Q

Q-free

D
RISKY
43
Total CVEs
27
Crit / High
16
Medium
0%
Unpatched
0%
Patched
7.4
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
0%
Under Review
100%
✓ 0 patched ✗ 0 unpatched ~ 29 under review
▸ Intelligence by Audience
PoC Available
18 / 20 shown
CISA KEV (Exploited)
0
Top EPSS (Exploitation Probability)
CVE-2025-26354 2.14% exploitation probability
CVE-2025-26356 1.75% exploitation probability
CVE-2025-26355 1.69% exploitation probability
CVE-2025-26360 0.63% exploitation probability
CVE-2025-26366 0.57% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
43
Critical severity
9
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
7.4
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects - The Hacker News
The Hacker News 6d ago
Amazon Q VS Extension Flaw Leads to Cloud Credential Theft - Dark Reading
Dark Reading 2026-06-29
New GhostApproval Vulnerability Affects Amazon Q, Claude Code, Cursor, and Other AI Agents - CyberSecurityNews
CyberSecurityNews 2026-07-09
Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers - The Hacker News
The Hacker News 2026-09-16
Q-Free advances cybersecurity in local traffic signal control with Dynamic Signals - Traffic Technology Today
Traffic Technology Today 2025-08-19
79 Chrome Vulnerabilities Patched, Including 14 Critical One’s - Update Now! - CyberSecurityNews
CyberSecurityNews 2026-05-15
▸ Recent CVEs showing 20 of 29
CVE IDSeverityPatchEPSSDate
CVE-2025-26377 PoC 8.1 HIGH PATCH UNDER REVIEW 0.15% 2025-02-12
CVE-2025-26376 PoC 6.5 MEDIUM PATCH UNDER REVIEW 0.25% 2025-02-12
CVE-2025-26374 PoC 6.5 MEDIUM PATCH UNDER REVIEW 0.18% 2025-02-12
CVE-2025-26373 PoC 6.5 MEDIUM PATCH UNDER REVIEW 0.26% 2025-02-12
CVE-2025-26372 7.1 HIGH PATCH UNDER REVIEW 0.16% 2025-02-12
CVE-2025-26370 7.1 HIGH PATCH UNDER REVIEW 0.16% 2025-02-12
CVE-2025-26368 PoC 8.1 HIGH PATCH UNDER REVIEW 0.15% 2025-02-12
CVE-2025-26367 PoC 4.3 MEDIUM PATCH UNDER REVIEW 0.25% 2025-02-12
CVE-2025-26366 PoC 7.5 HIGH PATCH UNDER REVIEW 0.57% 2025-02-12
CVE-2025-26365 PoC 7.5 HIGH PATCH UNDER REVIEW 0.57% 2025-02-12
CVE-2025-26364 PoC 7.5 HIGH PATCH UNDER REVIEW 0.57% 2025-02-12
CVE-2025-26363 PoC 7.5 HIGH PATCH UNDER REVIEW 0.57% 2025-02-12
CVE-2025-26362 PoC 7.5 HIGH PATCH UNDER REVIEW 0.57% 2025-02-12
CVE-2025-26360 PoC 5.3 MEDIUM PATCH UNDER REVIEW 0.63% 2025-02-12
CVE-2025-26358 PoC 5.5 MEDIUM PATCH UNDER REVIEW 0.42% 2025-02-12
CVE-2025-26357 PoC 4.9 MEDIUM PATCH UNDER REVIEW 0.23% 2025-02-12
CVE-2025-26356 PoC 7.2 HIGH PATCH UNDER REVIEW 1.75% 2025-02-12
CVE-2025-26355 PoC 6.5 MEDIUM PATCH UNDER REVIEW 1.69% 2025-02-12
CVE-2025-26354 PoC 7.2 HIGH PATCH UNDER REVIEW 2.14% 2025-02-12
CVE-2025-26353 PoC 4.9 MEDIUM PATCH UNDER REVIEW 0.17% 2025-02-12
View all 29 CVEs for Q-free →
▸Intel
HQTrondheim, Norway
Founded1984
Trust ScoreD — RISKY
Max CVSS9.8
Last Updated2026-08-03
▸Top Weaknesses
CWE-306
Missing Authentication
14 occurrences in Q-free CVEs (33% of total)
CWE-306 ⓘ
14
CWE-862
Unknown Weakness Type
12 occurrences in Q-free CVEs (28% of total)
CWE-862 ⓘ
12
CWE-35
Unknown Weakness Type
7 occurrences in Q-free CVEs (16% of total)
CWE-35 ⓘ
7
CWE-89
SQL Injection
2 occurrences in Q-free CVEs (5% of total)
CWE-89 ⓘ
2
CWE-259
Unknown Weakness Type
1 occurrence in Q-free CVEs (2% of total)
CWE-259 ⓘ
1
CWE-346
Unknown Weakness Type
1 occurrence in Q-free CVEs (2% of total)
CWE-346 ⓘ
1
CWE-15
Unknown Weakness Type
1 occurrence in Q-free CVEs (2% of total)
CWE-15 ⓘ
1
CWE-321
Unknown Weakness Type
1 occurrence in Q-free CVEs (2% of total)
CWE-321 ⓘ
1
▸Company Profile

Q-free is a Norwegian company specializing in intelligent transportation systems (ITS), particularly in tolling, congestion charging, and parking management solutions. Their software and hardware products are used in urban mobility and road infrastructure, making them relevant to cybersecurity due to the critical nature of transportation networks and the potential impact of vulnerabilities in their systems.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Patch Speed ⓘ Poor (>65% open)
0% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€690K
Est. GDPR High
€6.9M

Based on 9 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Q-free D valtersit.com