TT
Vendor security profile
Temporal Technologies, Inc.
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical1
CISA KEV0
Public exploit0
Patch rate%100
Avg. CVSS7.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
9
2
CVE KEV
CVE severity distribution
12toplam CVE
Critical1 (8%)
High9 (75%)
Medium1 (8%)
Low1 (8%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%0
Public exploit
12Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
6.0
CVE-2026-89140
Temporal Server internal completion callbacks are not bound to their namespace, allowing cross-namespace changes to Scheduler V2 schedule state
TT
Patch verifiedEPSS %0
7.0
CVE-2026-104355
Temporal Server applies inbound namespace replication from a connected peer cluster to local namespaces
TT
Patch verifiedEPSS %0
9.3
CVE-2026-96770
s2s-proxy accepts untrusted client certificates
TT
Patch verifiedEPSS %0
8.7
CVE-2026-89139
Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host
TT
Patch verifiedEPSS %1
7.2
CVE-2026-87858
Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization
TT
Patch verifiedEPSS %1
8.7
CVE-2026-65654
temporalio/ringpop-go fails to enforce configured label limits on inbound membership gossip
TT
Patch verifiedEPSS %1
8.7
CVE-2026-65653
temporalio/tchannel-go zero-chunk call fragment causes process termination
TT
Patch verifiedEPSS %1
8.7
CVE-2026-65652
temporalio/tchannel-go malformed checksum type causes process termination
TT
Patch verifiedEPSS %1
8.7
CVE-2026-65651
temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal
TT
Patch verifiedEPSS %1
8.7
CVE-2026-16651
temporalio/sqlparser malformed MySQL version comments can cause a panic
TT
Patch verifiedEPSS %0