K
Vendor security profile1 actively exploited CVEs
Kludex
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV1
Public exploit2
Patch rate%75
Avg. CVSS7.5
12-month vulnerability rate
0
0
1
0
0
0
2
1
0
0
0
0
CVE KEV
CVE severity distribution
4toplam CVE
High3 (75%)
Medium1 (25%)
Patch and exploitation view
%75
Verified patch
%25
CISA KEV
%50
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
7.5
CVE-2026-48818
Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows
K
Patch verifiedEPSS %1
6.5
CVE-2026-48710 Actively exploited
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
K
Patch verifiedEPSS %7
7.5
CVE-2026-42561
Python-Multipart: Denial of Service via unbounded multipart part headers
K
Patch status unknownEPSS %1
8.6
CVE-2026-24486
Python-Multipart has Arbitrary File Write via Non-Default Configuration
K
Patch verifiedEPSS %2