W
Vendor security profile
warp-tech
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical1
CISA KEV0
Public exploit2
Patch rate%0
Avg. CVSS5.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
7
0
CVE KEV
CVE severity distribution
7toplam CVE
Critical1 (14%)
High1 (14%)
Medium4 (57%)
Low1 (14%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%29
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
7Unknown
Latest vulnerabilities
6.0
CVE-2026-91167
Warpgate: Missing authorization check on `PUT /users/:id/roles/:role_id` allows any admin to bypass the `AccessRolesAssign` permission boundary
W
Patch status unknownEPSS %0
5.7
CVE-2026-91166
Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target
W
Patch status unknownEPSS %0
2.4
CVE-2026-91165
Warpgate: Markup injection in SSO form_post return page via unencoded redirect/error values
W
Patch status unknownEPSS %0
4.3
CVE-2026-91164
Warpgate: API tokens bypass the user's allowed_ip_ranges restriction
W
Patch status unknownEPSS %0
7.7
CVE-2026-63330
Warpgate: Missing Admin Authorization on Live Recording Stream WebSocket Allows Any Authenticated User to Eavesdrop on Terminal Sessions
W
Patch status unknownEPSS %0
4.9
CVE-2026-63329
Warpgate: x-warpgate-username Header Not Stripped from Client Requests Enables Identity Spoofing to WebSocket Backend Targets
W
Patch status unknownEPSS %0
9.3
CVE-2026-58491
Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter
W
Patch status unknownEPSS %0