P
Vendor security profile
prowler
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical2
CISA KEV0
Public exploit2
Patch rate%40
Avg. CVSS8.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
3
0
1
CVE KEV
CVE severity distribution
5toplam CVE
Critical2 (40%)
High2 (40%)
Medium1 (20%)
Patch and exploitation view
%40
Verified patch
%0
CISA KEV
%40
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
7.6
CVE-2026-100169
Account pre-hijacking in the Prowler API through email based social account linking without verification
P
Patch verified
7.6
CVE-2026-73264
Prowler: Server-Side Request Forgery (SSRF) in Lighthouse Provider
P
Patch status unknownEPSS %0
9.9
CVE-2026-73263
Prowler: RCE on Prowler App workers via kubeconfig auth-provider cmd-path
P
Patch status unknownEPSS %1
5.4
CVE-2026-73262
Prowler: Stored XSS in HTML reports through unescaped cloud resource tags
P
Patch status unknownEPSS %0
9.6
CVE-2026-59151
Improper authentication in Prowler
P
Patch verified Public Exploits:1EPSS %1