a2a

Security Risk Profile

/100

low

Security Risk Score

Comprehensive risk assessment based on 2 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from October 20, 2026 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

6.7

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

37/100

low

🆕 2Fresh (<7d)📈 2 in Last 30 Days

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

SSRF

Most Affected Products

1. A2A A2A Java SDK2

2. maven/org.a2aproject.sdk:a2a-java-sdk-http-client-android1

3. maven/org.a2aproject.sdk:a2a-java-sdk-server-common1

Recent Vulnerabilities

See more →

CVE-2026-111765

CVSS 7.5high

A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix

Oct 20, 2026

CVE-2026-111761

CVSS 5.8medium

A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery