S
Vendor security profile
st
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs2
Critical1
CISA KEV0
Public exploit0
Patch rate%50
Avg. CVSS7.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
2toplam CVE
Critical1 (50%)
Medium1 (50%)
Patch and exploitation view
%50
Verified patch
%0
CISA KEV
%0
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
7.1
CVE-2026-108491
WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability
EF
Patch status unknown
9.3
CVE-2026-50619
Unauthenticated remote code execution vulnerability
QS
Patch status unknown
6.3
CVE-2026-47790
Privilege Escalation via QuFTP Log-based XSS
QS
Patch status unknown
9.3
CVE-2026-47786
Pre-Authentication Command Injection
QS
Patch status unknown
8.9
CVE-2026-39997
Unauthenticated Remote Input Injection in QNAP HD Station's remotepad
QS
Patch status unknown
4.8
CVE-2026-39991
Stored Cross-Site Scripting (XSS) in Note Station file upload functionality
QS
Patch status unknown
8.4
CVE-2026-34009
**Container Escape** Host user home directory mounted with write access into application container
QS
Patch status unknown
8.5
CVE-2026-34008
**Privilege Escalation** World-writable crontab path monitored and executed by root-owned process
QS
Patch status unknown
6.9
CVE-2026-34007
**RCE** Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()`
QS
Patch status unknown
8.7
CVE-2026-53882
Path Traversal in Virtualization Station VM Import
QS
Patch status unknown