boxscore/security
VENDOR · referenceVendors · latest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

Cemtan

Vendor reference — Cemtan · sector: Other. Cumulative disclosure record across the archive.

Follow Cemtan — Atom feed

Career totals

Disclosures & known-exploited
All-timeYTD
CVEs66
KEV entries00
Rate & severity
KEV/100Med CVSSMed EPSSCHML
0.06.2.00330051

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over all disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▂▁█

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2026-081
2026-090
2026-105

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-1106695.547.3MEDIUM—2026-10-14
CVE-2026-1106666.941.5MEDIUM—2026-10-14
CVE-2026-1106685.526.3MEDIUM—2026-10-14
CVE-2026-187192.123.0LOW—2026-08-04
CVE-2026-1106676.922.0MEDIUM—2026-10-14
CVE-2026-1106706.918.6MEDIUM—2026-10-14

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-1106706.918.6MEDIUM—2026-10-14
CVE-2026-1106666.941.5MEDIUM—2026-10-14
CVE-2026-1106685.526.3MEDIUM—2026-10-14
CVE-2026-1106676.922.0MEDIUM—2026-10-14
CVE-2026-1106695.547.3MEDIUM—2026-10-14
CVE-2026-187192.123.0LOW—2026-08-04

Products

This vendor's products with a reference page (≥2 disclosures), by CVE count. A monolithic vendor total dilutes signal; product pages sharpen it.

Products (by CVE count)
ProductCVEsKEV
Sar2html60

KEV entries

No entries in the CISA KEV catalog.

KEV timing

Fastest to KEV
CVEDays
—
Longest unpatched (KEV due date passed)
CVEDueDays over
—

Methodology

Rate statistics are arithmetic over published figures: KEV/100 = KEV entries ÷ CVEs × 100; medians are taken over this vendor's disclosures. Vendor names are normalized (case, punctuation, common aliases) before aggregation; monthly counts are keyed to first-seen day, the day this archive first observed the record, not the upstream publication date.

Raw counts are not comparable across vendors: disclosure practices, product breadth, and CNA conventions differ widely, so a larger number here does not mean less secure software. This is a reference page assembled from the public record — not a record of its own, and not a ranking of vendors by our judgment.

Sources. CVE records from the CVE Program (cvelistV5); enrichment from NVD (NIST); known-exploited status from the CISA KEV catalog; exploit probability from FIRST EPSS.