N
Vendor security profile1 actively exploited CVEs
nixos
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical1
CISA KEV1
Public exploit5
Patch rate%50
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
0
2
0
0
0
1
0
0
CVE KEV
CVE severity distribution
8toplam CVE
Critical1 (13%)
High5 (63%)
Medium1 (13%)
Low1 (13%)
Patch and exploitation view
%50
Verified patch
%13
CISA KEV
%63
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
2.8
CVE-2026-64846
Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature
N
Patch status unknownEPSS %0
7.8
CVE-2026-31431 Actively exploited
crypto: algif_aead - Revert to operating out-of-place
L
Patch verifiedEPSS %3
8.4
CVE-2026-39860
Vulnerability in Nixos
N
Patch verifiedEPSS %0
9.8
CVE-2024-12084
Out-of-bounds write in Samba Rsync
S
Patch verifiedEPSS %72
6.1
CVE-2024-12086
Rsync: rsync server leaks arbitrary client files
R
Patch status unknownEPSS %2
7.5
CVE-2024-12085
Rsync: info leak via uninitialized stack contents
R
Patch verifiedEPSS %9
7.5
CVE-2024-12088
Path traversal in Samba Rsync
S
Patch status unknownEPSS %5
7.5
CVE-2024-12087
Path traversal in Samba Rsync
S
Patch status unknownEPSS %2