3,847
Active Findings
2,104 distinct CVEs
142
Critical
12 exploited (KEV)
891
High
31 exploited (KEV)
1,624
Medium
—
1,190
Low
—
423
Aged > 90 Days
Across 178 assets
718
Unactioned CVEs
No triage status set
—
⏰ Overdue
past SLA deadline
—
KEV Exploited
CISA Known Exploited
—
Verification Failed
RemFlow fix not confirmed
Severity Distribution
Critical 142
High 891
Medium 1,624
Low 1,190
Known Exploited Vulnerabilities (CISA KEV)
Critical
12
High
31
Medium
5
Findings
| CVE | Check / Plugin | Asset | Port | Severity | State | KEV | Days to Due | First Seen | ★ |
|---|---|---|---|---|---|---|---|---|---|
| CVE-2026-12345 | Apache Log4j Remote Code Execution | WEB-PROD-03 | 443/tcp | Critical | Active | ⚠ | 2026-02-14 | ☆ | |
| CVE-2026-11223 | Windows Print Spooler Elevation | DC-PROD-01 | 445/tcp | High | Active | ⚠ | 2026-01-08 | ★ | |
| CVE-2026-09876 | OpenSSL X.509 Certificate Parsing | APP-PROD-07 | 8443/tcp | Medium | Active | 2025-11-20 | ☆ | ||
| CVE-2026-04567 | Linux Kernel Privilege Escalation | DB-PROD-02 | 22/tcp | High | Active | 2026-03-05 | ☆ | ||
| CVE-2026-33445 | Microsoft Exchange Server RCE | EXCH-PROD-01 | 443/tcp | Critical | Fixed | ⚠ | 2026-04-12 | ★ |
Showing 5 of 3,847 findings — counts frozen between imports
Disposition Breakdown — Active Findings
🖥️ Top Server Roles — Vulnerabilities by Role
🪦 End of Life Risk — OS & Software
0
🪦 EOL Now
0
⏳ Approaching (≤180d)
0
✅ Supported
0
❓ Unknown OS
📊 Security Posture Overview
—%
Overall Score
— (—)
Patch Compliance0%
Auto-Remediation0%
KEV Response0%
Finding Resolution0%
SLA Compliance0%
CVE-2026-12345
Critical
CVSS 9.8
⚠ KEV
Apache Log4j Remote Code Execution (Log4Shell)
Apache Log4j2 versions 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker-controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled.
Exploited: 2021-12-10
Due: 2021-12-24
Ransomware: Yes
| Asset | Check / Plugin | Port | State | Status | Owner | First Seen | Last Observed |
|---|---|---|---|---|---|---|---|
| WEB-PROD-03 | Apache Log4j Remote Code Execution | 443/tcp | Active | Open | jsmith | 2026-02-14 | 2026-06-28 |
| WEB-PROD-07 | Apache Log4j Remote Code Execution | 443/tcp | Active | Open | — | 2026-02-14 | 2026-06-28 |
| APP-PROD-02 | Log4j Detected (Windows Agent) | 8080/tcp | Active | Risk Accepted | mwilson | 2026-03-01 | 2026-06-27 |
| APP-PROD-05 | Apache Log4j (Linux RPM Check) | 8080/tcp | Active | Open | — | 2026-03-15 | 2026-06-28 |
| ADMIN-DEV-01 | Log4j Vulnerability Scan (Scanner) | 8443/tcp | Active | Open | — | 2026-04-20 | 2026-06-25 |
| Asset | IP | OS | EOL Status | Site | Owner | Active CVEs | Critical | High | Last Seen |
|---|---|---|---|---|---|---|---|---|---|
| WEB-PROD-03 | 10.23.4.17 | Ubuntu 22.04 LTS | ✅ Supported | US-East (nyc1) | Platform Engineering | 47 | 3 | 14 | 2026-06-28 |
| DC-PROD-01 | 10.23.1.4 | Windows Server 2022 | ✅ Supported | US-East (nyc1) | Infrastructure | 32 | 5 | 11 | 2026-06-27 |
| DB-PROD-02 | 10.23.8.55 | RHEL 9.3 | ✅ Supported | EU-Central (fra1) | Database & Storage | 28 | 2 | 8 | 2026-06-28 |
| EXCH-PROD-01 | 10.23.2.12 | Windows Server 2022 | ✅ Supported | US-West (sfo1) | Infrastructure | 19 | 1 | 6 | 2026-06-26 |
| APP-PROD-07 | 10.23.5.88 | Ubuntu 22.04 LTS | ✅ Supported | US-East (nyc1) | Application Services | 41 | 4 | 12 | 2026-06-28 |
| Solution / Remediation | CVEs | Assets | Severity Range | |
|---|---|---|---|---|
| Upgrade Apache Log4j to version 2.17.1 or later | 2 | 12 | Critical | |
| Apply Microsoft Security Update KB5012345 for Print Spooler | 3 | 34 | High | |
| Upgrade OpenSSL to 3.0.12+ / 1.1.1w+ | 5 | 18 | Medium | |
| Deploy updated kernel package: linux-image-5.15.0-91-generic | 4 | 22 | High | |
| Install Microsoft Exchange Server SU CU23 Jan 2026 | 1 | 3 | Critical |
Infrastructure
Core network, domain controllers, DNS, DHCP
1,204
Total
48
Critical
312
High
24
KEV
Platform Engineering
Kubernetes, container registry, CI/CD pipelines
892
Total
31
Critical
204
High
18
KEV
Security Operations
SOC, incident response, threat hunting
673
Total
22
Critical
156
High
8
KEV
Application Services
Web apps, APIs, middleware, messaging
541
Total
19
Critical
98
High
13
KEV
Database & Storage
RDBMS, NoSQL, SAN/NAS, backup infrastructure
387
Total
15
Critical
89
High
3
KEV
End-User Computing
VDI, workstations, MDM, printing
150
Total
7
Critical
32
High
2
KEV
Endpoint Engineering
macOS MDM, macOS fleet, endpoint compliance, Zero Trust
218
Total
8
Critical
47
High
6
KEV
Infrastructure
Core network, domain controllers, DNS, DHCP
Scope: tags env=production function=infra | Sites: US-East, US-West, EU-Central
1,204
Total
↓ 18 vs last month
48
Critical
↓ 3 vs last month
312
High
↓ 7 vs last month
526
Medium
↓ 5 vs last month
318
Low
↓ 3 vs last month
203
Unactioned
↓ 12 vs last month
89
Aged > 90d
↓ 4 vs last month
67 assets in scope
| Asset | IP | OS | Site | Active CVEs | Critical | High | Last Seen |
|---|---|---|---|---|---|---|---|
| DC-PROD-01 | 10.23.1.4 | Windows Server 2022 | US-East (nyc1) | 32 | 5 | 11 | 2026-06-27 |
| DC-PROD-02 | 10.23.1.5 | Windows Server 2022 | US-East (nyc1) | 28 | 4 | 9 | 2026-06-28 |
| EXCH-PROD-01 | 10.23.2.12 | Windows Server 2022 | US-West (sfo1) | 19 | 1 | 6 | 2026-06-26 |
| DNS-PROD-01 | 10.23.1.10 | RHEL 9.3 | US-East (nyc1) | 15 | 2 | 5 | 2026-06-28 |
| FW-PROD-01 | 10.23.0.1 | PAN-OS 11.1 | US-East (nyc1) | 12 | 0 | 3 | 2026-06-27 |
🚨 Exceptions — Active Risk Acceptances
| CVE | Asset | Justification | Accepted By | Accepted At | Expires | Days Left |
|---|
📄 Vulnerability Scanner Import
CSV Import
Drop Vulnerability Scanner .csv export here
or click to browse — .csv files only
💻 SCCM / PDQ Device Export
CSV Import
Drop SCCM or PDQ .csv export here
or click to browse — .csv files only
🔗 Import Summary & Enrichment
No data imported yet. Upload vulnerability scan and device export CSV files above.
🌐 CISA KEV Catalog
Live Feed
Loading KEV catalog...
🏷️ Snipe-IT Asset Management API
REST API
Sample CSV Formats
Vulnerability Scanner CSV columns:
Plugin ID, CVE, CVSS, Risk, Host, Protocol, Port, Name, Synopsis, Description, Solution, See Also, Plugin Output
SCCM/PDQ CSV columns:
Name, OperatingSystem, ADSite, ADOU, LastLogonUser, Manufacturer, Model, SystemRole, IsVirtual, Processor, Memory, DiskSpace
Users
| User | Username | Role | Teams | Last Login | |
|---|---|---|---|---|---|
DA David Admin |
david | Admin | All | 2026-06-28 07:12 | |
JS Jane Smith |
jsmith | User | Infrastructure, Platform Engineering | 2026-06-28 06:55 | |
MW Mike Wilson |
mwilson | User | Security Operations | 2026-06-27 14:30 | |
RK Rachel Kim |
rkim | User | Application Services | 2026-06-27 10:18 |
Authentication
Mode:
Local (username/password)
OIDC not configured
Set
OIDC_ISSUER, OIDC_CLIENT_ID, OIDC_CLIENT_SECRET env vars to enable OIDC.
⏰ SLA Due-Date Policy
Non-KEV vulnerability findings are assigned a severity-based due date measured from first detection (firstSeen). KEV-matched findings use the CISA BOD 22-01 federal deadline.
days
days
days
days
Changelog
2026-07-24 — v6.2.0
🚨 Phase 2.2 — Expiring Risk Acceptances: Structured exception records with justification, accepted_by, expires_at, and optional compensating controls. Risk Accepted now requires a modal form with inline validation (min 20-char justification). Auto-expiry engine checks every 60s and reverts expired exceptions to Open with audit trail entries. New "Exceptions" sidebar page shows all active risk acceptances sorted by expiry with color coding (<30d red, <60d amber). Export CSV button for exception reports. Max exception duration capped at 365 days.
2026-07-24 — v6.1.0
⏰ SLA/due-date engine: severity-based due dates (Critical=15d, High=30d, Medium=90d, Low=180d), CISA KEV BOD 22-01 deadlines, overdue tracking with dashboard stat card, "Days to Due" column with red/amber/green color coding, overdue filter in dropdown, SLA breach penalty in executive grade (>10% overdue docks 1 grade, >25% docks 2), configurable SLA policy on Admin page with persistence via localStorage.
2026-07-24 — v6.0.0
🌐 Live CISA KEV JSON feed integration with auto-fetch, localStorage caching, cross-referencing with imported findings, KEV badge with CISA tooltip (dateAdded, dueDate, requiredAction, ransomware use), KEV feed card on Data Sources page with Refresh Now button, graceful fallback to hardcoded KEV data when offline. All KEV counts now update from live data.
2026-07-24 — v5.0.0
🏷️ Snipe-IT REST API asset import: API config card on Data Sources page, connection test, paginated hardware fetch, asset enrichment (assigned user, purchase date, warranty status), warranty detection (Active/Expiring Soon/Expired), warranty filter on Assets page, and per-asset Snipe-IT detail card.
2026-07-24 — v4.0.0
Executive page rebuild: team assignment engine (Endpoint/Factory/Networking/Servers), SVG trend line chart, team breakdown cards with severity bars, Top 5 CVEs table, auto-generated risk summary, and executive report export. All vanilla JS + inline SVG.
2026-07-24 — v3.0.0
🪦 End of Life detection engine with comprehensive OS/software EOL database, fuzzy-matching, EOL summary card on Dashboard, EOL Status column/filter on Assets page, and per-asset EOL detail view.
2026-06-25 — v2.4.0
Added vendor/family classification view with ordered regex rules. Per-asset plugin name storage to fix last-write-wins bug across platforms.
2026-06-18 — v2.3.1
Fixed access control audit: 9 unguarded team-scoped endpoints now enforce
check_team_access. Team detail now shows period-over-period deltas.2026-06-10 — v2.3.0
Executive dashboard with trend snapshots. Recently-fixed view driven by
fixed_at transition timestamp. OS backfill from endpoint inventory.2026-06-02 — v2.2.0
Teams config with shared scope helper. Precomputed stats tables with memory+disk caching. Background cache warm at startup.
2026-05-15 — v2.1.0
Streaming CSV importer with batched
executemany. Asset tags junction table. Solutions view and change-request draft assembler.2026-05-01 — v2.0.0
Initial release: scanner importer, KEV feed, dashboard, findings list, CVE detail with per-asset status tracking.
🔄 Security Tool Pipeline
ShieldView
idle
→
RemFlow
idle
→
TheValidator
idle