F
Vendor security profile
Finsys
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical3
CISA KEV0
Public exploit2
Patch rate%29
Avg. CVSS7.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
2
5
CVE KEV
CVE severity distribution
7toplam CVE
Critical3 (43%)
High1 (14%)
Medium3 (43%)
Patch and exploitation view
%29
Verified patch
%0
CISA KEV
%29
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
6.3
CVE-2026-110256
Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth
F
Patch status unknownEPSS %0
8.4
CVE-2026-110255
Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint
F
Patch status unknownEPSS %0
5.3
CVE-2026-110254
Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory
F
Patch status unknownEPSS %0
10.0
CVE-2026-110130
Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check
F
Patch status unknownEPSS %1
9.2
CVE-2026-110112
Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation
F
Patch status unknownEPSS %0
9.2
CVE-2026-53988
Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints
F
Patch verifiedEPSS %0
5.3
CVE-2026-53989
Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint
F
Patch verifiedEPSS %0