M
Vendor security profile
mastodon
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
4
0
0
CVE KEV
CVE severity distribution
4toplam CVE
High3 (75%)
Medium1 (25%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
7.4
CVE-2026-59825
Mastodon: Unwanted deactivation of SSL/TLS certificate verification
M
Patch status unknownEPSS %0
6.3
CVE-2026-72916
Mastodon: SSRF Protection Bypass via IPv4-compatible IPv6 Addresses
M
Patch status unknownEPSS %1
7.5
CVE-2026-72915
Mastodon: Personally-identifying information disclosure due to incorrect access control validation
M
Patch status unknownEPSS %0
7.5
CVE-2026-72914
Mastodon: Exhausting data by an unauthenticated request to the admin retention API
M
Patch status unknownEPSS %1