SecAlerts
c

coinbase

Security Risk Profile

27
/100
low

Security Risk Score

Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 2, 2024 to present

8
Total CVEs
0
Critical+High
2
Exploited
0
Unpatched

Threat Assessment

Avg CVSS
5.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
27/100
low
⚠️ 2 Active Exploits🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical
0
High
0
Medium
1
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

No CWE data available

Most Affected Products

1. Coinbase Coinbase4
2. tj-actions changed-files3
3. SpotBugs SpotBugs2
4. reviewdog Reviewdog2
5. Coinbase Commerce Payment Gateway for WooCommerce1

Recent Vulnerabilities

See more →
CVE-2026-103311
CVSS 5.3medium

Coinbase Commerce Payment Gateway for WooCommerce <= 1.4.1 - Unauthenticated Webhook Signature Bypass via Empty-Default Webhook Shared Secret

Oct 19, 2026🔧 No Patch
https://www.theregister.com/2025/11/17/coinbase_breach_timeline/
unknown

Security researcher calls BS on Coinbase breach disclosure timeline

Nov 17, 2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/dozens-of-fake-wallet-add-ons-flood-firefox-store-to-drain-crypto/
unknown

Dozens of fake wallet add-ons flood Firefox store to drain crypto

Jul 2, 2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/coinbase-fixes-2fa-log-error-making-people-think-they-were-hacked/
unknown

Coinbase fixes 2FA log error making people think they were hacked

Apr 27, 2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/coinbase-to-fix-2fa-account-activity-entry-freaking-out-users/
unknown

Coinbase to fix 2FA account activity entry freaking out users

Apr 5, 2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/recent-github-supply-chain-attack-traced-to-leaked-spotbugs-token/
unknown

Recent GitHub supply chain attack traced to leaked SpotBugs token

Apr 3, 2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/coinbase-was-primary-target-of-recent-github-actions-breaches/
unknown

Coinbase was primary target of recent GitHub Actions breaches

Mar 21, 2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/hackers-target-fcc-crypto-firms-in-advanced-okta-phishing-attacks/
unknown

Hackers target FCC, crypto firms in advanced Okta phishing attacks

Mar 2, 2024🔧 No Patch

Monitor coinbase in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

coinbase Security Vulnerabilities & Risk Score | 8 CVEs | SecAlerts - SecAlerts