Skip to content
Sign in

Vite product

Several products

Alert
No Several products CVE is in the CISA KEV catalogue.

Tracked since 2 Apr · latest article 21 Sep · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

1High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date

No Several products CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds Several products CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a Several products CVE to KEV.

Fix listed

2 of 3 CVEs in coverage

1 CVE has no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2025-30208: 99.5th percentileCVE-2026-39364: 82.9th percentileCVE-2024-45811: 65.5th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2025-3020899.5
CVE-2026-3936482.9
CVE-2024-4581165.5

Coverage3 articles · all time

The latest 3 articles naming Several products, in the shared story grammar.

Full timeline
Quiet for 6 weekslast report 21 Sep3 articles2 outlets

3 articles from 2 outlets since 2 Apr. Quiet since 21 Sep.

Now2 Apr13 Sep19232725811151923First reportSANS ISC · 2 Apr, 16:40Exploited CVESecurityOnline · 21 Sep
  • Thu 2 Apr, 16:40 UTC. SANS ISC, first report. Attempts to Exploit Exposed "Vite" Installs (CVE-2025-30208), (Thu, Apr 2nd).
  • Tue 15 Sep, 02:21 UTC. SecurityOnline, its first report on the story. Attackers Scan Vite Servers to Steal Cloud Credentials via CVE-2026-39364.
  • Mon 21 Sep, 02:59 UTC. SecurityOnline. Cisco Warns of Actively Exploited Flaws Enabling Root Access. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 3 articles as a list
  1. Thu 2 AprDay 01
    1. Attempts to Exploit Exposed "Vite" Installs (CVE-2025-30208), (Thu, Apr 2nd)16:40 · SANS ISC · First report

  2. Quiet for 24 weeks

    Tue 15 SepDay 1661
    1. Attackers Scan Vite Servers to Steal Cloud Credentials via CVE-2026-3936402:21 · SecurityOnline · Picked up again

  3. Quiet for 6 days

    Mon 21 SepDay 1721
    1. Cisco Warns of Actively Exploited Flaws Enabling Root Access02:59 · SecurityOnline · Exploited CVE · Picked up again · Known exploited CVE

All CVEs in coverage3

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2025-30208

    vitejs vite vulnerability

    5.3Medium75% EPSS · 1 article
  • CVE-2026-39364

    Vite has a `server.fs.deny` bypass with queries

    8.2High2.3% EPSS · 2 articles
  • CVE-2024-45811

    server.fs.deny bypassed when using ?import&raw in vite

    4.8Medium1.1% EPSS · 0 articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in