aEnrich
Security Scorecard
Score
35D
Total CVEs
2,473
Patch Rate
38%
938 patched
Avg Response
149d
days to patch
Critical Gaps
43
exploitable, no detection
Severity Breakdown
Critical210
High625
Medium998
Low29
Patch Status
Patched938 (38%)
Partial/Workaround293 (12%)
Unpatched1242 (50%)
CVEs (2,686)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2026-24566 | INet Webkit Broken Access Control Vulnerability | Medium | 6.5 | - | Patched |
| CVE-2026-24524 | aEnrich Auth Bypass | High | 8.1 | - | Patched |
| CVE-2026-24530 | Sheepfish WebP Conversion Vulnerability | High | 8.8 | - | Patched |
| CVE-2026-24532 | Sitelock Security Plugin Broken Access Control Vulnerability | High | 8.8 | - | Patched |
| CVE-2026-24543 | Materialis Companion Materialis Companion Vulnerability | Medium | 4.3 | 4d | Unpatched |
| CVE-2026-24565 | bAccordion Vulnerability | Medium | 6.5 | 4d | Unpatched |
| CVE-2026-24620 | aEnrich HR Admin Token Forgery | Medium | 5.9 | - | Patched |
| CVE-2025-71177 | LavaLite CMS Stored XSS | Medium | 5.4 | - | Patched |
| CVE-2026-23946 | Tendenci Deserialization Vulnerability | Medium | 6.8 | - | Patched |
| CVE-2026-23991 | go-tuf Denial of Service Vulnerability | Medium | 5.9 | - | Patched |