h1ei1
7 kredili kayıt · son 12 ayda 7 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2026-80353İstismar yok | Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connectorapache software foundation · apache tomcat · CWE-367 | Yüksek8,1 | — | %0,3 | 20 Eki 2026 |
35İzleyin | CVE-2026-88900Kavram kanıtı | Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Executionapache · camel · CWE-502 | Yüksek8,8 | — | %0,6 | 19 Eki 2026 |
32İzleyin | CVE-2026-88901Kavram kanıtı | Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by defaultapache software foundation · apache camel · CWE-611 | Yüksek8,2 | — | %0,4 | 19 Eki 2026 |
28İzleyin | CVE-2026-71895İstismar yok | Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentialsapache software foundation · apache dolphinscheduler · CWE-862 | Yüksek7,1 | — | %0,2 | 8 Eki 2026 |
32İzleyin | CVE-2026-66087İstismar yok | Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint Endpointapache software foundation · apache dolphinscheduler · CWE-863 | Yüksek8,1 | — | %0,2 | 8 Eki 2026 |
32İzleyin | CVE-2026-66084İstismar yok | Apache DolphinScheduler: Project Authorization Bypass in the Task Definition with-upstream Endpointapache software foundation · apache dolphinscheduler · CWE-863 | Yüksek8,1 | — | %0,3 | 8 Eki 2026 |
2İzleyin | CVE-2026-81866İstismar yok | Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configurationapache · nifi · CWE-862 | Düşük0,5 | — | %0,5 | 16 Eyl 2026 |
- CVE-2026-8035332İzleyin
Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector
YüksekCVSS 8,1İstismar yokEPSS %0apache software foundation · apache tomcat20 Eki 2026
- CVE-2026-8890035İzleyin
Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution
YüksekCVSS 8,8Kavram kanıtıEPSS %0apache · camel19 Eki 2026
- CVE-2026-8890132İzleyin
Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default
YüksekCVSS 8,2Kavram kanıtıEPSS %0apache software foundation · apache camel19 Eki 2026
- CVE-2026-7189528İzleyin
Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials
YüksekCVSS 7,1İstismar yokEPSS %0apache software foundation · apache dolphinscheduler8 Eki 2026
- CVE-2026-6608732İzleyin
Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint Endpoint
YüksekCVSS 8,1İstismar yokEPSS %0apache software foundation · apache dolphinscheduler8 Eki 2026
- CVE-2026-6608432İzleyin
Apache DolphinScheduler: Project Authorization Bypass in the Task Definition with-upstream Endpoint
YüksekCVSS 8,1İstismar yokEPSS %0apache software foundation · apache dolphinscheduler8 Eki 2026
- CVE-2026-818662İzleyin
Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration
DüşükCVSS 0,5İstismar yokEPSS %0apache · nifi16 Eyl 2026