T

Turms

C
CAUTION
5
Total CVEs
0
Crit / High
0
Medium
0%
Unpatched
0%
Patched
—
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
0%
Pending
100%
✓ 0 patched ✗ 0 unpatched ⏳ 5 pending score
▸ Intelligence by Audience
PoC Available
3 / 20 shown
CISA KEV (Exploited)
0
Top EPSS (Exploitation Probability)
CVE-2025-66909 0.34% exploitation probability
CVE-2025-66908 0.08% exploitation probability
CVE-2025-66910 0.08% exploitation probability
CVE-2025-66911 0.04% exploitation probability
CVE-2025-66906 0.02% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
5
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
—
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-27
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
The CRA Turns Cybersecurity History Into Evidence. That Changes Where We Need to Store It - Security Boulevard
Security Boulevard 2026-09-22
What Does a Cybersecurity Analyst Do? 2026 Job Guide - Coursera
Coursera 2026-08-08
ALUMNI SPOTLIGHT: Jason Garay Turns Cybersecurity Knowledge into Impact and Inspiration - Felician University
Felician University 2026-10-02
Industry 4.0 and cybersecurity – How to protect your investment - National Institute of Standards and Technology (.gov)
National Institute of Standards and Technology (.gov) 2024-06-18
Action1 Doubles Endpoint Coverage at No Cost for Cybersecurity Awareness Month - plaintalk.net
plaintalk.net 2026-10-01
China introduces cybersecurity labels for connected devices under new security scheme - Cybernews
Cybernews 2026-06-02
▸ Recent CVEs showing 20 of 5
CVE IDSeverityPatchEPSSDate
CVE-2025-66910 ? N/A UNKNOWN / UNPATCHED 0.08% 2025-12-19
CVE-2025-66908 PoC ? N/A UNKNOWN / UNPATCHED 0.08% 2025-12-19
CVE-2025-66906 ? N/A UNKNOWN / UNPATCHED 0.02% 2025-12-19
CVE-2025-66909 PoC ? N/A UNKNOWN / UNPATCHED 0.34% 2025-12-19
CVE-2025-66911 PoC ? N/A UNKNOWN / UNPATCHED 0.04% 2025-12-19
View all 5 CVEs for Turms →
▸Intel
Trust ScoreC — CAUTION
0
Last Updated2026-07-27
▸Top Weaknesses
CWE-352
Cross-Site Request Forgery (CSRF)
1 occurrence in Turms CVEs (20% of total)
CWE-352 ⓘ
1
CWE-312 (Cleartext Storage of Sensitive Information)
Unknown Weakness Type
1 occurrence in Turms CVEs (20% of total)
CWE-312 (Cleartext Storage of Sensitive Information) ⓘ
1
CWE-434
Unrestricted File Upload
1 occurrence in Turms CVEs (20% of total)
CWE-434 ⓘ
1
CWE-770
Unknown Weakness Type
1 occurrence in Turms CVEs (20% of total)
CWE-770 ⓘ
1
CWE-862
Unknown Weakness Type
1 occurrence in Turms CVEs (20% of total)
CWE-862 ⓘ
1
▸Company Profile

Turms is an open-source real-time communication platform designed for building scalable instant messaging applications, emphasizing high performance and low latency. Its cybersecurity relevance comes from potential vulnerabilities in messaging protocols and authentication mechanisms that could affect deployed systems.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Patch Speed ⓘ Poor (>65% open)
0% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M

Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Turms C valtersit.com