p
phoenix
Security Risk Profile
44
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 13, 2019 to present
10
Total CVEs
5
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
44/100
medium
Severity Distribution
Critical
0High
5Medium
4Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
2
2
XSS
1
Most Affected Products
1. Phoenixtech Securecore Technology29
2. Phoenix SecureCore13
3. phoenixframework phoenix4
4. erlang/phoenix4
5. Phoenix Securecore Technology3
Recent Vulnerabilities
See more →CVE-2026-56811
CVSS 8.7high
Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service
Jul 7, 2026
CVE-2025-5255
CVSS 4.8EPSS 0%medium
TCC Bypass via Dylib Injection in Phoenix Code
Jun 20, 2025🔧 No Patch
CVE-2025-40727
CVSS 5.1medium
Reflected Cross-Site Scripting (XSS) in Phoenix CMS
Jun 16, 2025🔧 No Patch
CVE-2024-12533
CVSS 3.3low
May 13, 2025🔧 No Patch
CVE-2024-29979
CVSS 4.6EPSS 0%medium
Unsafe Handling of Phoenix UEFI Variables
Jan 14, 2025🔧 No Patch
CVE-2024-29980
CVSS 4.6EPSS 0%medium
Unsafe Handling of IHV UEFI Variables
Jan 14, 2025🔧 No Patch
CVE-2024-1598
CVSS 7.8high
Potential buffer overflow when handling UEFI variables
May 14, 2024🔧 No Patch
CVE-2024-0762
CVSS 7.8high
Potential buffer overflow when handling UEFI variables
May 14, 2024🔧 No Patch
CVE-2023-35841
CVSS 7.8high
WinFlash Driver Permissions Issue
May 14, 2024🔧 No Patch
CVE-2019-18279
CVSS 8.8high
Nov 13, 2019🔧 No Patch
Monitor phoenix in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.