile
esa
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs1
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS5.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
1
CVE KEV
CVE severity distribution
1toplam CVE
Medium1 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
5.3
CVE-2026-54086
SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service
E
Patch status unknown
6.9
CVE-2026-101003
Cesanta Mongoose MQTT Broker main.c fn stack-based overflow
C
Patch verifiedEPSS %0
8.8
CVE-2026-61701
Laravel MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Execution
C
Patch status unknownEPSS %1
8.6
CVE-2026-12587
Embedded credentials in Virtuagym
R
Patch status unknownEPSS %0
9.1
CVE-2026-73253
Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching
C
Patch verifiedEPSS %0
6.5
CVE-2026-73255
Mongoose: Path traversal in SSI #include directives enables arbitrary file read
C
Patch verifiedEPSS %1
5.4
CVE-2026-73259
Mongoose: Reflected XSS via decoded URI in directory listing render
C
Patch verifiedEPSS %0
9.1
CVE-2026-73256
Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE
C
Patch verifiedEPSS %0
5.4
CVE-2026-73254
Mongoose: Stored XSS via unescaped filenames in directory listing
C
Patch verifiedEPSS %0
6.5
CVE-2026-73258
Mongoose: Multipart boundary/header scan logic error in mg_http_next_multipart
C
Patch verifiedEPSS %0