centarro records
3 published records for vendor centarro.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-208 Observable Timing Discrepancy1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-863 Incorrect Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2026-73475No exploit | Commerce PayPal - Moderately critical - Access bypass - SA-CONTRIB-2026-095centarro · commerce paypal · CWE-863 | Critical9.1 | — | 0.4% | Sep 2, 2026 |
21Monitor | CVE-2026-10769No exploit | Commerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041centarro · commerce core · CWE-79 | Medium5.4 | — | 0.2% | Jul 10, 2026 |
14Monitor | CVE-2026-81159No exploit | Commerce CyberSource - Moderately critical - Insufficient input validation - SA-CONTRIB-2026-106centarro · commerce cybersource · CWE-208 | Low3.7 | — | 0.2% | Sep 2, 2026 |
- CVE-2026-7347536Monitor
Commerce PayPal - Moderately critical - Access bypass - SA-CONTRIB-2026-095
CriticalCVSS 9.1No exploitEPSS 0%centarro · commerce paypalSep 2, 2026
- CVE-2026-1076921Monitor
Commerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041
MediumCVSS 5.4No exploitEPSS 0%centarro · commerce coreJul 10, 2026
- CVE-2026-8115914Monitor
Commerce CyberSource - Moderately critical - Insufficient input validation - SA-CONTRIB-2026-106
LowCVSS 3.7No exploitEPSS 0%centarro · commerce cybersourceSep 2, 2026