M
Meta
Security Risk Profile
53
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 43 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 29, 2024 to present
43
Total CVEs
5
Critical+High
14
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
7.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
53/100
medium
⚠️ 14 Active Exploits⚡ 13 Zero-Days🆕 3Fresh (<7d)📈 5 in Last 30 Days
Severity Distribution
Critical
3High
2Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Use After Free
3
2
Path Traversal
1
3
OS Command Injection
1
4
Command Injection
1
5
XSS
1
Most Affected Products
1. Vercel Next.js Node.js167
2. Meta WhatsApp22
3. Meta React10
4. Facebook React7
5. npm/react-server-dom-webpack6
Recent Vulnerabilities
See more →CVE-2026-91096
unknown
Sep 28, 2026🔧 No Patch
CVE-2026-91095
unknown
Sep 28, 2026🔧 No Patch
CVE-2026-84895
unknown
Sep 28, 2026🔧 No Patch
CVE-2026-79407
CVSS 7.5high
Aug 31, 2026🔧 No Patch
CVE-2026-79408
CVSS 9.8critical
Aug 31, 2026🔧 No Patch
https://www.zdnet.com/article/microsoft-obliterated-ai-safety-guardrails-with-one-prompt/
unknown
How Microsoft obliterated safety guardrails on popular AI models - with just one prompt
Feb 9, 2026🔧 No Patch
https://www.theregister.com/2026/02/03/critical_react_native_metro_server/
unknown
Critical React Native Metro dev server bug under attack as researchers scream into the void
Feb 3, 2026⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/researcher-reveals-evidence-of-private-instagram-profiles-leaking-photos/
unknown
Researcher reveals evidence of private Instagram profiles leaking photos
Jan 31, 2026⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/critical-react2shell-flaw-exploited-in-ransomware-attacks/
unknown
Critical React2Shell flaw exploited in ransomware attacks
Dec 17, 2025⚠ Exploited⚡ Zero-Day🔧 No Patch
https://www.theregister.com/2025/12/12/new_react_secretleak_bugs/
unknown
New React vulns leak secrets, invite DoS attacks
Dec 12, 2025⚡ Zero-Day🔧 No Patch
Monitor Meta in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.