Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Saltos

First CVE: Nov 16, 2018Active for: 8 yearsTotal CVEs: 7

Saltos develops a modestly scoped portfolio of access-control and identity-management products, including the Rhinos and Saltos platforms, that manage authentication and authorization for physical and logical security systems. The vendor's vulnerabilities skew strongly toward critical-severity outcomes and frequently acquire public exploit code; they cluster around web-application and input-handling weakness classes including cross-site scripting, SQL injection, CSRF, code injection, and exposure of sensitive information—patterns consistent with the web-facing nature of authentication and identity platforms. Defenders should prioritize patches for this vendor's products, particularly where they are internet-reachable; live exploitation activity and severity counts are shown alongside this summary.

FAUCET AI Generated
7
Total CVEs
More Total CVEs than 88% of tracked vendors
1.2
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 74% of tracked vendors
7.8
Avg CVSS Score
Higher Avg CVSS Score than 74% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Saltos over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 16, 2018
7 years ago
Most Recent CVE
May 27, 2024
788 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (7 CVEs).

7 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2018-18761CRITICAL
SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.
Nov 16, 20189.849NOYES
CVE-2018-18763CRITICAL
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.
Nov 16, 20189.841NOYES
CVE-2018-18762MEDIUM
SaltOS 3.1 r8126 contains a database download vulnerability.
Mar 21, 20196.532NOYES
CVE-2018-18760MEDIUM
RhinOS 3.0 build 1190 allows CSRF.
Nov 16, 20186.532NOYES
CVE-2024-5407CRITICAL
A vulnerability in RhinOS 3.0-1190 could allow PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could allow a remote attacker to perform
May 27, 20249.829NONO
CVE-2024-5409MEDIUM
RhinOS 3.0-1190 is vulnerable to an XSS via the "tamper" parameter in /admin/lib/phpthumb/phpthumb.php. An attacker could create a malicious URL and send it to a victim to obtain t
May 27, 20246.120NONO
CVE-2024-5408MEDIUM
Vulnerability in RhinOS 3.0-1190 consisting of an XSS through the "search" parameter of /portal/search.htm. This vulnerability could allow a remote attacker to steal details of a v
May 27, 20246.120NONO
View all 7 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products7 CVEs
57%
43%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumCritical
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (42.9%)
Unknown0 (0.0%)
Required4 (57.1%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None7 (100.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (7 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
57.1% of CVEs· 83rd percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Saltos.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Saltos — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Saltos's Products

View all 2 CNAs →

Top CWEs