F
Vendor security profile10 actively exploited CVEs
fedoraproject
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs243
Critical20
CISA KEV10
Public exploit136
Patch rate%79
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
2
0
3
0
3
2
4
CVE KEV
CVE severity distribution
243toplam CVE
Critical20 (8%)
High137 (56%)
Medium84 (35%)
Low2 (1%)
Patch and exploitation view
%79
Verified patch
%4
CISA KEV
%56
Public exploit
193Patch available
0Partial
2Workaround
0Vendor: no patch
48Unknown
Latest vulnerabilities
4.7
CVE-2026-104045
Sssd: sssd: denial of service via race condition in autofs responder
RH
Patch status unknownEPSS %0
6.2
CVE-2026-104046
Sssd: sssd: denial of service via incomplete identity provider authentication requests
RH
Patch status unknownEPSS %0
6.8
CVE-2026-104048
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
RH
Patch status unknownEPSS %0
5.3
CVE-2026-104047
Sssd: sssd: information disclosure via query injection in entra id lookups
RH
Patch status unknownEPSS %0
5.4
CVE-2026-90462
Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
RH
Patch status unknownEPSS %0
4.0
CVE-2026-90996
Sssd: sssd: denial of service in nss responder via crafted zero-length requests
RH
Patch status unknownEPSS %0
5.5
CVE-2026-68743
Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
RH
Patch status unknownEPSS %0
3.3
CVE-2026-68744
Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply
RH
Patch status unknownEPSS %0
5.5
CVE-2026-68742
Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
RH
Patch status unknownEPSS %0
6.4
CVE-2026-12610
Sssd: use-after-free crash in sssd' 'sssd_pam' process
RH
Patch status unknownEPSS %0