TU
Product
Tumbleweed
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
10.0
Max CVSS
2
New 30D
Severity mix
Critical 1High 3Medium 3Low 0
Watch
Add Tumbleweed to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-104618 | 6.2 | Oct 15 | sdbootutil: world-readable debug log Affected: ? before 278458aeb7d8f995c0e3dc9d19d2dcba50795a42 |
| CVE-2025-62875 | 5.5 | Nov 20 | Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock Affected: before 7.8.0p0-1.1 |
| CVE-2026-104617 | 5.1 | Oct 15 | sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline Affected: ? before 947e9dc09ce7c36b35a868e397e30245cc5544a1 |
Showing 3