Z
Üretici güvenlik profili
ZenHive
Ürün portföyü, yama kanıtları ve sömürü sinyalleri tek güvenlik karnesinde
Veriler CVE Programı, NVD, CISA KEV ve üretici güvenlik bültenlerinden birleştirilir.
Toplam CVE8
Kritik0
CISA KEV0
Public exploit1
Yama oranı%100
Ort. CVSS7.4
12 aylık açık hızı
0
0
0
0
0
0
0
0
0
4
4
0
CVE KEV
CVE önem dağılımı
8toplam CVE
Yüksek5 (63%)
Orta3 (38%)
Yama ve sömürü görünümü
%100
Doğrulanmış yama
%0
CISA KEV
%13
Public exploit
8Yama var
0Kısmi
0Geçici çözüm
0Üretici: yama yok
0Bilinmiyor
Son güvenlik açıkları
8.2
CVE-2026-87119
mpp Tempo subscription key authorization is not bound to the issuing challenge, allowing a captured activation credential to be replayed
Z
Yama doğrulandıEPSS %1
7.1
CVE-2026-89420
Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free
Z
Yama doğrulandıEPSS %0
6.3
CVE-2026-88255
mpp Tempo keys its pre-broadcast dedup reserve on the caller-supplied transaction encoding, so a re-encoded signed transaction reserves a second slot
Z
Yama doğrulandıEPSS %1
6.3
CVE-2026-89186
mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared caches
Z
Yama doğrulandıEPSS %1
8.7
CVE-2026-67581
On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay
Z
Yama doğrulandıEPSS %1
8.3
CVE-2026-73541
Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain
Z
Yama doğrulandıEPSS %1
8.2
CVE-2026-73136
Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay
Z
Yama doğrulandıEPSS %1
6.3
CVE-2026-73829
Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent race
Z
Yama doğrulandıEPSS %0