FSOFT: CVE Program partner

CVEs, 365 days14 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	FPT Software Co., Ltd.
Role	CNA
Type	Vendor, Researcher
Reports to	mitre
Scope	All products and services developed and operated by FPT Software, as well as vulnerabilities in third-party software discovered by FPT Software that are not in another CNA’s scope.
Advisories	https://fptsoftware.com/security-advisories

CVE-2026-6179 2026-04-13 · CVSS 6.3
Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser
CVE-2025-3014 2025-03-31 · CVSS 8.3
Insecure Direct Object References (IDOR) in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating requ
CVE-2025-3013 2025-03-31 · CVSS 8.3
Insecure Direct Object References (IDOR) in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via man
CVE-2025-31165 2025-03-27 · CVSS 6.9
Cross-Site Scripting (XSS) vulnerability in the Logbug module of NightWolf Penetration Testing Platform 1.2.2 allows attackers to execute JavaScript through the

FSOFT