Gnu

United States Open Source www.gnu.org ↗ ⚠ 2 CISA KEV
C
CAUTION
98
Total CVEs
13
Crit / High
20
Medium
39%
Unpatched
14%
Patched
5.6
Avg CVSS
2
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
14%
Unpatched
39%
Under Review
42%
Pending
5%
✓ 12 patched ✗ 33 unpatched ~ 35 under review ⏳ 4 pending score
▸ Intelligence by Audience
PoC Available
1 / 20 shown
CISA KEV (Exploited)
2
Shodan Dorks
ssl:"gnu" port:443
org:"Gnu" http.status:200
Top EPSS (Exploitation Probability)
CVE-2025-65411 0.58% exploitation probability
CVE-2025-69650 0.50% exploitation probability
CVE-2025-65409 0.35% exploitation probability
CVE-2026-56968 0.29% exploitation probability
CVE-2025-11840 0.28% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
98
Critical severity
4
Actively exploited (CISA)
2
Unpatched ratio
39%
Avg CVSS score
5.6
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-23
Security Risk Score (for investors)
LOW
Vuln Volume
AVG
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Vim and GNU Emacs: Claude Code helpfully found zero-day exploits for both - CSO Online
CSO Online 2026-04-01
Critical GNU Wget2 Vulnerability Let Remote Attackers to Overwrite Sensitive Files - CyberSecurityNews
CyberSecurityNews 2026-01-05
CVE-2026-32746: Critical Unpatched Vulnerability in GNU InetUtils telnetd Enables Unauthenticated Remote Root Code Execution via Port 23 - Rescana
Rescana 2026-03-18
Organizations Warned of Exploited Linux Vulnerabilities - SecurityWeek
SecurityWeek 2026-01-27
Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE - The Hacker News
The Hacker News 2026-03-18
GNU InetUtils Vulnerability Exploited via “-f root” to Achieve Full System Control - GBHackers News
GBHackers News 2026-01-21
▸ Recent CVEs showing 20 of 84
CVE IDSeverityPatchEPSSDate
CVE-2026-90622 3.3 LOW PATCH UNDER REVIEW 0.16% 2026-09-14
CVE-2026-56968 PoC 3.7 LOW PATCHED / FIX AVAILABLE 0.29% 2026-06-23
CVE-2026-5358 9.1 CRITICAL UNKNOWN / UNPATCHED — 2026-04-20
CVE-2025-69647 ? N/A PATCH UNDER REVIEW 0.15% 2026-03-09
CVE-2025-69648 ? N/A PATCH UNDER REVIEW 0.18% 2026-03-09
CVE-2025-69645 ? N/A PATCH UNDER REVIEW 0.17% 2026-03-06
CVE-2025-69651 ? N/A PATCH UNDER REVIEW 0.24% 2026-03-06
CVE-2025-69649 ? N/A PATCH UNDER REVIEW 0.26% 2026-03-06
CVE-2025-69652 ? N/A PATCH UNDER REVIEW 0.17% 2026-03-06
CVE-2025-69650 ? N/A PATCH UNDER REVIEW 0.50% 2026-03-06
CVE-2025-65411 ? N/A UNKNOWN / UNPATCHED 0.58% 2025-12-30
CVE-2025-65409 ? N/A UNKNOWN / UNPATCHED 0.35% 2025-12-30
CVE-2025-65410 ? N/A UNKNOWN / UNPATCHED 0.23% 2025-12-23
CVE-2025-11840 4.8 MEDIUM PATCH UNDER REVIEW 0.28% 2025-10-16
CVE-2025-11839 4.8 MEDIUM PATCH UNDER REVIEW 0.28% 2025-10-16
CVE-2025-11495 4.8 MEDIUM PATCH UNDER REVIEW 0.24% 2025-10-08
CVE-2025-11494 4.8 MEDIUM PATCH UNDER REVIEW 0.21% 2025-10-08
CVE-2025-11414 4.8 MEDIUM PATCH UNDER REVIEW 0.21% 2025-10-07
CVE-2025-11413 4.8 MEDIUM PATCH UNDER REVIEW 0.22% 2025-10-07
CVE-2025-11412 4.8 MEDIUM PATCH UNDER REVIEW 0.21% 2025-10-07
View all 84 CVEs for Gnu →
▸Intel
Founded1983
CountryUnited States
LicenseOpen Source
Trust ScoreC — CAUTION
Max CVSS9.8
Last Updated2026-07-23
▸Top Weaknesses
CWE-119
Buffer Overflow
20 occurrences in Gnu CVEs (20% of total)
CWE-119 ⓘ
20
CWE-122
Heap-Based Buffer Overflow
8 occurrences in Gnu CVEs (8% of total)
CWE-122 ⓘ
8
CWE-476
NULL Pointer Dereference
7 occurrences in Gnu CVEs (7% of total)
CWE-476 ⓘ
7
CWE-401
Unknown Weakness Type
6 occurrences in Gnu CVEs (6% of total)
CWE-401 ⓘ
6
CWE-269
Improper Privilege Management
5 occurrences in Gnu CVEs (5% of total)
CWE-269 ⓘ
5
CWE-125
Out-of-Bounds Read
4 occurrences in Gnu CVEs (4% of total)
CWE-125 ⓘ
4
CWE-787
Out-of-Bounds Write
3 occurrences in Gnu CVEs (3% of total)
CWE-787 ⓘ
3
CWE-120
Buffer Copy Without Size Check
3 occurrences in Gnu CVEs (3% of total)
CWE-120 ⓘ
3
▸Company Profile

GNU is a free software operating system project initiated by Richard Stallman in 1983, providing a collection of essential tools, libraries, and utilities (such as the GNU Compiler Collection, GNU C Library, and GNU Core Utilities) that form the foundation of many Linux distributions. Its software is widely used in enterprise and security-critical environments, making vulnerabilities in GNU components a significant concern for cybersecurity.

▸Response Metrics
Est. MTTR ⓘ ~357 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -54% better
CVE count 2026 vs 2025:  54 → 25 CVEs
Patch Speed ⓘ Poor (>65% open)
39% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€573K
Est. GDPR High
€5.7M

Based on 4 critical CVEs, 2 CISA KEV, 76% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Gnu C valtersit.com