K
Vendor security profile
krayin
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical1
CISA KEV0
Public exploit13
Patch rate%57
Avg. CVSS6.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
12
0
CVE KEV
CVE severity distribution
14toplam CVE
Critical1 (7%)
High2 (14%)
Medium11 (79%)
Patch and exploitation view
%57
Verified patch
%0
CISA KEV
%93
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
6.9
CVE-2026-100885
Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization
K
Patch verifiedEPSS %1
5.3
CVE-2026-100884
Krayin laravel-crm attachment-download Endpoint acl.php resource injection
K
Patch verifiedEPSS %0
5.3
CVE-2026-100883
Krayin laravel-crm acl.php access control
K
Patch verifiedEPSS %0
4.8
CVE-2026-100882
Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting
K
Patch verifiedEPSS %0
5.1
CVE-2026-97897
Krayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scripting
K
Patch verifiedEPSS %0
5.1
CVE-2026-97896
krayin laravel-crm Upload Functionality ConfigurationForm.php rules cross site scripting
K
Patch verifiedEPSS %0
5.3
CVE-2026-97895
krayin laravel-crm User Management UserController.php privileges management
K
Patch verifiedEPSS %0
5.1
CVE-2026-48543
Krayin CRM 2.2.6 Stored Template Injection XSS via Web Form Description
K
Patch status unknownEPSS %0
5.1
CVE-2026-48542
Krayin CRM 2.2.6 Stored Template Injection XSS via Product Name Field
K
Patch status unknownEPSS %0
5.1
CVE-2026-48541
Krayin CRM 2.2.6 Stored Template Injection XSS via Contact Name Field
K
Patch status unknownEPSS %0