F
Vendor security profile
FalkorDB
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical4
CISA KEV0
Public exploit0
Patch rate%100
Avg. CVSS8.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
7
CVE KEV
CVE severity distribution
7toplam CVE
Critical4 (57%)
High3 (43%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%0
Public exploit
7Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
7.7
CVE-2026-107911
Type confusion in FalkorDB GRAPH.QUERY via the --bolt argument
F
Patch verifiedEPSS %0
9.2
CVE-2026-107910
Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling
F
Patch verifiedEPSS %0
8.8
CVE-2026-107909
Pre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload length
F
Patch verifiedEPSS %0
9.3
CVE-2026-107908
Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET message
F
Patch verifiedEPSS %1
8.8
CVE-2026-7826
Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB
F
Patch verifiedEPSS %0
9.2
CVE-2026-7827
Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB
F
Patch verifiedEPSS %1
9.3
CVE-2026-5759
Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB
F
Patch verifiedEPSS %1