Carnegie Mellon University's vulnerability footprint centers on a modestly represented set of security-focused infrastructure products, most notably the Cyrus IMAP server and SASL authentication library, which are embedded across mail and authentication systems. Vulnerabilities affecting these products skew toward serious outcomes and recur through memory-safety and path-handling weakness classes—including buffer overflows, path-traversal flaws, link-following conditions, and cross-site scripting—that reflect the parsing and filesystem-access demands of mail and authentication middleware. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Cmu over time
Signals from CVEs in this vendor scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-22189CRITICAL The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains a stack-based buffer overflow vulnerability due to use of an unbounded sprintf() call with attacker- | Jan 7, 2026 | 9.8 | 36 | NO | NO |
CVE-2022-31506CRITICAL The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | Jul 11, 2022 | 9.3 | 28 | NO | NO |
CVE-2026-22190HIGH The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains an uncontrolled format string vulnerability. The -gp (glyph pattern) command-line option is used dir | Jan 7, 2026 | 7.5 | 27 | NO | NO |
CVE-2026-35467HIGH The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials. | Apr 2, 2026 | 7.5 | 26 | NO | NO |
CVE-2011-3208HIGH Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitra | Sep 14, 2011 | 7.5 | 25 | NO | NO |
CVE-1999-0799HIGH Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location. | Jun 1, 1997 | 10.0 | 25 | NO | NO |
CVE-2026-35466MEDIUM XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services | Apr 2, 2026 | 6.1 | 23 | NO | NO |
CVE-2025-27092HIGH GHOSTS is an open source user simulation framework for cyber experimentation, simulation, training, and exercise. A path traversal vulnerability was discovered in GHOSTS version 8. | Feb 19, 2025 | 7.5 | 23 | NO | NO |
CVE-2026-22188MEDIUM The deploy-stub component in Panda3D versions up to and including 1.10.16 contains a denial of service vulnerability due to unbounded stack allocation. The deploy-stub executable a | Jan 7, 2026 | 5.5 | 22 | NO | NO |
CVE-2009-0663HIGH Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl might allow context-dependent attackers to execute arbitrary code via unspecified inpu | Apr 30, 2009 | 7.5 | 20 | NO | NO |
Signals from CVEs in this vendor scope (16 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Cmu.
Media articles that mention a CVE ID that affects a product developed by Cmu — matched by CVE ID, not by vendor name.