se1en
7 kredili kayıt · son 12 ayda 7 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
0İzleyin | CVE-2026-40913İstismar yok | Apache Airflow: Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-File RBAC Enforcementapache software foundation · apache airflow · CWE-285 | — | — | %0,1 | 2 gün önce |
17İzleyin | CVE-2026-16302İstismar yok | Spectra Legacy – Gutenberg Blocks <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposurebrainstormforce · spectra legacy – gutenberg blocks · CWE-200 | Orta4,3 | — | %0,2 | 24 Eyl 2026 |
21İzleyin | CVE-2026-12998İstismar yok | Forminator Forms <= 1.55.0.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'draft' Parameterwpmudev · forminator forms – contact form, payment form & custom form builder · CWE-639 | Orta5,3 | — | %0,5 | 16 Ağu 2026 |
21İzleyin | CVE-2026-10085İstismar yok | Ordinary group/direct message member can enable group_constrained and remove all channel participantsmattermost · mattermost server · CWE-862 | Orta5,4 | — | %0,2 | 13 Tem 2026 |
17İzleyin | CVE-2026-12904İstismar yok | Kadence Blocks <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Optimizer Data Deletion/Read/Modification via 'post_path' Pstellarwp · kadence blocks — page builder toolkit for gutenberg editor · CWE-639 | Orta4,3 | — | %0,4 | 1 Tem 2026 |
17İzleyin | CVE-2026-12902İstismar yok | Kadence Blocks <= 3.7.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Attachment Creation via kadence_import_process_pattern/kadence_istellarwp · kadence blocks — page builder toolkit for gutenberg editor · CWE-862 | Orta4,3 | — | %0,4 | 1 Tem 2026 |
17İzleyin | CVE-2026-4053İstismar yok | post edit time limit is not enforced on some post update operationsmattermost · mattermost server · CWE-672 | Orta4,3 | — | %0,1 | 15 May 2026 |
- CVE-2026-409130İzleyin
Apache Airflow: Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-File RBAC Enforcement
İstismar yokEPSS %0apache software foundation · apache airflow2 gün önce
- CVE-2026-1630217İzleyin
Spectra Legacy – Gutenberg Blocks <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposure
OrtaCVSS 4,3İstismar yokEPSS %0brainstormforce · spectra legacy – gutenberg blocks24 Eyl 2026
- CVE-2026-1299821İzleyin
Forminator Forms <= 1.55.0.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'draft' Parameter
OrtaCVSS 5,3İstismar yokEPSS %0wpmudev · forminator forms – contact form, payment form & custom form builder16 Ağu 2026
- CVE-2026-1008521İzleyin
Ordinary group/direct message member can enable group_constrained and remove all channel participants
OrtaCVSS 5,4İstismar yokEPSS %0mattermost · mattermost server13 Tem 2026
- CVE-2026-1290417İzleyin
Kadence Blocks <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Optimizer Data Deletion/Read/Modification via 'post_path' P
OrtaCVSS 4,3İstismar yokEPSS %0stellarwp · kadence blocks — page builder toolkit for gutenberg editor1 Tem 2026
- CVE-2026-1290217İzleyin
Kadence Blocks <= 3.7.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Attachment Creation via kadence_import_process_pattern/kadence_i
OrtaCVSS 4,3İstismar yokEPSS %0stellarwp · kadence blocks — page builder toolkit for gutenberg editor1 Tem 2026
- CVE-2026-405317İzleyin
post edit time limit is not enforced on some post update operations
OrtaCVSS 4,3İstismar yokEPSS %0mattermost · mattermost server15 May 2026