H
Vendor security profile1 actively exploited CVEs
hp
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs59
Critical5
CISA KEV1
Public exploit4
Patch rate%42
Avg. CVSS7.2
12-month vulnerability rate
0
1
0
0
0
0
2
0
1
2
10
0
CVE KEV
CVE severity distribution
59toplam CVE
Critical5 (8%)
High34 (58%)
Medium20 (34%)
Patch and exploitation view
%42
Verified patch
%2
CISA KEV
%7
Public exploit
25Patch available
0Partial
0Workaround
0Vendor: no patch
34Unknown
Latest vulnerabilities
5.3
CVE-2026-85733
FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables
P
Patch status unknown
7.7
CVE-2026-82416
FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module
P
Patch status unknown
8.6
CVE-2026-65954
PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()
P
Patch status unknownEPSS %0
4.8
CVE-2026-108754
GPT-Load through 1.4.11 Cleartext Proxy Key Logging via Access Logger
T
Patch status unknownEPSS %0
5.3
CVE-2026-108720
phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages
P
Patch status unknownEPSS %0
6.4
CVE-2026-106177
HP Sure Click Kernel Buffer Overflow
HI
Patch status unknownEPSS %0
8.7
CVE-2026-105830
league/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParser
T
Patch status unknownEPSS %0
5.3
CVE-2026-105829
League CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml Bypass
T
Patch status unknownEPSS %0
5.3
CVE-2026-79818
Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager
HP
Patch status unknownEPSS %0
5.5
CVE-2026-79817
Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client Software
HP
Patch status unknownEPSS %0