P
Vendor security profile1 actively exploited CVEs
perl
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs15
Critical5
CISA KEV1
Public exploit3
Patch rate%87
Avg. CVSS8.1
12-month vulnerability rate
0
0
0
0
0
0
1
1
5
2
1
0
CVE KEV
CVE severity distribution
15toplam CVE
Critical5 (33%)
High7 (47%)
Medium3 (20%)
Patch and exploitation view
%87
Verified patch
%7
CISA KEV
%20
Public exploit
13Patch available
0Partial
1Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
5.4
CVE-2026-56826
Shopper: Missing function-level authorization on Settings tax/zone/shipping Livewire components allows a low-privileged user to delete commerce configuration
S
Patch verifiedEPSS %0
9.8
CVE-2026-27565
Remote code execution via uploading a malicious IODD file
P
Patch status unknownEPSS %1
7.2
CVE-2026-27564
Command Injection via PUT in /api/datastorage/data
P
Patch status unknownEPSS %3
7.2
CVE-2026-27563
Command Injection via GET in /api/datastorage/data
P
Patch status unknownEPSS %3
7.2
CVE-2026-27562
Command Injection via PUT in /api/iodd/config
P
Patch status unknownEPSS %3
7.2
CVE-2026-27561
Command Injection via GET in /api/iodd/config
P
Patch status unknownEPSS %3
7.2
CVE-2026-27560
Command Injection via DELETE in /api/status/data
P
Patch status unknownEPSS %3
8.8
CVE-2026-27559
Command Injection via GET in /api/status/data
P
Patch status unknownEPSS %3
8.8
CVE-2026-27558
Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files
P
Patch status unknownEPSS %3
7.5
CVE-2026-27557
Path Traversal in /index.php/view_uploaded_iodd_file
P
Patch status unknownEPSS %1