C
Vendor security profile
cakephp
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical3
CISA KEV0
Public exploit0
Patch rate%43
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
5
1
0
CVE KEV
CVE severity distribution
7toplam CVE
Critical3 (43%)
High1 (14%)
Medium2 (29%)
Low1 (14%)
Patch and exploitation view
%43
Verified patch
%0
CISA KEV
%0
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
9.2
CVE-2026-79752
CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection
C
Patch status unknownEPSS %1
3.7
CVE-2026-54713
CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisions
C
Patch status unknownEPSS %0
4.3
CVE-2026-54614
DebugKit: MailPreview contains unsafe reflection
C
Patch status unknownEPSS %1
9.1
CVE-2026-77337
CakePHP: Potential Authentication bypass with CookieAuthenticator
C
Patch status unknownEPSS %1
8.2
CVE-2026-77634
CakePHP: SmtpTransport vulnerable to CRLF header injection
C
Patch verifiedEPSS %1
9.2
CVE-2026-77635
CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver
C
Patch verifiedEPSS %0
6.1
CVE-2026-55590
Open redirect in Cakephp
C
Patch verifiedEPSS %0