zdi
Security Risk Profile
81
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 3 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 12, 2025 to present
3
Total CVEs
3
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
9.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
81/100
critical
Severity Distribution
Critical
2High
1Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. ZDI win-cli-mcp-server2
2. win-cli-mcp-server win-cli-mcp-server2
3. Tracker Software PDF-XChange Editor1
4. ZDI PDF-XChange Editor1
Recent Vulnerabilities
See more →ZDI-25-930
CVSS 9.8critical
win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability
10/3/2025🔧 No Patch
ZDI-CAN-27787
CVSS 9.8critical
ZDI-25-930: win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability
10/3/2025🔧 No Patch
ZDI-25-129
CVSS 7.8high
PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
3/12/2025🔧 No Patch
Monitor zdi in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.