İçeriğe atla
Noroxi

AntAISecurityLab

31 kredili kayıt · son 12 ayda 31 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Kredili kayıtlar

Araştırmacılar
  • CVE-2026-41408
    9İzleyin

    OpenClaw < 2026.3.31 - Disk Exhaustion via Media Download Bypass

    DüşükCVSS 2,3İstismar yokEPSS %1

    openclaw · openclaw28 Nis 2026

  • CVE-2026-41406
    9İzleyin

    OpenClaw < 2026.3.31 - Sender Allowlist Bypass via Thread History and Quoted Messages

    DüşükCVSS 2,3İstismar yokEPSS %0

    openclaw · openclaw28 Nis 2026

  • CVE-2026-41405
    34İzleyin

    OpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body Parsing

    YüksekCVSS 8,7İstismar yokEPSS %1

    openclaw · openclaw28 Nis 2026

  • CVE-2026-41397
    30İzleyin

    OpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink Traversal

    YüksekCVSS 7,6İstismar yokEPSS %1

    openclaw · openclaw28 Nis 2026

  • CVE-2026-41378
    30İzleyin

    OpenClaw < 2026.3.31 - Privilege Escalation to Remote Code Execution via Unrestricted node.event Agent Dispatch

    YüksekCVSS 7,7İstismar yokEPSS %1

    openclaw · openclaw28 Nis 2026

  • CVE-2026-41376
    9İzleyin

    OpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender Validation

    DüşükCVSS 2,3İstismar yokEPSS %0

    openclaw · openclaw28 Nis 2026

  • CVE-2026-41375
    28İzleyin

    OpenClaw < 2026.3.28 - Authorization Bypass in /phone arm and /phone disarm Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    openclaw · openclaw28 Nis 2026

  • CVE-2026-41374
    27İzleyin

    OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorization

    OrtaCVSS 6,9İstismar yokEPSS %1

    openclaw · openclaw28 Nis 2026

  • CVE-2026-41365
    21İzleyin

    OpenClaw < 2026.3.31 - Sender Allowlist Bypass via Graph API Thread History

    OrtaCVSS 5,3İstismar yokEPSS %0

    openclaw · openclaw27 Nis 2026

  • CVE-2026-41364
    28İzleyin

    OpenClaw < 2026.3.31 - Arbitrary File Write via Symlink Following in SSH Sandbox Tar Upload

    YüksekCVSS 7,2İstismar yokEPSS %1

    openclaw · openclaw27 Nis 2026

  • CVE-2026-41358
    9İzleyin

    OpenClaw < 2026.4.2 - Sender Allowlist Bypass via Slack Thread Context

    DüşükCVSS 2,3İstismar yokEPSS %0

    openclaw · openclaw23 Nis 2026

  • CVE-2026-41357
    8İzleyin

    OpenClaw < 2026.3.31 - Unsanitized Environment Variable Leakage in SSH Sandbox Backends

    DüşükCVSS 2,0İstismar yokEPSS %0

    openclaw · openclaw23 Nis 2026

  • CVE-2026-41352
    30İzleyin

    OpenClaw < 2026.3.31 - Remote Code Execution via Node Scope Gate Bypass

    YüksekCVSS 7,7İstismar yokEPSS %1

    openclaw · openclaw23 Nis 2026

  • CVE-2026-41351
    25İzleyin

    OpenClaw < 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encoding

    OrtaCVSS 6,3İstismar yokEPSS %0

    openclaw · openclaw23 Nis 2026

  • CVE-2026-41347
    9İzleyin

    OpenClaw < 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Operator Endpoints

    DüşükCVSS 2,3İstismar yokEPSS %0

    openclaw · openclaw23 Nis 2026

  • CVE-2026-41345
    24İzleyin

    OpenClaw < 2026.3.31 - Authorization Header Leak via Cross-Origin Redirect in Media Download

    OrtaCVSS 6,0İstismar yokEPSS %0

    openclaw · openclaw23 Nis 2026

  • CVE-2026-41338
    17İzleyin

    OpenClaw < 2026.3.31 - Time-of-Check-Time-of-Use (TOCTOU) Vulnerability in Sandbox File Operations

    OrtaCVSS 4,3İstismar yokEPSS %0

    openclaw · openclaw23 Nis 2026

  • CVE-2026-41334
    28İzleyin

    OpenClaw < 2026.3.31 - Decompression Bomb Denial of Service via Image Pixel-Limit Guard Bypass

    YüksekCVSS 7,1İstismar yokEPSS %0

    openclaw · openclaw23 Nis 2026

  • CVE-2026-41331
    27İzleyin

    OpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight Transcription

    OrtaCVSS 6,9İstismar yokEPSS %1

    openclaw · openclaw20 Nis 2026

  • CVE-2026-41330
    8İzleyin

    OpenClaw < 2026.3.31 - Environment Variable Override via Host Exec Policy

    DüşükCVSS 2,0İstismar yokEPSS %0

    openclaw · openclaw20 Nis 2026

  • CVE-2026-41329
    36İzleyin

    OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation

    KritikCVSS 9,0İstismar yokEPSS %1

    openclaw · openclaw20 Nis 2026

  • CVE-2026-41297
    19İzleyin

    OpenClaw < 2026.3.31 - Server-Side Request Forgery via Marketplace Plugin Download Redirect

    OrtaCVSS 4,8İstismar yokEPSS %0

    openclaw · openclaw20 Nis 2026

  • CVE-2026-41296
    35İzleyin

    OpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race in Remote FS Bridge readFile

    YüksekCVSS 8,8İstismar yokEPSS %0

    openclaw · openclaw20 Nis 2026

  • CVE-2026-34504
    27İzleyin

    OpenClaw < 2026.3.28 - Server-Side Request Forgery via Unguarded Image Download in fal Provider

    OrtaCVSS 6,9İstismar yokEPSS %0

    openclaw · openclaw31 Mar 2026

  • CVE-2026-34503
    34İzleyin

    OpenClaw < 2026.3.28 - Incomplete WebSocket Session Termination on Device Removal and Token Revocation

    YüksekCVSS 8,6İstismar yokEPSS %0

    openclaw · openclaw31 Mar 2026