Z
Vendor security profile
ZenHive
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical0
CISA KEV0
Public exploit1
Patch rate%100
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
4
4
0
CVE KEV
CVE severity distribution
8toplam CVE
High5 (63%)
Medium3 (38%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%13
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
8.2
CVE-2026-87119
mpp Tempo subscription key authorization is not bound to the issuing challenge, allowing a captured activation credential to be replayed
Z
Patch verifiedEPSS %1
7.1
CVE-2026-89420
Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free
Z
Patch verifiedEPSS %0
6.3
CVE-2026-88255
mpp Tempo keys its pre-broadcast dedup reserve on the caller-supplied transaction encoding, so a re-encoded signed transaction reserves a second slot
Z
Patch verifiedEPSS %1
6.3
CVE-2026-89186
mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared caches
Z
Patch verifiedEPSS %1
8.7
CVE-2026-67581
On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay
Z
Patch verifiedEPSS %1
8.3
CVE-2026-73541
Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain
Z
Patch verifiedEPSS %1
8.2
CVE-2026-73136
Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay
Z
Patch verifiedEPSS %1
6.3
CVE-2026-73829
Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent race
Z
Patch verifiedEPSS %0