T
Vendor security profile
trainingbusinesspros
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
0
3
CVE KEV
CVE severity distribution
5toplam CVE
High3 (60%)
Medium2 (40%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
8.1
CVE-2026-92975
Groundhogg <= 4.8.3 - Unauthenticated Privilege Escalation to Support User Identity Confusion
T
Patch status unknownEPSS %0
8.8
CVE-2026-104725
Groundhogg <= 4.9 - Authenticated (Custom+) Privilege Escalation to 'user' Parameter
T
Patch status unknownEPSS %0
8.8
CVE-2026-97644
Groundhogg <= 4.9 - Authenticated (Sales Person+) Privilege Escalation via Contact Identity Rebinding leading to Administrator Account Takeover to 'user_id' Parameter (v3 /contacts) chained with v4 /emails/test
T
Patch status unknownEPSS %0
6.5
CVE-2026-18387
Groundhogg <= 4.5.14 - Authenticated (Vendor+) SQL Injection via 'tag_query' Parameter
T
Patch status unknownEPSS %1
6.5
CVE-2026-11454
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.5.2 - Insecure Direct Object Reference
T
Patch status unknownEPSS %1