Known
Vendor:
First CVE: Jul 8, 2022 · Active for 4 years
7
Total CVEs
More Total CVEs than 83% of tracked products
3.5
Avg CVEs / Year
Higher CVE frequency than 82% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 44% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Known over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 8, 2022
4 years ago
Most Recent CVE
Mar 6, 2026
141 days ago
CVE Severity & Scoring
Known7 CVEs
43%
43%
14%
All CVEs352,708 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None4 (57.1%)
Unknown0 (0.0%)
Required3 (42.9%)
Privileges Required
Low2 (28.6%)
High1 (14.3%)
None4 (57.1%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-26273CRITICAL Known is a social publishing platform. Prior to 1.6.3, a Critical Broken Authentication vulnerability exists in Known 1.6.2 and earlier. The application leaks the password reset to | Feb 13, 2026 | 9.8 | 33 | NO | NO |
CVE-2026-28508HIGH Idno is a social publishing platform. Prior to version 1.6.4, a logic error in the API authentication flow causes the CSRF protection on the URL unfurl service endpoint to be trivi | Mar 6, 2026 | 8.6 | 25 | NO | NO |
CVE-2026-28507HIGH Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue h | Mar 6, 2026 | 7.2 | 23 | NO | NO |
CVE-2022-33011HIGH Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack. | Jul 8, 2022 | 8.8 | 22 | NO | NO |
CVE-2022-32115MEDIUM An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file. | Jul 8, 2022 | 6.1 | 22 | NO | NO |
CVE-2022-31290MEDIUM A cross-site scripting (XSS) vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into th | Jul 8, 2022 | 5.4 | 20 | NO | NO |
CVE-2022-30852MEDIUM Known v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR). | Jul 8, 2022 | 4.3 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Known
Top CWEs
Versions
No cataloged versions.