1
Vendor security profile
1Panel-dev
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs29
Critical4
CISA KEV0
Public exploit10
Patch rate%10
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
20
7
CVE KEV
CVE severity distribution
29toplam CVE
Critical4 (14%)
High3 (10%)
Medium22 (76%)
Patch and exploitation view
%10
Verified patch
%0
CISA KEV
%34
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
26Unknown
Latest vulnerabilities
5.3
CVE-2026-108705
CordysCRM through 1.9.3 Missing Authorization via /custom-form/data/import
1
Patch status unknownEPSS %0
5.3
CVE-2026-108704
CordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add Endpoints
1
Patch status unknownEPSS %0
5.3
CVE-2026-108703
CordysCRM through 1.9.3 Missing Authorization via /approval-resource/push
1
Patch status unknownEPSS %0
5.3
CVE-2026-108702
CordysCRM through 1.9.3 Missing Authorization and Blind SSRF via Webhook Test
1
Patch status unknownEPSS %0
5.3
CVE-2026-108701
1Panel-dev CordysCRM before 1.9.2 Missing Authorization via POST /contract/sort
1
Patch verifiedEPSS %0
7.1
CVE-2026-108700
1Panel-dev CordysCRM before 1.9.2 Missing Authorization via /field/source/business-title
1
Patch verifiedEPSS %0
7.1
CVE-2026-108692
1Panel-dev CordysCRM 1.9.0 before 1.9.2 Missing Authorization via /field/source Endpoints
1
Patch verifiedEPSS %0
6.3
CVE-2026-79919
MaxKB function-library sandbox escape: dlopen stack-check bypass via importlib meta-path callbacks and unhooked dlsym(RTLD_NEXT)
1
Patch status unknownEPSS %0
6.3
CVE-2026-79918
MaxKB: Sandbox escape via unhooked fexecve
1
Patch status unknownEPSS %0
5.4
CVE-2026-77517
MaxKB cross-knowledge IDOR lets a normal user read and modify documents and paragraphs in another knowledge base
1
Patch status unknownEPSS %0