C
Vendor security profile
cvat-ai
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
5
0
0
CVE KEV
CVE severity distribution
5toplam CVE
High3 (60%)
Medium2 (40%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
8.5
CVE-2026-73220
CVAT: Stored XSS via annotation guides in audio tasks
C
Patch status unknownEPSS %0
5.3
CVE-2026-73221
CVAT: Flawed authorization logic in endpoints related to lambda requests
C
Patch status unknownEPSS %0
5.3
CVE-2026-73219
CVAT: Denial of service with regards to automatic annotation
C
Patch status unknownEPSS %0
8.5
CVE-2026-65986
CVAT has stored XSS via annotation guide assets
C
Patch status unknownEPSS %0
7.1
CVE-2026-47682
CVAT: Missing path-containment validation in multiple entry points allows arbitrary path writes
C
Patch status unknownEPSS %0