L
Vendor security profile
linuxfoundation
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs74
Critical11
CISA KEV0
Public exploit19
Patch rate%68
Avg. CVSS7.4
12-month vulnerability rate
3
3
2
1
12
4
1
2
26
1
0
15
CVE KEV
CVE severity distribution
74toplam CVE
Critical11 (15%)
High43 (58%)
Medium18 (24%)
Low2 (3%)
Patch and exploitation view
%68
Verified patch
%0
CISA KEV
%26
Public exploit
50Patch available
0Partial
0Workaround
0Vendor: no patch
24Unknown
Latest vulnerabilities
8.8
CVE-2026-106558
Backstage: Improper validation of TechDocs MkDocs configuration
B
Patch verifiedEPSS %0
7.7
CVE-2026-106556
Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization
B
Patch verifiedEPSS %0
7.7
CVE-2026-106510
Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
B
Patch verifiedEPSS %0
7.7
CVE-2026-106509
Backstage: Improper validation of MkDocs theme configuration in TechDocs
B
Patch verifiedEPSS %0
5.3
CVE-2026-106508
Backstage: Potential file exposure through local TechDocs publisher
B
Patch verifiedEPSS %0
5.3
CVE-2026-106507
Backstage: TechDocs arbitrary file read via mkdocs snippets
B
Patch verifiedEPSS %0
5.3
CVE-2026-106506
Backstage: Improper input validation in scaffolder task list ordering
B
Patch verifiedEPSS %0
7.7
CVE-2026-106505
Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend
B
Patch verifiedEPSS %0
6.5
CVE-2026-106504
Backstage: Sensitive information exposure in scaffolder task logs
B
Patch verifiedEPSS %0
8.1
CVE-2026-106503
Backstage: Scaffolder action input authorization bypass
B
Patch verifiedEPSS %0