p
psono
Security Risk Profile
35
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 21, 2025 to present
6
Total CVEs
1
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
35/100
low
🆕 5Fresh (<7d)📈 5 in Last 30 Days
Severity Distribution
Critical
1High
0Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
SSRF
1
2
XSS
1
Most Affected Products
1. Bitdefender SecurePass6
2. Psono Psono Server2
3. Psono Psono Server CE and EE1
4. Psono Psono Server CE1
5. Psono Psono Server EE1
Recent Vulnerabilities
See more →CVE-2026-117472
CVSS 4.3medium
URL prefix handling permits API key read-scope bypass in Psono Server
Oct 27, 2026🔧 No Patch
CVE-2026-117471
CVSS 5.4medium
User-controlled Duo host permits authenticated SSRF in Psono Server
Oct 27, 2026🔧 No Patch
CVE-2026-117470
CVSS 6.5medium
WebAuthn assertion replay permits second-factor bypass in Psono Server
Oct 27, 2026🔧 No Patch
CVE-2026-117469
CVSS 5.4medium
File-transfer type confusion permits unauthorized repository writes in Psono Server
Oct 27, 2026🔧 No Patch
CVE-2026-117468
CVSS 6.5medium
Device-code claim permits restricted token escalation in Psono Server
Oct 27, 2026🔧 No Patch
CVE-2025-1987
CVSS 9.3critical
Stored XSS in Psono-Client via Malicious Vault Entry URLs
Jun 21, 2025
Monitor psono in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.