P
Vendor security profile
projectcapsule
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical1
CISA KEV0
Public exploit4
Patch rate%50
Avg. CVSS6.4
12-month vulnerability rate
0
0
0
0
0
0
0
2
0
0
4
0
CVE KEV
CVE severity distribution
6toplam CVE
Critical1 (17%)
High1 (17%)
Medium3 (50%)
Low1 (17%)
Patch and exploitation view
%50
Verified patch
%0
CISA KEV
%67
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
6.8
CVE-2026-61795
Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation
P
Patch verifiedEPSS %1
7.1
CVE-2026-61672
Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement
P
Patch verifiedEPSS %0
6.8
CVE-2026-61794
Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panic
P
Patch verifiedEPSS %1
5.7
CVE-2026-55636
Capsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected
P
Patch status unknownEPSS %0
2.7
CVE-2026-30963
Improper input validation in Projectcapsule
P
Patch status unknownEPSS %0
9.1
CVE-2026-22872
Improper input validation in Projectcapsule
P
Patch status unknownEPSS %1