our internal security research teams
47 kredili kayıt · son 12 ayda 47 · 1 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-0310İstismar yok | PAN-OS: Buffer Overflow Vulnerability via XML Processingpalo alto networks · cloud ngfw · CWE-787 | Yüksek7,2 | — | %0,4 | 10 Eyl 2026 |
23İzleyin | CVE-2026-0307İstismar yok | GlobalProtect App: Local Privilege Escalation Vulnerabilitiespalo alto networks · globalprotect app · CWE-426 | Orta5,9 | — | %0,1 | 10 Eyl 2026 |
17İzleyin | CVE-2026-0305İstismar yok | Prisma Access Agent: Information Disclosure Vulnerability on Linuxpalo alto networks · prisma access agent · CWE-200 | Orta4,3 | — | %0,1 | 10 Eyl 2026 |
23İzleyin | CVE-2026-0299İstismar yok | GlobalProtect App: Local Privilege Escalation Vulnerabilitiespaloaltonetworks · globalprotect · CWE-426 | Orta5,9 | — | %0,2 | 12 Ağu 2026 |
20İzleyin | CVE-2026-0298İstismar yok | GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)paloaltonetworks · globalprotect · CWE-94 | Orta5,2 | — | %0,3 | 12 Ağu 2026 |
20İzleyin | CVE-2026-0297İstismar yok | GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshakepaloaltonetworks · globalprotect · CWE-787 | Orta5,2 | — | %0,3 | 12 Ağu 2026 |
18İzleyin | CVE-2026-0296İstismar yok | GlobalProtect App: Improper Certificate Validation Bypass Vulnerabilitypaloaltonetworks · globalprotect · CWE-295 | Orta4,5 | — | %0,1 | 12 Ağu 2026 |
22İzleyin | CVE-2026-0277İstismar yok | Prisma Access Agent: Improper Certificate Validation on iOSpaloaltonetworks · prisma access agent · CWE-295 | Orta5,7 | — | %0,2 | 9 Tem 2026 |
26İzleyin | CVE-2026-0287İstismar yok | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processingpaloaltonetworks · cloud ngfw · CWE-754 | Orta6,6 | — | %0,6 | 9 Tem 2026 |
25İzleyin | CVE-2026-0286İstismar yok | PAN-OS: Authenticated Command Injection in CLIpaloaltonetworks · pan-os · CWE-78 | Orta6,0 | — | %1,7 | 9 Tem 2026 |
18İzleyin | CVE-2026-0285İstismar yok | PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interfacepaloaltonetworks · pan-os · CWE-918 | Orta4,7 | — | %0,4 | 9 Tem 2026 |
18İzleyin | CVE-2026-0284İstismar yok | PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)paloaltonetworks · pan-os · CWE-74 | Orta4,7 | — | %0,5 | 9 Tem 2026 |
10İzleyin | CVE-2026-0282İstismar yok | PAN-OS: File Deletion Vulnerability in Management Web Interfacepaloaltonetworks · pan-os · CWE-20 | Düşük2,7 | — | %0,3 | 9 Tem 2026 |
8İzleyin | CVE-2026-0281İstismar yok | PAN-OS: Information Disclosure Vulnerability in Management Web Interfacepaloaltonetworks · pan-os · CWE-524 | Düşük2,1 | — | %0,3 | 9 Tem 2026 |
5İzleyin | CVE-2026-0279İstismar yok | PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilitiespaloaltonetworks · pan-os · CWE-79 | Düşük1,3 | — | %0,8 | 9 Tem 2026 |
34İzleyin | CVE-2026-45169İstismar yok | Idira Privileged Access Manager (PAM) Self-Hosted Vault: Denial of Service due to Unexpected Input Processingpaloaltonetworks · idira privileged access manager vault · CWE-400 | Yüksek8,7 | — | %0,6 | 12 Haz 2026 |
30İzleyin | CVE-2026-45170İstismar yok | Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validationpaloaltonetworks · idira privilege cloud connector · CWE-295 | Yüksek7,5 | — | %0,2 | 11 Haz 2026 |
34İzleyin | CVE-2026-45174İstismar yok | Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initializationlinux · linux kernel · CWE-404 | Yüksek8,5 | — | %0,2 | 11 Haz 2026 |
33İzleyin | CVE-2026-45173İstismar yok | Idira Identity Browser Extension: Unauthorized Application Interaction via Origin Validation Failurepaloaltonetworks · idira identity browser extension · CWE-346 | Yüksek8,4 | — | %0,2 | 11 Haz 2026 |
34İzleyin | CVE-2026-45172İstismar yok | Idira Privileged Session Manager for SSH (PSMP): Arbitrary Command Execution via Improper Neutralization of Special Elements used in an OS Commandpaloaltonetworks · idira privileged session manager for ssh · CWE-78 | Yüksek8,7 | — | %0,8 | 11 Haz 2026 |
34İzleyin | CVE-2026-45171İstismar yok | Idira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Input Validationpaloaltonetworks · idira privileged session manager · CWE-22 | Yüksek8,7 | — | %0,7 | 11 Haz 2026 |
34İzleyin | CVE-2026-45175İstismar yok | Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation Processespaloaltonetworks · idira endpoint privilege manager · CWE-295 | Yüksek8,5 | — | %0,2 | 11 Haz 2026 |
33İzleyin | CVE-2026-45178İstismar yok | Idira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluster Endpointspaloaltonetworks · idira secrets manager · CWE-284 | Yüksek8,4 | — | %0,5 | 11 Haz 2026 |
36İzleyin | CVE-2026-45177İstismar yok | Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanismpaloaltonetworks · idira secrets manager edge · CWE-284 | Kritik9,1 | — | %0,7 | 11 Haz 2026 |
35İzleyin | CVE-2026-45176İstismar yok | Idira Endpoint Privilege Manager Agent: Local Privilege Escalation via Internal Communication or File Operation Manipulationpaloaltonetworks · idira endpoint privilege manager · CWE-269 | Yüksek8,9 | — | %0,2 | 11 Haz 2026 |
- CVE-2026-031028İzleyin
PAN-OS: Buffer Overflow Vulnerability via XML Processing
YüksekCVSS 7,2İstismar yokEPSS %0palo alto networks · cloud ngfw10 Eyl 2026
- CVE-2026-030723İzleyin
GlobalProtect App: Local Privilege Escalation Vulnerabilities
OrtaCVSS 5,9İstismar yokEPSS %0palo alto networks · globalprotect app10 Eyl 2026
- CVE-2026-030517İzleyin
Prisma Access Agent: Information Disclosure Vulnerability on Linux
OrtaCVSS 4,3İstismar yokEPSS %0palo alto networks · prisma access agent10 Eyl 2026
- CVE-2026-029923İzleyin
GlobalProtect App: Local Privilege Escalation Vulnerabilities
OrtaCVSS 5,9İstismar yokEPSS %0paloaltonetworks · globalprotect12 Ağu 2026
- CVE-2026-029820İzleyin
GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
OrtaCVSS 5,2İstismar yokEPSS %0paloaltonetworks · globalprotect12 Ağu 2026
- CVE-2026-029720İzleyin
GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
OrtaCVSS 5,2İstismar yokEPSS %0paloaltonetworks · globalprotect12 Ağu 2026
- CVE-2026-029618İzleyin
GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
OrtaCVSS 4,5İstismar yokEPSS %0paloaltonetworks · globalprotect12 Ağu 2026
- CVE-2026-027722İzleyin
Prisma Access Agent: Improper Certificate Validation on iOS
OrtaCVSS 5,7İstismar yokEPSS %0paloaltonetworks · prisma access agent9 Tem 2026
- CVE-2026-028726İzleyin
PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
OrtaCVSS 6,6İstismar yokEPSS %1paloaltonetworks · cloud ngfw9 Tem 2026
- CVE-2026-028625İzleyin
PAN-OS: Authenticated Command Injection in CLI
OrtaCVSS 6,0İstismar yokEPSS %2paloaltonetworks · pan-os9 Tem 2026
- CVE-2026-028518İzleyin
PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface
OrtaCVSS 4,7İstismar yokEPSS %0paloaltonetworks · pan-os9 Tem 2026
- CVE-2026-028418İzleyin
PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
OrtaCVSS 4,7İstismar yokEPSS %0paloaltonetworks · pan-os9 Tem 2026
- CVE-2026-028210İzleyin
PAN-OS: File Deletion Vulnerability in Management Web Interface
DüşükCVSS 2,7İstismar yokEPSS %0paloaltonetworks · pan-os9 Tem 2026
- CVE-2026-02818İzleyin
PAN-OS: Information Disclosure Vulnerability in Management Web Interface
DüşükCVSS 2,1İstismar yokEPSS %0paloaltonetworks · pan-os9 Tem 2026
- CVE-2026-02795İzleyin
PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
DüşükCVSS 1,3İstismar yokEPSS %1paloaltonetworks · pan-os9 Tem 2026
- CVE-2026-4516934İzleyin
Idira Privileged Access Manager (PAM) Self-Hosted Vault: Denial of Service due to Unexpected Input Processing
YüksekCVSS 8,7İstismar yokEPSS %1paloaltonetworks · idira privileged access manager vault12 Haz 2026
- CVE-2026-4517030İzleyin
Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation
YüksekCVSS 7,5İstismar yokEPSS %0paloaltonetworks · idira privilege cloud connector11 Haz 2026
- CVE-2026-4517434İzleyin
Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemon Initialization
YüksekCVSS 8,5İstismar yokEPSS %0linux · linux kernel11 Haz 2026
- CVE-2026-4517333İzleyin
Idira Identity Browser Extension: Unauthorized Application Interaction via Origin Validation Failure
YüksekCVSS 8,4İstismar yokEPSS %0paloaltonetworks · idira identity browser extension11 Haz 2026
- CVE-2026-4517234İzleyin
Idira Privileged Session Manager for SSH (PSMP): Arbitrary Command Execution via Improper Neutralization of Special Elements used in an OS Command
YüksekCVSS 8,7İstismar yokEPSS %1paloaltonetworks · idira privileged session manager for ssh11 Haz 2026
- CVE-2026-4517134İzleyin
Idira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Input Validation
YüksekCVSS 8,7İstismar yokEPSS %1paloaltonetworks · idira privileged session manager11 Haz 2026
- CVE-2026-4517534İzleyin
Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation Processes
YüksekCVSS 8,5İstismar yokEPSS %0paloaltonetworks · idira endpoint privilege manager11 Haz 2026
- CVE-2026-4517833İzleyin
Idira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluster Endpoints
YüksekCVSS 8,4İstismar yokEPSS %1paloaltonetworks · idira secrets manager11 Haz 2026
- CVE-2026-4517736İzleyin
Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism
KritikCVSS 9,1İstismar yokEPSS %1paloaltonetworks · idira secrets manager edge11 Haz 2026
- CVE-2026-4517635İzleyin
Idira Endpoint Privilege Manager Agent: Local Privilege Escalation via Internal Communication or File Operation Manipulation
YüksekCVSS 8,9İstismar yokEPSS %0paloaltonetworks · idira endpoint privilege manager11 Haz 2026