i
ietf
Security Risk Profile
32
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 25 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 25, 2007 to present
25
Total CVEs
8
Critical+High
2
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
32/100
low
⚠️ 2 Active Exploits⚡ 2 Zero-Days🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
1High
7Medium
15Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
CSRF
1
Most Affected Products
1. Microsoft Windows 1022
2. Apache Tomcat14
3. Cisco IOS XE11
4. alpine/nghttp210
5. alpine/nginx10
Recent Vulnerabilities
See more →CVE-2026-125373
CVSS 5.3medium
IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views
Nov 9, 2026🔧 No Patch
CVE-2026-44434
CVSS 5.3medium
Quicly is vulnerable to stateless reset injection
Jul 16, 2026🔧 No Patch
REDHAT-BUG-2456338
CVSS 7.0high
Apr 8, 2026🔧 No Patch
https://www.theregister.com/2025/08/14/madeyoureset_http2_flaw_lets_attackers/
unknown
'MadeYouReset' HTTP/2 flaw lets attackers DoS servers
Aug 14, 2025🔧 No Patch
CVE-2025-27371
CVSS 6.9EPSS 0%medium
Mar 3, 2025🔧 No Patch
CVE-2024-7596
CVSS 6.5medium
Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet
Feb 5, 2025🔧 No Patch
CVE-2024-7595
CVSS 6.5medium
GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet
Feb 5, 2025🔧 No Patch
CVE-2025-23018
CVSS 6.5EPSS 0%medium
Jan 14, 2025🔧 No Patch
CVE-2025-23019
CVSS 6.5EPSS 0%medium
Jan 14, 2025🔧 No Patch
CVE-2023-50923
CVSS 4.3medium
Feb 20, 2024🔧 No Patch
Monitor ietf in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.