S
Vendor security profile
socket
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs3
Critical0
CISA KEV0
Public exploit0
Patch rate%67
Avg. CVSS7.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
2
0
1
0
CVE KEV
CVE severity distribution
3toplam CVE
High3 (100%)
Patch and exploitation view
%67
Verified patch
%0
CISA KEV
%0
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
7.5
CVE-2026-102599
Socket.IO: Engine.IO Protocol Revision Mismatch DoS
S
Patch status unknownEPSS %1
7.5
CVE-2026-102600
Socket.IO: Prototype Pollution via Unsafe Client Session Lookup
S
Patch status unknownEPSS %0
9.8
CVE-2026-19773
libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
L
Patch status unknownEPSS %1
8.1
CVE-2026-90651
Improper certificate validation in Socket Firewall
S
Patch status unknownEPSS %0
9.3
CVE-2026-48063
Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload
W
Patch status unknownEPSS %0
7.5
CVE-2026-69185
Socket.IO: Zero-attachment Memory Exhaustion
S
Patch verifiedEPSS %1
7.5
CVE-2026-59725
Socket.IO: Engine.IO Polling Transport Connection Exhaustion
S
Patch verifiedEPSS %1
7.5
CVE-2026-59724
Improper input validation in Socket Engine.io
S
Patch verifiedEPSS %1
7.5
CVE-2026-48779
ws: Memory exhaustion DoS from tiny fragments and data chunks
W
Patch verifiedEPSS %1
4.4
CVE-2026-45736
ws: Uninitialized memory disclosure
W
Patch verifiedEPSS %1