E
Vendor security profile
external-secrets
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs3
Critical0
CISA KEV0
Public exploit0
Patch rate%33
Avg. CVSS6.9
12-month vulnerability rate
0
0
1
0
0
0
1
0
0
0
0
1
CVE KEV
CVE severity distribution
3toplam CVE
High2 (67%)
Medium1 (33%)
Patch and exploitation view
%33
Verified patch
%0
CISA KEV
%0
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
7.1
CVE-2026-26287
External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration
E
Patch status unknownEPSS %0
4.9
CVE-2026-42876
External Secrets Operator: Privilege escalation with secret overwriting
E
Patch status unknownEPSS %0
8.8
CVE-2026-22822
Incorrect authorization in External Secrets Operator
E
Patch verifiedEPSS %0