P
Vendor security profile10 actively exploited CVEs
progress
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs77
Critical16
CISA KEV10
Public exploit12
Patch rate%1
Avg. CVSS7.9
12-month vulnerability rate
0
0
1
0
2
2
4
6
33
18
0
0
CVE KEV
CVE severity distribution
77toplam CVE
Critical16 (21%)
High39 (51%)
Medium15 (19%)
Uncertain7 (9%)
Patch and exploitation view
%1
Verified patch
%13
CISA KEV
%16
Public exploit
1Patch available
0Partial
8Workaround
0Vendor: no patch
68Unknown
Latest vulnerabilities
5.4
CVE-2026-106139
Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue
PS
Patch status unknownEPSS %0
5.4
CVE-2026-106138
Cross-Site Scripting via Chart Tooltip in KendoReact
PS
Patch status unknownEPSS %0
8.9
CVE-2026-106155
Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers
PS
Patch status unknownEPSS %0
7.1
CVE-2026-106145
Privilege Escalation in Telerik Report Server Service-Agent Hub
PS
Patch status unknownEPSS %0
4.3
CVE-2026-107586
Allocation of Resources Without Limits or Throttling in hMailServer
PR
Patch status unknownEPSS %0
5.3
CVE-2026-107585
Allocation of Resources Without Limits or Throttling in hMailServer
PR
Patch status unknownEPSS %0
7.4
CVE-2026-107584
Not Failing Securely ('Failing Open') in hMailServer
PR
Patch status unknownEPSS %0
6.5
CVE-2026-107583
Inefficient Algorithmic Complexity in hMailServer
PR
Patch status unknownEPSS %0
5.9
CVE-2026-107587
Improper Certificate Validation in hMailServer
PR
Patch status unknownEPSS %0
6.5
CVE-2026-107582
Inefficient Algorithmic Complexity in hMailServer
PR
Patch status unknownEPSS %0