Ercom Cryptobox

Name: Ercom Cryptobox
Brand: Ercom

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical1high0medium0low

updated 2026-10-28

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-0873US	—	0.28% (20th)	—	v4.40.x	2026-02-04	< v4.40.x
CVE-2026-5794US	—	0.26% (17th)	—	4.37.237	2026-04-28	2 versions
CVE-2026-6805US	high7.5	0.23% (14th)	—	4.37.248	2026-05-07	2 versions
CVE-2025-14266US	—	0.18% (7th)	—	4.39.200	2025-12-17	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-1220Insufficient Granularity of Access Control1 CVEs
CWE-280Improper Handling of Insufficient Permissions or Privileges1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-694Use of Multiple Resources with Duplicate Identifier1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.