Catalyst

United States Open Source catalyst.dev ↗

RISKY

Total CVEs

Crit / High

Medium

67%

Unpatched

Patched

8.8

Avg CVSS

CISA KEV

// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →

// INTEL UPGRADE

Full Company Dossier — Coming Soon

Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.

OSINT FINANCIALS EXEC PROFILES BREACH DB

▸ CVE Trend by Year

▸ Patch Coverage

Patched

Unpatched

67%

Under Review

33%

✓ 0 patched ✗ 2 unpatched ~ 1 under review

▸ Intelligence by Audience

PoC Available

0 / 20 shown

CISA KEV (Exploited)

Shodan Dorks

ssl:"catalyst" port:443

org:"Catalyst" http.status:200

Top EPSS (Exploitation Probability)

CVE-2025-4513 0.45% exploitation probability

CVE-2026-85491 0.35% exploitation probability

CVE-2026-15743 0.32% exploitation probability

Quick Facts for Reporting

Total CVEs tracked

Critical severity

Actively exploited (CISA)

Unpatched ratio

67%

Avg CVSS score

8.8

Security grade

D (RISKY)

NVD Data Attribution

Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-14

Security Risk Score (for investors)

LOW

Vuln Volume

POOR

Patch Responsiveness

LOW

CISA Exposure

⚠ Not financial advice. Past security incidents do not guarantee future stock performance.

▸ Security News Google News

CISA, researchers warn of escalating attacks using Cisco Catalyst SD-WAN flaws - Cybersecurity Dive

Cybersecurity Dive 2026-06-10

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504) - Rapid7

Rapid7 2026-09-30

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV - The Hacker News

The Hacker News 2026-10-01

U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog - Security Affairs

Security Affairs 2026-10-01

NSA Joins ASD’s ACSC and Others to Release a Cybersecurity Alert and Related Hunt Guide on - National Security Agency (NSA) (.gov)

National Security Agency (NSA) (.gov) 2026-02-26

Cisco SD-WAN Manager Authentication 0-day Vulnerability Actively Exploited in the Wild - CyberSecurityNews

CyberSecurityNews 2026-10-01

▸ Recent CVEs showing 20 of 3

CVE ID	Severity	Patch	EPSS	Date
CVE-2026-85491	8.8 HIGH	UNKNOWN / UNPATCHED	0.35%	2026-09-24
CVE-2026-15743	5.7 MEDIUM	PATCH UNDER REVIEW	0.32%	2026-08-20
CVE-2025-4513	5.3 MEDIUM	UNKNOWN / UNPATCHED	0.45%	2025-05-10

View all 3 CVEs for Catalyst →

▸Intel

CountryUnited States

LicenseOpen Source

Trust ScoreD — RISKY

Max CVSS10.0

Last Updated2026-07-14

▸Top Weaknesses

CWE-78 (Improper Neutralization of Special Elements used in an OS Command) ⓘ

▸Company Profile

Catalyst is a United States-based software vendor that provides a platform for building and deploying web applications, with a focus on serverless computing and edge functions. Their main product is a cloud platform that enables developers to create and scale applications globally. With only 6 tracked CVEs, Catalyst is a relatively small vendor in the cybersecurity landscape, but its relevance lies in the growing adoption of serverless and edge computing technologies.

▸Response Metrics

Est. MTTR ⓘ ~500 days (Critical)

Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)

CVE Trend ⓘ → stable (0%)

CVE count 2026 vs 2025: 3 → 3 CVEs

Patch Speed ⓘ Poor (>65% open)

67% of CVEs still unpatched. Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%

▸ Financial Risk Estimate

Est. GDPR Low

€610K

Est. GDPR High

€6.1M

Based on 1 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions

⚖ Compare with another vendor

▸Embed Badge

Catalyst D valtersit.com