G
Vendor security profile
gophish
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit7
Patch rate%0
Avg. CVSS6.2
12-month vulnerability rate
0
0
0
0
0
0
0
1
0
1
0
5
CVE KEV
CVE severity distribution
7toplam CVE
High3 (43%)
Medium3 (43%)
Low1 (14%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%100
Public exploit
0Patch available
0Partial
1Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
5.3
CVE-2026-107273
Gophish 0.11.0 through 0.12.1 SSRF via POST /api/import/site
G
Patch status unknownEPSS %0
2.3
CVE-2026-107272
Gophish through 0.12.1 XSS via Unescaped SMTP Server Error Messages
G
Patch status unknownEPSS %0
6.9
CVE-2026-107271
Gophish through 0.12.1 Login Rate Limit Bypass via X-Forwarded-For Spoofing
G
Patch status unknownEPSS %0
7.1
CVE-2026-107270
Gophish through 0.12.1 Object Takeover via Client-Supplied ID on API Create Endpoints
G
Patch status unknownEPSS %0
6.3
CVE-2026-107269
Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy
G
Patch status unknownEPSS %0
8.6
CVE-2026-82269
Gophish Account Lockout and Forced Password Change Bypassable via API Key
G
Patch status unknownEPSS %0
7.1
CVE-2026-39904
Gophish 0.12.1 Denial of Service via Office Document Upload
G
WorkaroundEPSS %0