H
Vendor security profile
hestiacp
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs3
Critical1
CISA KEV0
Public exploit1
Patch rate%67
Avg. CVSS8.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
2
0
0
1
CVE KEV
CVE severity distribution
3toplam CVE
Critical1 (33%)
High1 (33%)
Medium1 (33%)
Patch and exploitation view
%67
Verified patch
%0
CISA KEV
%33
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
9.9
CVE-2026-108390
HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking
H
Patch status unknown
5.4
CVE-2025-30008
Cross-site scripting in Hestiacp Control Panel
H
Patch verifiedEPSS %0
8.8
CVE-2025-30007
OS command injection in Hestiacp Control Panel
H
Patch verifiedEPSS %3