K
Vendor security profile
kvcache-ai
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical3
CISA KEV0
Public exploit12
Patch rate%21
Avg. CVSS8.0
12-month vulnerability rate
0
0
0
0
0
1
0
0
0
0
3
10
CVE KEV
CVE severity distribution
14toplam CVE
Critical3 (21%)
High6 (43%)
Medium5 (36%)
Patch and exploitation view
%21
Verified patch
%0
CISA KEV
%86
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
6.9
CVE-2026-106041
Mooncake Store through 0.3.13.post1 Missing Authorization via NotifyOffloadSuccess RPC
K
Patch status unknownEPSS %0
8.8
CVE-2026-106040
Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC
K
Patch status unknownEPSS %0
6.9
CVE-2026-106039
Mooncake Store through 0.3.13.post1 Missing Authorization in Replication Task RPC
K
Patch status unknownEPSS %0
8.8
CVE-2026-106038
Mooncake Store through 0.3.13.post1 Unauthenticated Object Deletion via Remove RPCs
K
Patch status unknownEPSS %0
9.3
CVE-2026-106037
Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service
K
Patch status unknownEPSS %1
8.7
CVE-2026-104433
Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString
K
Patch verifiedEPSS %0
8.8
CVE-2026-103765
Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server
K
Patch status unknownEPSS %1
9.3
CVE-2026-103764
Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport
K
Patch verifiedEPSS %1
8.7
CVE-2026-103761
Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue
K
Patch status unknownEPSS %0
8.2
CVE-2026-103760
Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write
K
Patch status unknownEPSS %0