r
rpm
Security Risk Profile
34
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 38 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 6, 2006 to present
38
Total CVEs
17
Critical+High
0
Exploited
8
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
1%
Exploit probability
Unpatched
8
Critical/High
Risk Level
34/100
low
📈 5 in Last 30 Days
Severity Distribution
Critical
3High
14Medium
20Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
8
2
Command Injection
3
3
Integer Overflow
3
4
Input Validation
3
5
OS Command Injection
2
Most Affected Products
1. RPM RPM639
2. rpm rpm395
3. redhat/rpm15
4. Fedoraproject Fedora12
5. redhat Enterprise Linux11
Recent Vulnerabilities
See more →CVE-2026-103242
CVSS 7.1high
Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag
Sep 30, 2026🔧 No Patch
CVE-2026-95521
CVSS 7.8EPSS 1%high
Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm
Sep 22, 2026🔧 No Patch
REDHAT-BUG-2537812
CVSS 4.0medium
Sep 22, 2026🔧 No Patch
CVE-2026-95520
CVSS 7.1high
Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages
Sep 22, 2026🔧 No Patch
REDHAT-BUG-2537809
CVSS 4.0medium
Sep 22, 2026🔧 No Patch
CVE-2026-44605
CVSS 5.5medium
Rpm: heap buffer overflow in ndb slot table parsing
May 28, 2026
REDHAT-BUG-2482481
CVSS 1.0low
May 28, 2026🔧 No Patch
REDHAT-BUG-2460967
CVSS 4.0medium
Apr 23, 2026🔧 No Patch
REDHAT-BUG-2440357
CVSS 4.0medium
Feb 17, 2026🔧 No Patch
CVE-2024-1929
CVSS 8.4high
Local Root Exploit via Configuration Dictionary
Mar 4, 2024
Monitor rpm in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.