T
Vendor security profile
TIMLEGGE
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical3
CISA KEV0
Public exploit0
Patch rate%83
Avg. CVSS8.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
6
0
0
CVE KEV
CVE severity distribution
6toplam CVE
Critical3 (50%)
High3 (50%)
Patch and exploitation view
%83
Verified patch
%0
CISA KEV
%0
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
7.5
CVE-2026-18568
XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic check
T
Patch verifiedEPSS %0
8.1
CVE-2026-18092
Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with document-wide XPath instead of the signed subtree
T
Patch verifiedEPSS %0
9.1
CVE-2026-9487
XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID
T
Patch verifiedEPSS %0
9.1
CVE-2026-9390
XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup
T
Patch verifiedEPSS %1
9.8
CVE-2026-18108
Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content carries no signature
T
Patch verifiedEPSS %0
7.5
CVE-2026-18089
Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when no trust anchor is configured
T
Patch status unknownEPSS %0