U
Vendor security profile
unity
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs2
Critical0
CISA KEV0
Public exploit1
Patch rate%50
Avg. CVSS7.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
0
0
CVE KEV
CVE severity distribution
2toplam CVE
High2 (100%)
Patch and exploitation view
%50
Verified patch
%0
CISA KEV
%50
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
8.3
CVE-2026-109954
Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interference
P
Patch status unknown
5.3
CVE-2026-109303
Parse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13 protectedFields Bypass via Relation Count Query
P
Patch status unknownEPSS %0
6.3
CVE-2026-109302
Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 GraphQL Schema Disclosure via Persisted Queries
P
Patch status unknownEPSS %0
8.2
CVE-2026-109301
Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 Denial of Service via File Pointer Without URL
P
Patch status unknownEPSS %0
7.2
CVE-2026-94676
WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability
TC
Patch status unknownEPSS %0
6.3
CVE-2026-105828
Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors
P
Patch status unknownEPSS %0
6.9
CVE-2026-104073
NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links
N
Patch verifiedEPSS %0
6.5
CVE-2026-55251
NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files
N
Patch status unknownEPSS %0
5.3
CVE-2026-93462
Missing authentication in baserCMS User Community
BU
Patch status unknownEPSS %0
5.4
CVE-2026-93464
Cross-site scripting in baserCMS User Community
BU
Patch status unknownEPSS %0