O
Vendor security profile
ondata
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit2
Patch rate%20
Avg. CVSS5.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
4
1
0
CVE KEV
CVE severity distribution
5toplam CVE
Medium4 (80%)
Low1 (20%)
Patch and exploitation view
%20
Verified patch
%0
CISA KEV
%40
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
5.7
CVE-2026-61612@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509
Patch status unknownEPSS %0
6.5
CVE-2026-73846CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning
Patch status unknownEPSS %0
5.3
CVE-2026-73845CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)
Patch status unknownEPSS %0
3.7
CVE-2026-73844CKAN MCP Server: Information disclosure via verbose error reflection
Patch status unknownEPSS %0
9.8
CVE-2024-12084Out-of-bounds write in Samba Rsync
Patch verified Public Exploits:4EPSS %72
6.1
CVE-2024-12086Rsync: rsync server leaks arbitrary client files
Patch status unknown Public Exploits:1EPSS %2
7.5
CVE-2024-12085Rsync: info leak via uninitialized stack contents
Patch verified Public Exploits:1EPSS %9
7.5
CVE-2024-12088Path traversal in Samba Rsync
Patch status unknownEPSS %5
7.5
CVE-2024-12087Path traversal in Samba Rsync
Patch status unknown Public Exploits:1EPSS %2