G
Vendor security profile1 actively exploited CVEs
go
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs574
Critical85
CISA KEV1
Public exploit195
Patch rate%59
Avg. CVSS7.1
12-month vulnerability rate
0
1
2
4
4
12
15
57
122
147
144
48
CVE KEV
CVE severity distribution
574toplam CVE
Critical85 (15%)
High238 (41%)
Medium219 (38%)
Low21 (4%)
Uncertain11 (2%)
Patch and exploitation view
%59
Verified patch
%0
CISA KEV
%34
Public exploit
332Patch available
5Partial
4Workaround
0Vendor: no patch
233Unknown
Latest vulnerabilities
9.9
CVE-2026-77459
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks
A
Patch status unknown
7.1
CVE-2026-104005
Incorrect authorization in MongoDB Server router for bulk writes to system namespaces
M
Patch status unknown
7.1
CVE-2026-104004
Collection validators using collation-accepting expressions can crash MongoDB Server on insert
M
Patch status unknown
5.3
CVE-2026-103965
Fixed values in MongoDB Server $bucket stage may be misread as field references
M
Patch status unknown
7.1
CVE-2026-96299
Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service
M
Patch status unknown
6.0
CVE-2026-96297
MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipeline
M
Patch status unknown
9.6
CVE-2026-104192
DragonflyDB stream RDB deserialization double-free
D
Patch status unknown
5.3
CVE-2026-102603
Gotify: Insufficiently Protected Password Change endpoint
G
Patch status unknown
5.1
CVE-2026-109597
Hugo v0.60.0 before v0.167.0 Stored XSS via Table of Contents Heading IDs
G
Patch status unknownEPSS %0
6.7
CVE-2026-109596
Hugo from v0.162.0 before v0.167.0 Symlink File Disclosure via Nested Mount Ancestor
G
Patch status unknownEPSS %0