S
Vendor security profile1 actively exploited CVEs
sun
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical1
CISA KEV1
Public exploit3
Patch rate%67
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
6toplam CVE
Critical1 (17%)
High3 (50%)
Medium2 (33%)
Patch and exploitation view
%67
Verified patch
%17
CISA KEV
%50
Public exploit
3Patch available
1Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
5.5
CVE-2026-108978
Vulnerability in Samsung Opensource Rlottie
SO
Patch status unknown
9.2
CVE-2026-107194
Vulnerability in Sungrow iSolarCloud
S
Patch status unknownEPSS %0
7.2
CVE-2026-93617
WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability
WS
Patch status unknownEPSS %0
4.3
CVE-2026-104402
WordPress Mindio Magic MCP plugin <= 0.5.6 - Sensitive Data Exposure vulnerability
F
Patch status unknownEPSS %0
6.9
CVE-2026-21140
Vulnerability in Samsung Mobile Devices
SM
Patch status unknownEPSS %0
5.3
CVE-2026-63386
js-toml: Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested input
S
Patch status unknownEPSS %0
4.4
CVE-2026-1645
Hostel <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_currency' Parameter and Localization file URL Setting
P
Patch status unknownEPSS %0
5.5
CVE-2026-92259
Integer overflow in Samsung Opensource Escargot
SO
Patch status unknownEPSS %0
4.4
CVE-2026-91826
Vulnerability in Samsung Opensource rLottie
SO
Patch status unknownEPSS %0
4.2
CVE-2026-23787
Use after free in Samsung Exynos 1280 Firmware
S
Patch status unknownEPSS %0