Echo Software Ltd.
First CVE: May 4, 2026Active for: 1 year
1
CVEs Published
Bottom 1%
1.0
Avg CVEs / Year
Bottom 1%
9.1
Avg CVSS Score
Higher Avg CVSS Score than 98% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%
Self-Reporting Analysis
Of all the CVEs published by Echo Software Ltd. as a CNA, 0.0% affect products that Echo Software Ltd. develops as a vendor.
100.0%
Self-reported: 0Third-party: 1
Of all the CVEs published that affect products developed by Echo Software Ltd., 0.0% are self-published by Echo Software Ltd. as a CNA.
100.0%
Self-published: 0Published by other CNAs: 1
Trends Over Time
The number and severity of CVEs published by Echo Software Ltd. over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 4, 2026
2 months ago
Most Recent CVE
May 4, 2026
81 days ago
Top CVEs
All CVEs published by Echo Software Ltd. as a CNA, regardless of affected vendor or product.
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-7482CRITICAL Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file in which the declare | May 4, 2026 | 9.1 | 44 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA1 CVEs
100%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
Critical
Attack Vector
Local0 (0.0%)
Network1 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (100.0%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (1 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by Echo Software Ltd. as a CNA.
Media Mentions
Media articles that mention a CVE ID published by Echo Software Ltd. as a CNA — matched by CVE ID, not by organization name.