S
Vendor security profile
siderolabs
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical0
CISA KEV0
Public exploit1
Patch rate%17
Avg. CVSS5.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
3
1
CVE KEV
CVE severity distribution
6toplam CVE
High4 (67%)
Low2 (33%)
Patch and exploitation view
%17
Verified patch
%0
CISA KEV
%17
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
3.3
CVE-2026-77564
Talos Linux: Support bundle does not redact registry credentials
S
Patch status unknown
7.0
CVE-2026-45720
Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token
S
Patch status unknownEPSS %0
2.7
CVE-2026-45723
Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic
S
Patch status unknownEPSS %0
7.6
CVE-2026-45726
Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService
S
Patch status unknownEPSS %0
7.5
CVE-2025-61688
Information exposure in Siderolabs Omni
S
Patch status unknownEPSS %0
7.5
CVE-2025-59836
NULL pointer dereference in Siderolabs Omni
S
Patch verified Public Exploits:1EPSS %1