zed kayıtları
zed üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %45,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-356 Product UI does not Warn User of Unsafe Actions1
- CWE-184 Incomplete List of Disallowed Inputs1
- CWE-61 UNIX Symbolic Link (Symlink) Following1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-27976İstismar yok | Zed Extension Sandbox Escape via Tar Symlink Followingzed · zed · CWE-61 | Yüksek8,8 | — | %0,7 | 25 Şub 2026 |
35İzleyin | CVE-2026-44462İstismar yok | Zed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Permissionszed · zed · CWE-184 | Yüksek8,8 | — | %0,5 | 28 May 2026 |
34İzleyin | CVE-2026-44465İstismar yok | Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/configzed · zed · CWE-78 | Yüksek8,6 | — | %0,3 | 28 May 2026 |
34İzleyin | CVE-2026-44461İstismar yok | Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote)zed · zed · CWE-78 | Yüksek8,6 | — | %0,2 | 28 May 2026 |
34İzleyin | CVE-2026-44466İstismar yok | Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissionszed · zed · CWE-78 | Yüksek8,6 | — | %0,2 | 28 May 2026 |
32İzleyin | CVE-2026-25805İstismar yok | Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.zed · zed · CWE-356 | Yüksek8,0 | — | %0,4 | 10 Şub 2026 |
31İzleyin | CVE-2026-44463İstismar yok | Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissionszed · zed · CWE-78 | Yüksek7,8 | — | %0,2 | 28 May 2026 |
29İzleyin | CVE-2026-27800İstismar yok | Zed has Zip Slip Path Traversal in Extension Archive Extractionzed · zed · CWE-22 | Yüksek7,4 | — | %0,4 | 25 Şub 2026 |
29İzleyin | CVE-2025-68433İstismar yok | Zed IDE MCP Context Server Configuration Arbitrary Code Executionzed · zed · CWE-77 | Yüksek7,3 | — | %0,3 | 17 Ara 2025 |
29İzleyin | CVE-2025-68432İstismar yok | Zed IDE LSP Binary Configuration Arbitrary Code Executionzed · zed · CWE-77 | Yüksek7,3 | — | %0,3 | 17 Ara 2025 |
28İzleyin | CVE-2026-27967İstismar yok | Symlink Escape in Agent File Toolszed · zed · CWE-59 | Yüksek7,1 | — | %0,2 | 25 Şub 2026 |
- CVE-2026-2797635İzleyin
Zed Extension Sandbox Escape via Tar Symlink Following
YüksekCVSS 8,8İstismar yokEPSS %1zed · zed25 Şub 2026
- CVE-2026-4446235İzleyin
Zed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Permissions
YüksekCVSS 8,8İstismar yokEPSS %0zed · zed28 May 2026
- CVE-2026-4446534İzleyin
Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config
YüksekCVSS 8,6İstismar yokEPSS %0zed · zed28 May 2026
- CVE-2026-4446134İzleyin
Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote)
YüksekCVSS 8,6İstismar yokEPSS %0zed · zed28 May 2026
- CVE-2026-4446634İzleyin
Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions
YüksekCVSS 8,6İstismar yokEPSS %0zed · zed28 May 2026
- CVE-2026-2580532İzleyin
Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.
YüksekCVSS 8,0İstismar yokEPSS %0zed · zed10 Şub 2026
- CVE-2026-4446331İzleyin
Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions
YüksekCVSS 7,8İstismar yokEPSS %0zed · zed28 May 2026
- CVE-2026-2780029İzleyin
Zed has Zip Slip Path Traversal in Extension Archive Extraction
YüksekCVSS 7,4İstismar yokEPSS %0zed · zed25 Şub 2026
- CVE-2025-6843329İzleyin
Zed IDE MCP Context Server Configuration Arbitrary Code Execution
YüksekCVSS 7,3İstismar yokEPSS %0zed · zed17 Ara 2025
- CVE-2025-6843229İzleyin
Zed IDE LSP Binary Configuration Arbitrary Code Execution
YüksekCVSS 7,3İstismar yokEPSS %0zed · zed17 Ara 2025
- CVE-2026-2796728İzleyin
Symlink Escape in Agent File Tools
YüksekCVSS 7,1İstismar yokEPSS %0zed · zed25 Şub 2026