P
Vendor security profile1 actively exploited CVEs
perl
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical4
CISA KEV1
Public exploit2
Patch rate%91
Avg. CVSS8.0
12-month vulnerability rate
0
0
0
0
0
0
1
1
5
2
1
0
CVE KEV
CVE severity distribution
11toplam CVE
Critical4 (36%)
High4 (36%)
Medium3 (27%)
Patch and exploitation view
%91
Verified patch
%9
CISA KEV
%18
Public exploit
10Patch available
0Partial
1Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
9.8
CVE-2026-27565
Remote code execution via uploading a malicious IODD file
P
Patch status unknownEPSS %1
7.2
CVE-2026-27564
Command Injection via PUT in /api/datastorage/data
P
Patch status unknownEPSS %3
7.2
CVE-2026-27563
Command Injection via GET in /api/datastorage/data
P
Patch status unknownEPSS %3
7.2
CVE-2026-27562
Command Injection via PUT in /api/iodd/config
P
Patch status unknownEPSS %3
7.2
CVE-2026-27561
Command Injection via GET in /api/iodd/config
P
Patch status unknownEPSS %3
7.2
CVE-2026-27560
Command Injection via DELETE in /api/status/data
P
Patch status unknownEPSS %3
8.8
CVE-2026-27559
Command Injection via GET in /api/status/data
P
Patch status unknownEPSS %3
8.8
CVE-2026-27558
Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files
P
Patch status unknownEPSS %3
7.5
CVE-2026-27557
Path Traversal in /index.php/view_uploaded_iodd_file
P
Patch status unknownEPSS %1
8.8
CVE-2026-27556
Local File Inclusion in /index.php/ajax/save_iodd_parameters
P
Patch status unknownEPSS %1