N
Vendor security profile
NationalSecurityAgency
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical1
CISA KEV0
Public exploit1
Patch rate%67
Avg. CVSS6.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
5
0
CVE KEV
CVE severity distribution
6toplam CVE
Critical1 (17%)
High1 (17%)
Medium4 (67%)
Patch and exploitation view
%67
Verified patch
%0
CISA KEV
%17
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
4.8
CVE-2026-100505
Ghidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager
N
Patch verifiedEPSS %0
7.3
CVE-2026-100504
Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128
N
Patch verifiedEPSS %0
4.8
CVE-2026-100503
Ghidra through 12.1.4 Heap Use-After-Free in Decompiler
N
Patch verifiedEPSS %0
6.8
CVE-2026-96273
Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB
N
Patch verifiedEPSS %0
9.6
CVE-2026-54694
NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover
N
Patch status unknownEPSS %0
6.7
CVE-2026-54389
Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb
N
Patch status unknownEPSS %0