N
Vendor security profile1 actively exploited CVEs
nixos
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs13
Critical1
CISA KEV1
Public exploit5
Patch rate%31
Avg. CVSS6.6
12-month vulnerability rate
0
0
0
0
0
2
0
0
0
1
0
5
CVE KEV
CVE severity distribution
13toplam CVE
Critical1 (8%)
High7 (54%)
Medium4 (31%)
Low1 (8%)
Patch and exploitation view
%31
Verified patch
%8
CISA KEV
%38
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
4.3
CVE-2026-110453
Incorrect authorization in NixOS
N
Patch status unknownEPSS %0
4.0
CVE-2026-110452
Vulnerability in NixOS
N
Patch status unknownEPSS %0
4.3
CVE-2026-110451
Incorrect authorization in NixOS
N
Patch status unknownEPSS %0
8.0
CVE-2026-110450
Vulnerability in NixOS
N
Patch status unknownEPSS %0
7.5
CVE-2026-110449
Integer overflow in NixOS
N
Patch status unknownEPSS %0
2.8
CVE-2026-64846
Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature
N
Patch status unknownEPSS %0
7.8
CVE-2026-31431 Actively exploited
crypto: algif_aead - Revert to operating out-of-place
L
Patch verifiedEPSS %3
8.4
CVE-2026-39860
Vulnerability in Nixos
N
Patch verifiedEPSS %0
9.8
CVE-2024-12084
Out-of-bounds write in Samba Rsync
S
Patch verifiedEPSS %72
6.1
CVE-2024-12086
Rsync: rsync server leaks arbitrary client files
R
Patch status unknownEPSS %2