A
Vendor security profile
axllent
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical0
CISA KEV0
Public exploit7
Patch rate%30
Avg. CVSS6.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
5
4
1
0
CVE KEV
CVE severity distribution
10toplam CVE
High2 (20%)
Medium8 (80%)
Patch and exploitation view
%30
Verified patch
%0
CISA KEV
%70
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
7Unknown
Latest vulnerabilities
6.9
CVE-2026-84697
Mailpit SSRF Deny List Bypass via Azure Metadata and IPv6 Prefix
A
Patch verifiedEPSS %0
6.5
CVE-2026-67448
Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)
A
Patch verifiedEPSS %0
5.3
CVE-2026-67447
Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement
A
Patch verifiedEPSS %1
5.3
CVE-2026-67445
Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection
A
Patch status unknownEPSS %1
5.3
CVE-2026-67446
Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling
A
Patch status unknownEPSS %1
5.3
CVE-2026-48824
Resource allocation without limits in Axllent Mailpit
A
Patch status unknownEPSS %1
7.5
CVE-2026-45713
Uncontrolled resource consumption in Axllent Mailpit
A
Patch status unknownEPSS %1
5.9
CVE-2026-45712
Resource allocation without limits in Axllent Mailpit
A
Patch status unknownEPSS %0
8.2
CVE-2026-45711
Path traversal in Axllent Mailpit
A
Patch status unknownEPSS %0
5.8
CVE-2026-45709
Server-side request forgery in Axllent Mailpit
A
Patch status unknownEPSS %0