Cyberduck
Security Risk Profile
57
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 15, 2017 to present
4
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
57/100
medium
Severity Distribution
Critical
0High
2Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. Cyberduck Cyberduck4
2. Mountain Duck Mountain Duck2
3. Microsoft Windows1
4. Microsoft Windows Subsystem For Linux1
5. AnyDesk AnyDesk1
Recent Vulnerabilities
See more →https://www.bleepingcomputer.com/news/security/qilin-ransomware-abuses-wsl-to-run-linux-encryptors-in-windows/
unknown
Qilin ransomware abuses WSL to run Linux encryptors in Windows
10/28/2025🔧 No Patch
CVE-2025-41255
CVSS 8.0high
Cyberduck and Mountain Duck - Improper Certificate Store Handling
6/25/2025🔧 No Patch
CVE-2025-41256
CVSS 7.4high
Cyberduck and Mountain Duck - Weak Hash Algorithm for Certificate Fingerprint
6/25/2025🔧 No Patch
CVE-2014-2845
CVSS 5.9medium
11/15/2017🔧 No Patch
Monitor Cyberduck in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.