Monaco Iot Firmware
Vendor:
First CVE: Feb 2, 2026 · Active for under a year
12
Total CVEs
More Total CVEs than 91% of tracked products
12.0
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 52% of tracked products
8.3%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Monaco Iot Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 2, 2026
5 months ago
Most Recent CVE
Jun 1, 2026
57 days ago
CVE Severity & Scoring
Monaco Iot Firmware12 CVEs
17%
83%
All CVEs353,173 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local10 (83.3%)
Network2 (16.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (83.3%)
High2 (16.7%)
Unknown0 (0.0%)
User Interaction
None11 (91.7%)
Unknown0 (0.0%)
Required1 (8.3%)
Privileges Required
Low10 (83.3%)
High1 (8.3%)
None1 (8.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-21385HIGH Memory corruption while using alignments for memory allocation. | Mar 2, 2026 | 7.8 | 73 | YES | NO |
CVE-2025-59604HIGH Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer. | Jun 1, 2026 | 7.8 | 33 | NO | NO |
CVE-2025-59606HIGH Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization. | Jun 1, 2026 | 7.8 | 32 | NO | NO |
CVE-2025-47401HIGH Transient DOS when processing target power rate tables during channel configuration. | May 4, 2026 | 7.5 | 28 | NO | NO |
CVE-2025-47391HIGH Memory corruption while processing a frame request from user. | Apr 6, 2026 | 7.8 | 27 | NO | NO |
CVE-2025-47389HIGH Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation. | Apr 6, 2026 | 7.8 | 27 | NO | NO |
CVE-2025-59600HIGH Memory Corruption when adding user-supplied data without checking available buffer space. | Mar 2, 2026 | 7.8 | 27 | NO | NO |
CVE-2025-47373HIGH Memory Corruption when accessing buffers with invalid length during TA invocation. | Mar 2, 2026 | 7.8 | 27 | NO | NO |
CVE-2025-59610MEDIUM Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. | Jun 1, 2026 | 6.4 | 26 | NO | NO |
CVE-2025-47398HIGH Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers. | Feb 2, 2026 | 7.8 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (12 CVEs).
CISA KEV
1 CVE
8.3% of CVEs· 98th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (12 CVEs).
Media Mentions
Signals from CVEs in this product scope (12 CVEs).
Top CNAs Publishing CVEs For Monaco Iot Firmware
Top CWEs
Versions
No cataloged versions.