N
Vendor security profile
nl-portal
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit1
Patch rate%40
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
3
2
CVE KEV
CVE severity distribution
5toplam CVE
High1 (20%)
Medium4 (80%)
Patch and exploitation view
%40
Verified patch
%0
CISA KEV
%20
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
5.3
CVE-2026-55414
NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)
N
Patch status unknown
6.5
CVE-2026-54683
NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463)
N
Patch status unknown
8.1
CVE-2026-49464
NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak
N
Patch verifiedEPSS %0
5.3
CVE-2026-49462
nl.nl-portal:app has GraphiQL UI and GraphQL schema introspection enabled by default
N
Patch status unknownEPSS %0
6.5
CVE-2026-49463
NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries
N
Patch verifiedEPSS %0