T
Vendor security profile
tduckcloud
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical1
CISA KEV0
Public exploit7
Patch rate%11
Avg. CVSS6.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
7
0
CVE KEV
CVE severity distribution
9toplam CVE
Critical1 (11%)
High2 (22%)
Medium6 (67%)
Patch and exploitation view
%11
Verified patch
%0
CISA KEV
%78
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
6.9
CVE-2026-100306
TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement
T
Patch status unknownEPSS %0
5.3
CVE-2026-100305
TDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission Endpoint
T
Patch status unknownEPSS %0
6.0
CVE-2026-100304
TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check
T
Patch status unknownEPSS %0
5.3
CVE-2026-100303
TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints
T
Patch status unknownEPSS %0
5.3
CVE-2026-95829
TDuckCloud tduck-platform Pagination Inner Interceptor MybatisPlusConfig.java PaginationInnerInterceptor.concatOrderBy sql injection
T
Patch verifiedEPSS %0
7.1
CVE-2026-92602
TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL
T
Patch status unknownEPSS %0
7.1
CVE-2026-92567
TDuck survey form through 5.0 Unauthorized Data Modification
T
Patch status unknownEPSS %0
9.8
CVE-2025-57631
Vulnerability in N/a
N
Patch status unknownEPSS %1
6.1
CVE-2023-37733
Cross-site scripting in Tduckcloud Tduck Platform
T
Patch status unknownEPSS %0