N
Vendor security profile
nats-io
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit1
Patch rate%29
Avg. CVSS7.3
12-month vulnerability rate
0
0
0
0
7
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
7toplam CVE
High6 (86%)
Medium1 (14%)
Patch and exploitation view
%29
Verified patch
%0
CISA KEV
%14
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
7.4
CVE-2026-33247
NATS credentials are exposed in monitoring port via command-line argv
N
Patch status unknownEPSS %1
5.3
CVE-2026-33219
NATS is vulnerable to pre-auth DoS through WebSockets client service
N
Patch status unknownEPSS %1
7.5
CVE-2026-33218
NATS has pre-auth server panic via leafnode handling
N
Patch status unknownEPSS %1
7.1
CVE-2026-33217
NATS allows MQTT clients to bypass ACL checks
N
Patch status unknownEPSS %0
8.6
CVE-2026-33216
NATS has MQTT plaintext password disclosure
N
Patch verifiedEPSS %1
7.5
CVE-2026-29785
NATS Server panic via malicious compression on leafnode port
N
Patch verifiedEPSS %1
7.5
CVE-2026-27889
NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead
N
Patch status unknownEPSS %1