A

Arduino

Italy Open Source www.arduino.cc ↗
D
RISKY
9
Total CVEs
1
Crit / High
2
Medium
10%
Unpatched
60%
Patched
7.4
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
60%
Unpatched
10%
Under Review
30%
✓ 6 patched ✗ 1 unpatched ~ 3 under review
▸ Intelligence by Audience
PoC Available
3 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"arduino" port:443
org:"Arduino" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-48490 0.67% exploitation probability
CVE-2023-43802 0.35% exploitation probability
CVE-2025-53540 0.33% exploitation probability
CVE-2024-45798 0.32% exploitation probability
CVE-2023-43800 0.21% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
9
Critical severity
1
Actively exploited (CISA)
0
Unpatched ratio
10%
Avg CVSS score
7.4
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-06-14
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Nozomi discloses presence of security flaws affect component of Arduino Create Cloud IDE - Industrial Cyber
Industrial Cyber 2023-10-30
Arduino Portenta X8 achieves EU’s Cyber Resilience Act (CRA) compliance - CNX Software
CNX Software 2023-12-09
How to Use Metasploit Effectively for Network Penetration Testing - Vocal
Vocal 2024-10-16
CapibaraZero Firmware Emerges As Affordable Flipper Zero Alternative For Pentesters - CyberSecurityNews
CyberSecurityNews 2024-12-06
How to use Social-Engineer Toolkit - TechTarget
TechTarget 2024-06-28
CapibaraZero Firmware With ESP32-S3 Hardware Enables Low Cost Flipper Zero alternative - GBHackers News
GBHackers News 2024-12-06
▸ Recent CVEs showing 20 of 10
CVE IDSeverityPatchEPSSDate
CVE-2026-47773 7.6 HIGH PATCH UNDER REVIEW 0.15% 2026-09-11
CVE-2026-48490 PoC 7.0 HIGH PATCH UNDER REVIEW 0.67% 2026-09-11
CVE-2025-69209 6.9 MEDIUM PATCHED / FIX AVAILABLE 0.17% 2026-01-21
CVE-2025-64724 4.8 MEDIUM PATCHED / FIX AVAILABLE 0.13% 2025-12-18
CVE-2025-64723 4.8 MEDIUM PATCHED / FIX AVAILABLE 0.13% 2025-12-18
CVE-2025-53540 8.7 HIGH PATCH UNDER REVIEW 0.33% 2025-07-07
CVE-2025-27608 1.0 LOW PATCHED / FIX AVAILABLE 0.20% 2025-04-02
CVE-2024-45798 PoC 10.0 CRITICAL UNKNOWN / UNPATCHED 0.32% 2024-09-17
CVE-2023-43802 PoC 7.1 HIGH PATCHED / FIX AVAILABLE 0.35% 2023-10-18
CVE-2023-43800 7.3 HIGH PATCHED / FIX AVAILABLE 0.21% 2023-10-18
View all 10 CVEs for Arduino →
▸Intel
HQTurin, Italy
Founded2005
CEOFabio Violante
CountryItaly
LicenseOpen Source
Trust ScoreD — RISKY
Max CVSS10.0
Last Updated2026-06-14
▸Top Weaknesses
CWE-121
Unknown Weakness Type
2 occurrences in Arduino CVEs (22% of total)
CWE-121 ⓘ
2
CWE-276
Incorrect Default Permissions
2 occurrences in Arduino CVEs (22% of total)
CWE-276 ⓘ
2
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Unknown Weakness Type
1 occurrence in Arduino CVEs (11% of total)
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')) ⓘ
1
CWE-78 (Improper Neutralization of Special Elements used in an OS Command)
Unknown Weakness Type
1 occurrence in Arduino CVEs (11% of total)
CWE-78 (Improper Neutralization of Special Elements used in an OS Command) ⓘ
1
CWE-352
Cross-Site Request Forgery (CSRF)
1 occurrence in Arduino CVEs (11% of total)
CWE-352 ⓘ
1
CWE-825
Unknown Weakness Type
1 occurrence in Arduino CVEs (11% of total)
CWE-825 ⓘ
1
CWE-94
Code Injection
1 occurrence in Arduino CVEs (11% of total)
CWE-94 ⓘ
1
▸Company Profile

Arduino is an open-source electronics platform based on easy-to-use hardware and software, primarily known for its microcontroller boards and the Arduino IDE. Its products are widely used in IoT, embedded systems, and prototyping, making it a significant vendor in the cybersecurity landscape due to the potential vulnerabilities in connected devices and firmware.

▸Response Metrics
Est. MTTR ⓘ ~54 days (Good)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ → stable (0%)
CVE count 2026 vs 2025:  4 → 4 CVEs
Patch Speed ⓘ Poor (>65% open)
10% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€610K
Est. GDPR High
€6.1M

Based on 1 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Arduino D valtersit.com