N
Vendor security profile
nsa
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs18
Critical0
CISA KEV0
Public exploit10
Patch rate%33
Avg. CVSS6.6
12-month vulnerability rate
0
0
0
0
1
0
0
14
0
0
3
0
CVE KEV
CVE severity distribution
18toplam CVE
High9 (50%)
Medium8 (44%)
Low1 (6%)
Patch and exploitation view
%33
Verified patch
%0
CISA KEV
%56
Public exploit
6Patch available
0Partial
0Workaround
0Vendor: no patch
12Unknown
Latest vulnerabilities
7.1
CVE-2026-39778
WordPress Ansar Import – One Click Starter Sites – for Elementor & Themes plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability
T
Patch status unknownEPSS %0
7.1
CVE-2026-96836
WordPress Parsi Date plugin <= 6.3 - Cross Site Scripting (XSS) vulnerability
MG
Patch status unknownEPSS %0
4.8
CVE-2026-100505
Ghidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager
N
Patch verifiedEPSS %0
7.3
CVE-2026-100504
Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128
N
Patch verifiedEPSS %0
4.8
CVE-2026-100503
Ghidra through 12.1.4 Heap Use-After-Free in Decompiler
N
Patch verifiedEPSS %0
6.9
CVE-2026-57442
MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested
B
Patch status unknownEPSS %0
8.4
CVE-2026-57441
MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence
B
Patch status unknownEPSS %0
9.6
CVE-2026-55743
OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution
T
Patch verifiedEPSS %1
8.8
CVE-2026-52758
SQL injection in Nsa Ghidra
N
Patch status unknownEPSS %1
4.4
CVE-2026-52757
Use after free in Nsa Ghidra
N
Patch status unknownEPSS %0