Duende

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Duende records in CISA KEV

No Duende vulnerabilities are listed in CISA KEV.

1 record

TI-2026-03785 CVE-2026-4349 · GHSA-46qm-5mvh-mmxr

LOW 28

A vulnerability was determined in Duende IdentityServer4 up to 4.1.2.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00432 Published 2026-03-17 No fix listed CWE-287