N
Vendor security profile
netdata
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical0
CISA KEV0
Public exploit3
Patch rate%13
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
0
7
0
CVE KEV
CVE severity distribution
8toplam CVE
High4 (50%)
Medium4 (50%)
Patch and exploitation view
%13
Verified patch
%0
CISA KEV
%38
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
7Unknown
Latest vulnerabilities
7.0
CVE-2026-83597
Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution
N
Patch status unknownEPSS %0
6.5
CVE-2026-83600
Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent
N
Patch status unknownEPSS %1
7.8
CVE-2026-83598
Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair
N
Patch status unknownEPSS %0
8.4
CVE-2026-83603
Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE
N
Patch status unknownEPSS %0
6.5
CVE-2026-83601
Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write
N
Patch status unknownEPSS %0
6.5
CVE-2026-83602
Netdata: Unauthenticated remote PUT to /api/v3/settings bypasses IP allowlist controls via HTTP_ACL_NOCHECK
N
Patch status unknownEPSS %0
7.5
CVE-2026-83599
Netdata: WebSocket Decompression Bomb
N
Patch status unknownEPSS %1
6.1
CVE-2025-71385
Cross-site scripting in Netdata
N
Patch verifiedEPSS %0