TT
Vendor security profile
Temporal Technologies, Inc.
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical1
CISA KEV0
Public exploit0
Patch rate%100
Avg. CVSS7.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
9
0
CVE KEV
CVE severity distribution
10toplam CVE
Critical1 (10%)
High8 (80%)
Low1 (10%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%0
Public exploit
10Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
9.3
CVE-2026-96770
s2s-proxy accepts untrusted client certificates
TT
Patch verifiedEPSS %0
8.7
CVE-2026-89139
Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host
TT
Patch verifiedEPSS %1
7.2
CVE-2026-87858
Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization
TT
Patch verifiedEPSS %1
8.7
CVE-2026-65654
temporalio/ringpop-go fails to enforce configured label limits on inbound membership gossip
TT
Patch verifiedEPSS %1
8.7
CVE-2026-65653
temporalio/tchannel-go zero-chunk call fragment causes process termination
TT
Patch verifiedEPSS %1
8.7
CVE-2026-65652
temporalio/tchannel-go malformed checksum type causes process termination
TT
Patch verifiedEPSS %1
8.7
CVE-2026-65651
temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal
TT
Patch verifiedEPSS %1
8.7
CVE-2026-16651
temporalio/sqlparser malformed MySQL version comments can cause a panic
TT
Patch verifiedEPSS %0
7.1
CVE-2026-16652
Temporal Server Schedule exclusion search can cause excessive CPU consumption
TT
Patch verifiedEPSS %0
2.3
CVE-2026-65655
Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxy
TT
Patch verifiedEPSS %0