w
warpgate
Security Risk Profile
37
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 12, 2026 to present
5
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
37/100
low
📈 4 in Last 30 Days
Severity Distribution
Critical
1High
1Medium
2Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
2
2
CSRF
1
Most Affected Products
1. Warpgate Warpgate5
2. Warpgate Project Warpgate1
Recent Vulnerabilities
See more →CVE-2026-91165
CVSS 2.4low
Warpgate: Markup injection in SSO form_post return page via unencoded redirect/error values
Sep 21, 2026🔧 No Patch
CVE-2026-91164
CVSS 4.3medium
Warpgate: API tokens bypass the user's allowed_ip_ranges restriction
Sep 21, 2026🔧 No Patch
CVE-2026-63330
CVSS 7.7high
Warpgate: Missing Admin Authorization on Live Recording Stream WebSocket Allows Any Authenticated User to Eavesdrop on Terminal Sessions
Sep 21, 2026🔧 No Patch
CVE-2026-58491
CVSS 9.3critical
Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter
Sep 21, 2026🔧 No Patch
CVE-2026-44347
CVSS 6.5medium
Warpgate: SSO CSRF -- State Token Not Validated on Return
May 12, 2026🔧 No Patch
Monitor warpgate in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.