Yama Salısı
Mart 2026
Her ayın ikinci salısı Microsoft, Adobe, SAP, Siemens ve Schneider Electric toplu yayın yapar; Oracle ocak, nisan, temmuz ve ekimde üçüncü salı. Burada o gün yayımlanan kayıtlar kendi veritabanımızdan, eylem puanına göre sıralı: önce KEV ve istismarı olgun olanlar.
Nasıl hesaplanır: CNA damgası + yayın tarihi (iki günlük pencere, UTC). Üreticinin bülteniyle bire bir eşleşme iddiası yok; ara güncellemeler ayrı günlerde çıkar.
186 kayıt · 0 KEV
Stack'inizi etkileyenler
Bu ayın kayıtlarından stack'inizdeki ürün ve sürümlere uyanlar.
Stack'inize uyanları görmek için giriş yapın; kayıtlar ve bildirimler ücretsiz. →
Microsoft · 10 Mart
78 · 0 KEV · 1 kritik| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2026-26105İstismar yok | Microsoft SharePoint Server Spoofing Vulnerabilitymicrosoft · sharepoint server · CWE-79 | Kritik9,3 | — | %1,2 | 10 Mar 2026 |
36İzleyin | CVE-2026-21262İstismar yok | SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2016 · CWE-284 | Yüksek8,8 | — | %2,1 | 10 Mar 2026 |
36İzleyin | CVE-2026-26114Kavram kanıtı | Microsoft SharePoint Server Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-502 | Yüksek8,8 | — | %2,5 | 10 Mar 2026 |
35İzleyin | CVE-2026-20967İstismar yok | System Center Operations Manager (SCOM) Elevation of Privilege Vulnerabilitymicrosoft · system center operations manager · CWE-20 | Yüksek8,8 | — | %1,1 | 10 Mar 2026 |
35İzleyin | CVE-2026-23654İstismar yok | GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerabilitymicrosoft · zero-shot-scfoundation · CWE-1395 | Yüksek8,8 | — | %1,0 | 10 Mar 2026 |
35İzleyin | CVE-2026-23669İstismar yok | RPC Runtime Library Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | Yüksek8,8 | — | %0,9 | 10 Mar 2026 |
35İzleyin | CVE-2026-24283İstismar yok | Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-122 | Yüksek8,8 | — | %0,4 | 10 Mar 2026 |
35İzleyin | CVE-2026-25177Kavram kanıtı | Active Directory Domain Services Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-641 | Yüksek8,8 | — | %1,3 | 10 Mar 2026 |
35İzleyin | CVE-2026-25188İstismar yok | Windows Telephony Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | Yüksek8,8 | — | %0,6 | 10 Mar 2026 |
35İzleyin | CVE-2026-26106İstismar yok | Microsoft SharePoint Server Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-20 | Yüksek8,8 | — | %1,3 | 10 Mar 2026 |
35İzleyin | CVE-2026-26115İstismar yok | SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2016 · CWE-1287 | Yüksek8,8 | — | %1,0 | 10 Mar 2026 |
35İzleyin | CVE-2026-26116İstismar yok | SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2016 · CWE-89 | Yüksek8,8 | — | %1,0 | 10 Mar 2026 |
- CVE-2026-2610537İzleyin
Microsoft SharePoint Server Spoofing Vulnerability
KritikCVSS 9,3İstismar yokEPSS %1microsoft · sharepoint server10 Mar 2026
- CVE-2026-2126236İzleyin
SQL Server Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2microsoft · sql server 201610 Mar 2026
- CVE-2026-2611436İzleyin
Microsoft SharePoint Server Remote Code Execution Vulnerability
YüksekCVSS 8,8Kavram kanıtıEPSS %3microsoft · sharepoint server10 Mar 2026
- CVE-2026-2096735İzleyin
System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · system center operations manager10 Mar 2026
- CVE-2026-2365435İzleyin
GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · zero-shot-scfoundation10 Mar 2026
- CVE-2026-2366935İzleyin
RPC Runtime Library Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · windows 10 160710 Mar 2026
- CVE-2026-2428335İzleyin
Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · windows 11 24h210 Mar 2026
- CVE-2026-2517735İzleyin
Active Directory Domain Services Elevation of Privilege Vulnerability
YüksekCVSS 8,8Kavram kanıtıEPSS %1microsoft · windows 10 160710 Mar 2026
- CVE-2026-2518835İzleyin
Windows Telephony Service Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · windows 10 160710 Mar 2026
- CVE-2026-2610635İzleyin
Microsoft SharePoint Server Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · sharepoint server10 Mar 2026
- CVE-2026-2611535İzleyin
SQL Server Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · sql server 201610 Mar 2026
- CVE-2026-2611635İzleyin
SQL Server Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · sql server 201610 Mar 2026
+66 kayıt dahaÜreticinin tüm kayıtları
Adobe · 10 Mart
80 · 0 KEV · 0 kritik| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-21290İstismar yok | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)adobe · commerce b2b · CWE-79 | Yüksek8,7 | — | %0,5 | 10 Mar 2026 |
34İzleyin | CVE-2026-21333İstismar yok | Illustrator | Untrusted Search Path (CWE-426)adobe · illustrator · CWE-426 | Yüksek8,6 | — | %0,2 | 10 Mar 2026 |
32İzleyin | CVE-2026-21284İstismar yok | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)adobe · commerce b2b · CWE-79 | Yüksek8,1 | — | %0,4 | 10 Mar 2026 |
32İzleyin | CVE-2026-21311İstismar yok | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)adobe · commerce · CWE-79 | Yüksek8,0 | — | %0,3 | 10 Mar 2026 |
32İzleyin | CVE-2026-21361İstismar yok | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)adobe · commerce · CWE-79 | Yüksek8,1 | — | %0,4 | 10 Mar 2026 |
31İzleyin | CVE-2026-21362İstismar yok | Illustrator | Out-of-bounds Write (CWE-787)adobe · illustrator · CWE-787 | Yüksek7,8 | — | %0,1 | 10 Mar 2026 |
31İzleyin | CVE-2026-27220İstismar yok | Acrobat Reader | Use After Free (CWE-416)adobe · acrobat dc · CWE-416 | Yüksek7,8 | — | %0,4 | 10 Mar 2026 |
31İzleyin | CVE-2026-27267İstismar yok | Illustrator | Stack-based Buffer Overflow (CWE-121)adobe · illustrator · CWE-121 | Yüksek7,8 | — | %0,4 | 10 Mar 2026 |
31İzleyin | CVE-2026-27269İstismar yok | Premiere Pro | Out-of-bounds Read (CWE-125)adobe · premiere pro · CWE-125 | Yüksek7,8 | — | %0,3 | 10 Mar 2026 |
31İzleyin | CVE-2026-27271İstismar yok | Illustrator | Heap-based Buffer Overflow (CWE-122)adobe · illustrator · CWE-122 | Yüksek7,8 | — | %0,4 | 10 Mar 2026 |
31İzleyin | CVE-2026-27272İstismar yok | Illustrator | Out-of-bounds Write (CWE-787)adobe · illustrator · CWE-787 | Yüksek7,8 | — | %0,3 | 10 Mar 2026 |
31İzleyin | CVE-2026-27273İstismar yok | Substance3D - Stager | Out-of-bounds Write (CWE-787)adobe · substance 3d stager · CWE-787 | Yüksek7,8 | — | %0,3 | 10 Mar 2026 |
- CVE-2026-2129034İzleyin
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
YüksekCVSS 8,7İstismar yokEPSS %0adobe · commerce b2b10 Mar 2026
- CVE-2026-2133334İzleyin
Illustrator | Untrusted Search Path (CWE-426)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · illustrator10 Mar 2026
- CVE-2026-2128432İzleyin
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
YüksekCVSS 8,1İstismar yokEPSS %0adobe · commerce b2b10 Mar 2026
- CVE-2026-2131132İzleyin
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
YüksekCVSS 8,0İstismar yokEPSS %0adobe · commerce10 Mar 2026
- CVE-2026-2136132İzleyin
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
YüksekCVSS 8,1İstismar yokEPSS %0adobe · commerce10 Mar 2026
- CVE-2026-2136231İzleyin
Illustrator | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · illustrator10 Mar 2026
- CVE-2026-2722031İzleyin
Acrobat Reader | Use After Free (CWE-416)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · acrobat dc10 Mar 2026
- CVE-2026-2726731İzleyin
Illustrator | Stack-based Buffer Overflow (CWE-121)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · illustrator10 Mar 2026
- CVE-2026-2726931İzleyin
Premiere Pro | Out-of-bounds Read (CWE-125)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · premiere pro10 Mar 2026
- CVE-2026-2727131İzleyin
Illustrator | Heap-based Buffer Overflow (CWE-122)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · illustrator10 Mar 2026
- CVE-2026-2727231İzleyin
Illustrator | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · illustrator10 Mar 2026
- CVE-2026-2727331İzleyin
Substance3D - Stager | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · substance 3d stager10 Mar 2026
+68 kayıt dahaÜreticinin tüm kayıtları
SAP · 10 Mart
13 · 0 KEV · 1 kritik| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2026-27685İstismar yok | Insecure Deserialization in SAP NetWeaver Enterprise Portal Administrationsap_se · sap netweaver enterprise portal administration · CWE-502 | Kritik9,1 | — | %0,6 | 10 Mar 2026 |
30İzleyin | CVE-2026-27689İstismar yok | Denial of service (DOS) in SAP Supply Chain Managementsap_se · sap supply chain management · CWE-606 | Yüksek7,7 | — | %0,6 | 10 Mar 2026 |
25İzleyin | CVE-2026-24309İstismar yok | Missing Authorization check in SAP NetWeaver Application Server for ABAPsap · netweaver application server abap · CWE-862 | Orta6,4 | — | %0,2 | 10 Mar 2026 |
25İzleyin | CVE-2026-24316İstismar yok | Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAPsap · netweaver application server abap · CWE-918 | Orta6,4 | — | %0,2 | 10 Mar 2026 |
25İzleyin | CVE-2026-27684İstismar yok | SQL Injection Vulnerability in SAP NetWeaver (Feedback Notification)sap_se · sap netweaver (feedback notification) · CWE-89 | Orta6,4 | — | %0,3 | 10 Mar 2026 |
24İzleyin | CVE-2026-0489İstismar yok | DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service)sap_se · sap business one (job service) · CWE-79 | Orta6,1 | — | %0,2 | 10 Mar 2026 |
23İzleyin | CVE-2026-27686İstismar yok | Missing Authorization check in SAP Business Warehouse (Service API)sap_se · sap business warehouse (service api) · CWE-862 | Orta5,9 | — | %0,3 | 10 Mar 2026 |
23İzleyin | CVE-2026-27687İstismar yok | Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugalsap_se · sap s/4hana hcm portugal and sap erp hcm portugal · CWE-862 | Orta5,8 | — | %0,3 | 10 Mar 2026 |
22İzleyin | CVE-2026-24311İstismar yok | Insecure Storage Protection vulnerability in SAP Customer Checkout 2.0sap_se · sap customer checkout 2.0 · CWE-312 | Orta5,6 | — | %0,1 | 10 Mar 2026 |
20İzleyin | CVE-2026-24313İstismar yok | Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)sap_se · sap solution tools plug-in (st-pi) · CWE-862 | Orta5,0 | — | %0,2 | 10 Mar 2026 |
20İzleyin | CVE-2026-24317İstismar yok | DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXTsap_se · sap gui for windows with active guixt · CWE-427 | Orta5,0 | — | %0,2 | 10 Mar 2026 |
20İzleyin | CVE-2026-27688İstismar yok | Missing Authorization check in SAP NetWeaver Application Server for ABAPsap · netweaver application server abap · CWE-862 | Orta5,0 | — | %0,3 | 10 Mar 2026 |
- CVE-2026-2768536İzleyin
Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration
KritikCVSS 9,1İstismar yokEPSS %1sap_se · sap netweaver enterprise portal administration10 Mar 2026
- CVE-2026-2768930İzleyin
Denial of service (DOS) in SAP Supply Chain Management
YüksekCVSS 7,7İstismar yokEPSS %1sap_se · sap supply chain management10 Mar 2026
- CVE-2026-2430925İzleyin
Missing Authorization check in SAP NetWeaver Application Server for ABAP
OrtaCVSS 6,4İstismar yokEPSS %0sap · netweaver application server abap10 Mar 2026
- CVE-2026-2431625İzleyin
Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP
OrtaCVSS 6,4İstismar yokEPSS %0sap · netweaver application server abap10 Mar 2026
- CVE-2026-2768425İzleyin
SQL Injection Vulnerability in SAP NetWeaver (Feedback Notification)
OrtaCVSS 6,4İstismar yokEPSS %0sap_se · sap netweaver (feedback notification)10 Mar 2026
- CVE-2026-048924İzleyin
DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service)
OrtaCVSS 6,1İstismar yokEPSS %0sap_se · sap business one (job service)10 Mar 2026
- CVE-2026-2768623İzleyin
Missing Authorization check in SAP Business Warehouse (Service API)
OrtaCVSS 5,9İstismar yokEPSS %0sap_se · sap business warehouse (service api)10 Mar 2026
- CVE-2026-2768723İzleyin
Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal
OrtaCVSS 5,8İstismar yokEPSS %0sap_se · sap s/4hana hcm portugal and sap erp hcm portugal10 Mar 2026
- CVE-2026-2431122İzleyin
Insecure Storage Protection vulnerability in SAP Customer Checkout 2.0
OrtaCVSS 5,6İstismar yokEPSS %0sap_se · sap customer checkout 2.010 Mar 2026
- CVE-2026-2431320İzleyin
Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)
OrtaCVSS 5,0İstismar yokEPSS %0sap_se · sap solution tools plug-in (st-pi)10 Mar 2026
- CVE-2026-2431720İzleyin
DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXT
OrtaCVSS 5,0İstismar yokEPSS %0sap_se · sap gui for windows with active guixt10 Mar 2026
- CVE-2026-2768820İzleyin
Missing Authorization check in SAP NetWeaver Application Server for ABAP
OrtaCVSS 5,0İstismar yokEPSS %0sap · netweaver application server abap10 Mar 2026
+1 kayıt dahaÜreticinin tüm kayıtları
Siemens · 10 Mart
9 · 0 KEV · 1 kritik| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2025-40943İstismar yok | Affected devices do not properly sanitize contents of trace files.siemens · simatic drive controller cpu 1504d tf · CWE-95 | Kritik9,4 | — | %0,5 | 10 Mar 2026 |
34İzleyin | CVE-2026-25573İstismar yok | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).siemens · sicam siapp sdk · CWE-73 | Yüksek8,6 | — | %0,5 | 10 Mar 2026 |
30İzleyin | CVE-2026-25569İstismar yok | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).siemens · sicam siapp sdk · CWE-787 | Yüksek7,5 | — | %0,2 | 10 Mar 2026 |
30İzleyin | CVE-2026-25570İstismar yok | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).siemens · sicam siapp sdk · CWE-121 | Yüksek7,5 | — | %0,2 | 10 Mar 2026 |
23İzleyin | CVE-2026-25571İstismar yok | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).siemens · sicam siapp sdk · CWE-130 | Orta5,9 | — | %0,1 | 10 Mar 2026 |
23İzleyin | CVE-2026-25572İstismar yok | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).siemens · sicam siapp sdk · CWE-130 | Orta5,9 | — | %0,1 | 10 Mar 2026 |
23İzleyin | CVE-2026-25605İstismar yok | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).siemens · sicam siapp sdk · CWE-73 | Orta5,9 | — | %0,1 | 10 Mar 2026 |
21İzleyin | CVE-2026-27661İstismar yok | A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).siemens · sinec security monitor · CWE-1230 | Orta5,3 | — | %0,3 | 10 Mar 2026 |
9İzleyin | CVE-2025-27769İstismar yok | A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile DC 40 kW EV Charging Ssiemens · heliox flex 180 kw ev charging station · CWE-923 | Düşük2,4 | — | %0,1 | 10 Mar 2026 |
- CVE-2025-4094337İzleyin
Affected devices do not properly sanitize contents of trace files.
KritikCVSS 9,4İstismar yokEPSS %0siemens · simatic drive controller cpu 1504d tf10 Mar 2026
- CVE-2026-2557334İzleyin
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).
YüksekCVSS 8,6İstismar yokEPSS %1siemens · sicam siapp sdk10 Mar 2026
- CVE-2026-2556930İzleyin
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).
YüksekCVSS 7,5İstismar yokEPSS %0siemens · sicam siapp sdk10 Mar 2026
- CVE-2026-2557030İzleyin
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).
YüksekCVSS 7,5İstismar yokEPSS %0siemens · sicam siapp sdk10 Mar 2026
- CVE-2026-2557123İzleyin
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).
OrtaCVSS 5,9İstismar yokEPSS %0siemens · sicam siapp sdk10 Mar 2026
- CVE-2026-2557223İzleyin
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).
OrtaCVSS 5,9İstismar yokEPSS %0siemens · sicam siapp sdk10 Mar 2026
- CVE-2026-2560523İzleyin
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).
OrtaCVSS 5,9İstismar yokEPSS %0siemens · sicam siapp sdk10 Mar 2026
- CVE-2026-2766121İzleyin
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).
OrtaCVSS 5,3İstismar yokEPSS %0siemens · sinec security monitor10 Mar 2026
- CVE-2025-277699İzleyin
A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile DC 40 kW EV Charging S
DüşükCVSS 2,4İstismar yokEPSS %0siemens · heliox flex 180 kw ev charging station10 Mar 2026
Schneider Electric · 10 Mart
6 · 0 KEV · 0 kritik| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2025-11739İstismar yok | CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges wheschneider-electric · ecostruxure power monitoring expert · CWE-502 | Yüksek8,5 | — | %0,2 | 10 Mar 2026 |
30İzleyin | CVE-2025-13957İstismar yok | CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proschneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert) · CWE-798 | Yüksek7,5 | — | %0,6 | 10 Mar 2026 |
28İzleyin | CVE-2026-1286İstismar yok | CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote cschneider-electric · ecostruxure foxboro dcs control software · CWE-502 | Yüksek7,0 | — | %0,3 | 10 Mar 2026 |
28İzleyin | CVE-2026-2273İstismar yok | CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on thschneider-electric · ecostruxure automation expert · CWE-94 | Yüksek7,2 | — | %0,2 | 10 Mar 2026 |
27İzleyin | CVE-2025-13901İstismar yok | CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol wheschneider-electric · modicon m241 firmware · CWE-404 | Orta6,9 | — | %0,5 | 10 Mar 2026 |
20İzleyin | CVE-2025-13902İstismar yok | CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition schneider-electric · modicon m258 firmware · CWE-79 | Orta5,1 | — | %0,2 | 10 Mar 2026 |
- CVE-2025-1173934İzleyin
CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges whe
YüksekCVSS 8,5İstismar yokEPSS %0schneider-electric · ecostruxure power monitoring expert10 Mar 2026
- CVE-2025-1395730İzleyin
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Pro
YüksekCVSS 7,5İstismar yokEPSS %1schneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert)10 Mar 2026
- CVE-2026-128628İzleyin
CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote c
YüksekCVSS 7,0İstismar yokEPSS %0schneider-electric · ecostruxure foxboro dcs control software10 Mar 2026
- CVE-2026-227328İzleyin
CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on th
YüksekCVSS 7,2İstismar yokEPSS %0schneider-electric · ecostruxure automation expert10 Mar 2026
- CVE-2025-1390127İzleyin
CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol whe
OrtaCVSS 6,9İstismar yokEPSS %0schneider-electric · modicon m241 firmware10 Mar 2026
- CVE-2025-1390220İzleyin
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause condition
OrtaCVSS 5,1İstismar yokEPSS %0schneider-electric · modicon m258 firmware10 Mar 2026