KeenSecurityLab

96 kredili kayıt · son 12 ayda 96 · 0 tanesi CISA KEV’de

Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.

Bu ad yeni bir CVE'de kredilendirildiğinde haber alın

Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.

Kredili kayıtlar

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
37İzleyin	CVE-2026-115384İstismar yok	Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflowbytecodealliance · wasmtime · CWE-20	Kritik9,4	—	%0,3	4 gün önce
23İzleyin	CVE-2026-115382İstismar yok	Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 wasi:http Zero Timeout Panic DoSbytecodealliance · wasmtime · CWE-1284	Orta5,9	—	%0,2	4 gün önce
23İzleyin	CVE-2026-115381İstismar yok	Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Unbounded Host Memory Allocation via SinkOutputStream write-zeroesbytecodealliance · wasmtime · CWE-770 Hizmet dışı bırakma	Orta5,9	—	%0,2	4 gün önce
20İzleyin	CVE-2026-115380İstismar yok	Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Fuel Limit Bypass DoS via WASI Preview 0 poll_oneoffbytecodealliance · wasmtime · CWE-770 Hizmet dışı bırakma	Orta5,1	—	%0,1	4 gün önce
24İzleyin	CVE-2026-109254İstismar yok	FreeRDP 2.1.0 before 3.32.0 Use-After-Free via rdpsnd Disconnect Pathfreerdp · freerdp · CWE-416 Kimlik doğrulamasız Bellek hatası	Orta6,0	—	%0,2	12 Eki 2026
28İzleyin	CVE-2026-91956İstismar yok	FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRCfreerdp · freerdp · CWE-125 Kimlik doğrulamasız Bellek hatası	Yüksek7,1	—	%0,3	15 Eyl 2026
28İzleyin	CVE-2026-91950İstismar yok	FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 Wraparoundfreerdp · freerdp · CWE-125 Kimlik doğrulamasız Bellek hatası	Yüksek7,1	—	%0,4	15 Eyl 2026
30İzleyin	CVE-2026-62229İstismar yok	OpenClaw < 2026.5.18 Authorization Bypass via Glob Matchingopenclaw · openclaw · CWE-22 Yol geçişi	Yüksek7,7	—	%0,7	17 Tem 2026
19İzleyin	CVE-2026-62227İstismar yok	OpenClaw 2026.4.14 < 2026.5.26 SSRF via Browser Snapshotopenclaw · openclaw · CWE-918 SSRF	Orta4,9	—	%0,3	17 Tem 2026
20İzleyin	CVE-2026-62226İstismar yok	OpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act Routeopenclaw · openclaw · CWE-918 SSRF	Orta5,1	—	%0,3	17 Tem 2026
9İzleyin	CVE-2026-62225İstismar yok	OpenClaw < 2026.5.18 Authorization Bypass via Skill Command Dispatchopenclaw · openclaw · CWE-863 Erişim denetimi (IDOR)	Düşük2,3	—	%0,2	17 Tem 2026
9İzleyin	CVE-2026-53852İstismar yok	OpenClaw < 2026.4.25 - Scope Bypass via Empty-Scope Device Re-pairingopenclaw · openclaw · CWE-636	Düşük2,3	—	%0,2	16 Haz 2026
27İzleyin	CVE-2026-53850İstismar yok	OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus Commandopenclaw · openclaw · CWE-862 Erişim denetimi (IDOR)	Orta6,8	—	%0,0	16 Haz 2026
21İzleyin	CVE-2026-53847İstismar yok	OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scopeopenclaw · openclaw · CWE-266	Orta5,3	—	%0,1	16 Haz 2026
24İzleyin	CVE-2026-53844İstismar yok	OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Searchopenclaw · openclaw · CWE-862 Erişim denetimi (IDOR)	Orta6,0	—	%0,2	16 Haz 2026
24İzleyin	CVE-2026-53863İstismar yok	OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policyopenclaw · openclaw · CWE-639 Erişim denetimi (IDOR)	Orta6,0	—	%0,1	16 Haz 2026
21İzleyin	CVE-2026-53861İstismar yok	OpenClaw < 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOSopenclaw · openclaw · CWE-184 RCE	Orta5,3	—	%0,2	16 Haz 2026
24İzleyin	CVE-2026-53854İstismar yok	OpenClaw < 2026.4.25 - Privilege Escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat Commandsopenclaw · openclaw · CWE-863 Erişim denetimi (IDOR)	Orta6,0	—	%0,2	16 Haz 2026
9İzleyin	CVE-2026-53845İstismar yok	OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skippingopenclaw · openclaw · CWE-693	Düşük2,3	—	%0,1	16 Haz 2026
25İzleyin	CVE-2026-53837İstismar yok	OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlersopenclaw · openclaw · CWE-636 Kimlik doğrulamasız	Orta6,3	—	%0,1	12 Haz 2026
9İzleyin	CVE-2026-53835İstismar yok	OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindingsopenclaw · openclaw · CWE-863 Erişim denetimi (IDOR)	Düşük2,3	—	%0,1	12 Haz 2026
32İzleyin	CVE-2026-53834İstismar yok	OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commandsopenclaw · openclaw · CWE-863 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,2	—	%0,1	12 Haz 2026
30İzleyin	CVE-2026-53828İstismar yok	OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcementopenclaw · openclaw · CWE-863 Erişim denetimi (IDOR)	Yüksek7,7	—	%0,2	12 Haz 2026
27İzleyin	CVE-2026-53818İstismar yok	OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopbackopenclaw · openclaw · CWE-862 Erişim denetimi (IDOR)	Orta6,9	—	%0,0	11 Haz 2026
19İzleyin	CVE-2026-53809İstismar yok	OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policyopenclaw · openclaw · CWE-863 Erişim denetimi (IDOR)	Orta4,8	—	%0,0	11 Haz 2026

CVE-2026-115384
37İzleyin
Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow
KritikCVSS 9,4İstismar yokEPSS %0
bytecodealliance · wasmtime4 gün önce
CVE-2026-115382
23İzleyin
Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 wasi:http Zero Timeout Panic DoS
OrtaCVSS 5,9İstismar yokEPSS %0
bytecodealliance · wasmtime4 gün önce
CVE-2026-115381
23İzleyin
Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Unbounded Host Memory Allocation via SinkOutputStream write-zeroes
OrtaCVSS 5,9İstismar yokEPSS %0
- Hizmet dışı bırakma
bytecodealliance · wasmtime4 gün önce
CVE-2026-115380
20İzleyin
Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Fuel Limit Bypass DoS via WASI Preview 0 poll_oneoff
OrtaCVSS 5,1İstismar yokEPSS %0
- Hizmet dışı bırakma
bytecodealliance · wasmtime4 gün önce
CVE-2026-109254
24İzleyin
FreeRDP 2.1.0 before 3.32.0 Use-After-Free via rdpsnd Disconnect Path
OrtaCVSS 6,0İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
freerdp · freerdp12 Eki 2026
CVE-2026-91956
28İzleyin
FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRC
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
freerdp · freerdp15 Eyl 2026
CVE-2026-91950
28İzleyin
FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 Wraparound
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
freerdp · freerdp15 Eyl 2026
CVE-2026-62229
30İzleyin
OpenClaw < 2026.5.18 Authorization Bypass via Glob Matching
YüksekCVSS 7,7İstismar yokEPSS %0
- Yol geçişi
openclaw · openclaw17 Tem 2026
CVE-2026-62227
19İzleyin
OpenClaw 2026.4.14 < 2026.5.26 SSRF via Browser Snapshot
OrtaCVSS 4,9İstismar yokEPSS %0
- SSRF
openclaw · openclaw17 Tem 2026
CVE-2026-62226
20İzleyin
OpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act Route
OrtaCVSS 5,1İstismar yokEPSS %0
- SSRF
openclaw · openclaw17 Tem 2026
CVE-2026-62225
9İzleyin
OpenClaw < 2026.5.18 Authorization Bypass via Skill Command Dispatch
DüşükCVSS 2,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw17 Tem 2026
CVE-2026-53852
9İzleyin
OpenClaw < 2026.4.25 - Scope Bypass via Empty-Scope Device Re-pairing
DüşükCVSS 2,3İstismar yokEPSS %0
openclaw · openclaw16 Haz 2026
CVE-2026-53850
27İzleyin
OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus Command
OrtaCVSS 6,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw16 Haz 2026
CVE-2026-53847
21İzleyin
OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scope
OrtaCVSS 5,3İstismar yokEPSS %0
openclaw · openclaw16 Haz 2026
CVE-2026-53844
24İzleyin
OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search
OrtaCVSS 6,0İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw16 Haz 2026
CVE-2026-53863
24İzleyin
OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policy
OrtaCVSS 6,0İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw16 Haz 2026
CVE-2026-53861
21İzleyin
OpenClaw < 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOS
OrtaCVSS 5,3İstismar yokEPSS %0
- RCE
openclaw · openclaw16 Haz 2026
CVE-2026-53854
24İzleyin
OpenClaw < 2026.4.25 - Privilege Escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat Commands
OrtaCVSS 6,0İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw16 Haz 2026
CVE-2026-53845
9İzleyin
OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping
DüşükCVSS 2,3İstismar yokEPSS %0
openclaw · openclaw16 Haz 2026
CVE-2026-53837
25İzleyin
OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers
OrtaCVSS 6,3İstismar yokEPSS %0
- Kimlik doğrulamasız
openclaw · openclaw12 Haz 2026
CVE-2026-53835
9İzleyin
OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings
DüşükCVSS 2,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw12 Haz 2026
CVE-2026-53834
32İzleyin
OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
openclaw · openclaw12 Haz 2026
CVE-2026-53828
30İzleyin
OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement
YüksekCVSS 7,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw12 Haz 2026
CVE-2026-53818
27İzleyin
OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback
OrtaCVSS 6,9İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw11 Haz 2026
CVE-2026-53809
19İzleyin
OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy
OrtaCVSS 4,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openclaw · openclaw11 Haz 2026