A
Vendor security profile9 actively exploited CVEs
arm
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical2
CISA KEV9
Public exploit9
Patch rate%8
Avg. CVSS8.0
12-month vulnerability rate
0
0
0
0
0
1
0
1
0
0
0
0
CVE KEV
CVE severity distribution
12toplam CVE
Critical2 (17%)
High1 (8%)
Medium1 (8%)
Uncertain8 (67%)
Patch and exploitation view
%8
Verified patch
%75
CISA KEV
%75
Public exploit
1Patch available
0Partial
9Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
7.2
CVE-2026-108760
LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces
L
Patch status unknown
8.4
CVE-2026-94591
Armatura LLC Armatura One Use of Hard-coded Cryptographic Key
AL
Patch status unknownEPSS %0
8.4
CVE-2026-94592
Armatura LLC Armatura One Use of Hard-coded Credentials
AL
Patch status unknownEPSS %0
7.8
CVE-2026-94593
Armatura LLC Armatura One Insertion of Sensitive Information into Log File
AL
Patch status unknownEPSS %0
4.0
CVE-2026-94594
Armatura LLC Armatura One Insertion of Sensitive Information into Log File
AL
Patch status unknownEPSS %0
6.5
CVE-2026-13200
Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order' Parameter
M
Patch status unknownEPSS %0
6.5
CVE-2026-13191
Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order_by' Parameter
M
Patch status unknownEPSS %0
6.9
CVE-2026-91002
stamparm maltrail Blacklist Endpoint httpd.py _blacklist missing authentication
S
Patch verifiedEPSS %1
5.3
CVE-2026-91773
Soft Serve 0.7.1 through 0.11.6 Information Disclosure via LFS Locks
C
Patch verifiedEPSS %0
4.3
CVE-2026-9160
CSTI in Arma Digital's Website Template
AD
Patch status unknownEPSS %0