Yama Salısı
Haziran 2026
Her ayın ikinci salısı Microsoft, Adobe, SAP, Siemens ve Schneider Electric toplu yayın yapar; Oracle ocak, nisan, temmuz ve ekimde üçüncü salı. Burada o gün yayımlanan kayıtlar kendi veritabanımızdan, eylem puanına göre sıralı: önce KEV ve istismarı olgun olanlar.
Nasıl hesaplanır: CNA damgası + yayın tarihi (iki günlük pencere, UTC). Üreticinin bülteniyle bire bir eşleşme iddiası yok; ara güncellemeler ayrı günlerde çıkar.
330 kayıt · 0 KEV
Stack'inizi etkileyenler
Bu ayın kayıtlarından stack'inizdeki ürün ve sürümlere uyanlar.
Stack'inize uyanları görmek için giriş yapın; kayıtlar ve bildirimler ücretsiz. →
Microsoft · 9 Haziran
200 · 0 KEV · 8 kritik| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2026-26142İstismar yok | Nuance PowerScribe Remote Code Execution Vulnerabilitymicrosoft · nuance powerscribe 360 · CWE-502 | Kritik9,8 | — | %1,5 | 9 Haz 2026 |
39İzleyin | CVE-2026-44815İstismar yok | DHCP Client Service Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-121 | Kritik9,8 | — | %1,0 | 9 Haz 2026 |
39İzleyin | CVE-2026-45657İstismar yok | Windows Kernel Remote Code Execution Vulnerabilitymicrosoft · windows 11 23h2 · CWE-122 | Kritik9,8 | — | %1,0 | 9 Haz 2026 |
39İzleyin | CVE-2026-47291İstismar yok | HTTP.sys Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | Kritik9,8 | — | %1,0 | 9 Haz 2026 |
39İzleyin | CVE-2026-47643İstismar yok | Azure Stack Edge Remote Code Execution Vulnerabilitymicrosoft · azure stack edge · CWE-73 | Kritik9,8 | — | %1,0 | 9 Haz 2026 |
38İzleyin | CVE-2026-42904İstismar yok | Windows TCP/IP Elevation of Privilege Vulnerabilitymicrosoft · windows 10 21h2 · CWE-122 | Kritik9,6 | — | %0,5 | 9 Haz 2026 |
38İzleyin | CVE-2026-47281İstismar yok | Visual Studio Code Elevation of Privilege Vulnerabilitymicrosoft · visual studio code · CWE-306 | Kritik9,6 | — | %0,8 | 9 Haz 2026 |
36İzleyin | CVE-2026-45484İstismar yok | Microsoft SharePoint Elevation of Privilege Vulnerabilitymicrosoft · sharepoint server · CWE-502 | Yüksek8,8 | — | %2,3 | 9 Haz 2026 |
36İzleyin | CVE-2026-45602İstismar yok | Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerabilitymicrosoft · windows 10 1607 · CWE-349 | Kritik9,1 | — | %0,4 | 9 Haz 2026 |
35İzleyin | CVE-2026-32193İstismar yok | Azure Kubernetes Service (AKS) Remote Code Execution Vulnerabilitymicrosoft · azure kubernetes service · CWE-22 | Yüksek8,8 | — | %0,4 | 9 Haz 2026 |
35İzleyin | CVE-2026-40371İstismar yok | Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerabilitymicrosoft · dynamics 365 · CWE-280 | Yüksek8,8 | — | %0,8 | 9 Haz 2026 |
35İzleyin | CVE-2026-42985İstismar yok | Remote Desktop Client Remote Code Execution Vulnerabilitymicrosoft · remote desktop client · CWE-416 | Yüksek8,8 | — | %0,8 | 9 Haz 2026 |
- CVE-2026-2614239İzleyin
Nuance PowerScribe Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %2microsoft · nuance powerscribe 3609 Haz 2026
- CVE-2026-4481539İzleyin
DHCP Client Service Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1microsoft · windows 10 16079 Haz 2026
- CVE-2026-4565739İzleyin
Windows Kernel Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1microsoft · windows 11 23h29 Haz 2026
- CVE-2026-4729139İzleyin
HTTP.sys Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1microsoft · windows 10 16079 Haz 2026
- CVE-2026-4764339İzleyin
Azure Stack Edge Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1microsoft · azure stack edge9 Haz 2026
- CVE-2026-4290438İzleyin
Windows TCP/IP Elevation of Privilege Vulnerability
KritikCVSS 9,6İstismar yokEPSS %1microsoft · windows 10 21h29 Haz 2026
- CVE-2026-4728138İzleyin
Visual Studio Code Elevation of Privilege Vulnerability
KritikCVSS 9,6İstismar yokEPSS %1microsoft · visual studio code9 Haz 2026
- CVE-2026-4548436İzleyin
Microsoft SharePoint Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2microsoft · sharepoint server9 Haz 2026
- CVE-2026-4560236İzleyin
Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
KritikCVSS 9,1İstismar yokEPSS %0microsoft · windows 10 16079 Haz 2026
- CVE-2026-3219335İzleyin
Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · azure kubernetes service9 Haz 2026
- CVE-2026-4037135İzleyin
Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · dynamics 3659 Haz 2026
- CVE-2026-4298535İzleyin
Remote Desktop Client Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · remote desktop client9 Haz 2026
+188 kayıt dahaÜreticinin tüm kayıtları
Adobe · 9 Haziran
123 · 0 KEV · 4 kritik| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-47938İstismar yok | Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)adobe · campaign · CWE-918 | Kritik10,0 | — | %0,9 | 9 Haz 2026 |
40Planlayın | CVE-2026-48303İstismar yok | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)adobe · campaign · CWE-863 | Kritik10,0 | — | %1,2 | 9 Haz 2026 |
38İzleyin | CVE-2026-47928İstismar yok | ColdFusion | Improper Input Validation (CWE-20)adobe · coldfusion · CWE-20 | Kritik9,6 | — | %0,5 | 9 Haz 2026 |
37İzleyin | CVE-2026-34691İstismar yok | Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)adobe · experience manager · CWE-79 | Kritik9,3 | — | %0,7 | 9 Haz 2026 |
35İzleyin | CVE-2026-47932İstismar yok | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · coldfusion · CWE-22 | Yüksek8,8 | — | %0,5 | 9 Haz 2026 |
34İzleyin | CVE-2026-47906İstismar yok | Dreamweaver Desktop | Dependency on Vulnerable Third-Party Component (CWE-1395)adobe · dreamweaver · CWE-1395 | Yüksek8,6 | — | %0,3 | 9 Haz 2026 |
34İzleyin | CVE-2026-47907İstismar yok | Dreamweaver Desktop | Improper Access Control (CWE-284)adobe · dreamweaver · CWE-284 | Yüksek8,6 | — | %0,3 | 9 Haz 2026 |
33İzleyin | CVE-2026-47929İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek8,4 | — | %0,5 | 9 Haz 2026 |
33İzleyin | CVE-2026-47931İstismar yok | ColdFusion | Improper Input Validation (CWE-20)adobe · coldfusion · CWE-20 | Yüksek8,4 | — | %0,5 | 9 Haz 2026 |
32İzleyin | CVE-2026-34693İstismar yok | Adobe Experience Manager Forms JEE | Cross-site Scripting (Reflected XSS) (CWE-79)adobe · experience manager · CWE-79 | Yüksek8,0 | — | %0,6 | 9 Haz 2026 |
32İzleyin | CVE-2026-47930İstismar yok | ColdFusion | Improper Input Validation (CWE-20)adobe · coldfusion · CWE-20 | Yüksek8,1 | — | %0,9 | 9 Haz 2026 |
31İzleyin | CVE-2026-34695İstismar yok | InDesign Desktop | Stack-based Buffer Overflow (CWE-121)adobe · indesign · CWE-121 | Yüksek7,8 | — | %0,3 | 9 Haz 2026 |
- CVE-2026-4793840Planlayın
Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
KritikCVSS 10,0İstismar yokEPSS %1adobe · campaign9 Haz 2026
- CVE-2026-4830340Planlayın
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
KritikCVSS 10,0İstismar yokEPSS %1adobe · campaign9 Haz 2026
- CVE-2026-4792838İzleyin
ColdFusion | Improper Input Validation (CWE-20)
KritikCVSS 9,6İstismar yokEPSS %0adobe · coldfusion9 Haz 2026
- CVE-2026-3469137İzleyin
Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)
KritikCVSS 9,3İstismar yokEPSS %1adobe · experience manager9 Haz 2026
- CVE-2026-4793235İzleyin
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
YüksekCVSS 8,8İstismar yokEPSS %1adobe · coldfusion9 Haz 2026
- CVE-2026-4790634İzleyin
Dreamweaver Desktop | Dependency on Vulnerable Third-Party Component (CWE-1395)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · dreamweaver9 Haz 2026
- CVE-2026-4790734İzleyin
Dreamweaver Desktop | Improper Access Control (CWE-284)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · dreamweaver9 Haz 2026
- CVE-2026-4792933İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 8,4İstismar yokEPSS %0adobe · coldfusion9 Haz 2026
- CVE-2026-4793133İzleyin
ColdFusion | Improper Input Validation (CWE-20)
YüksekCVSS 8,4İstismar yokEPSS %0adobe · coldfusion9 Haz 2026
- CVE-2026-3469332İzleyin
Adobe Experience Manager Forms JEE | Cross-site Scripting (Reflected XSS) (CWE-79)
YüksekCVSS 8,0İstismar yokEPSS %1adobe · experience manager9 Haz 2026
- CVE-2026-4793032İzleyin
ColdFusion | Improper Input Validation (CWE-20)
YüksekCVSS 8,1İstismar yokEPSS %1adobe · coldfusion9 Haz 2026
- CVE-2026-3469531İzleyin
InDesign Desktop | Stack-based Buffer Overflow (CWE-121)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · indesign9 Haz 2026
+111 kayıt dahaÜreticinin tüm kayıtları
SAP · 9 Haziran
0 · 0 KEV · 0 kritikBu pencerede kayıt yok.
Siemens · 9 Haziran
6 · 0 KEV · 0 kritik| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-46746İstismar yok | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).siemens · sinec ins · CWE-78 | Yüksek8,7 | — | %0,8 | 9 Haz 2026 |
34İzleyin | CVE-2026-46748İstismar yok | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).siemens · sinec ins · CWE-250 | Yüksek8,7 | — | %0,3 | 9 Haz 2026 |
32İzleyin | CVE-2026-24349İstismar yok | A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versiosiemens · simatic wincc unified pc runtime · CWE-313 | Yüksek8,2 | — | %0,1 | 9 Haz 2026 |
27İzleyin | CVE-2025-40808İstismar yok | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (Csiemens · siprotec 5 6md84 (cp300) · CWE-434 | Orta6,9 | — | %0,2 | 9 Haz 2026 |
21İzleyin | CVE-2026-46747İstismar yok | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).siemens · sinec ins · CWE-26 | Orta5,3 | — | %0,4 | 9 Haz 2026 |
20İzleyin | CVE-2026-46749İstismar yok | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).siemens · sinec ins · CWE-760 | Orta5,0 | — | %0,2 | 9 Haz 2026 |
- CVE-2026-4674634İzleyin
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
YüksekCVSS 8,7İstismar yokEPSS %1siemens · sinec ins9 Haz 2026
- CVE-2026-4674834İzleyin
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
YüksekCVSS 8,7İstismar yokEPSS %0siemens · sinec ins9 Haz 2026
- CVE-2026-2434932İzleyin
A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versio
YüksekCVSS 8,2İstismar yokEPSS %0siemens · simatic wincc unified pc runtime9 Haz 2026
- CVE-2025-4080827İzleyin
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (C
OrtaCVSS 6,9İstismar yokEPSS %0siemens · siprotec 5 6md84 (cp300)9 Haz 2026
- CVE-2026-4674721İzleyin
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
OrtaCVSS 5,3İstismar yokEPSS %0siemens · sinec ins9 Haz 2026
- CVE-2026-4674920İzleyin
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
OrtaCVSS 5,0İstismar yokEPSS %0siemens · sinec ins9 Haz 2026
Schneider Electric · 9 Haziran
1 · 0 KEV · 0 kritik| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-8045İstismar yok | CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side fischneider-electric · struxureware data center expert · CWE-611 | Yüksek7,1 | — | %0,4 | 9 Haz 2026 |
- CVE-2026-804528İzleyin
CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side fi
YüksekCVSS 7,1İstismar yokEPSS %0schneider-electric · struxureware data center expert9 Haz 2026