tdjackey
104 kredili kayıt · son 12 ayda 104 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-100559İstismar yok | OpenClaw before 2026.8.1 Command Injection via Escaped Newlinesopenclaw · openclaw · CWE-78 | Yüksek8,6 | — | %0,2 | 26 Eyl 2026 |
28İzleyin | CVE-2026-43577İstismar yok | OpenClaw < 2026.4.9 - Arbitrary File Read via Browser Interaction Routesopenclaw · openclaw · CWE-862 | Yüksek7,1 | — | %0,4 | 6 May 2026 |
34İzleyin | CVE-2026-41387İstismar yok | OpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitizationopenclaw · openclaw · CWE-183 | Yüksek8,5 | — | %0,4 | 28 Nis 2026 |
36İzleyin | CVE-2026-41386İstismar yok | OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codesopenclaw · openclaw · CWE-648 | Kritik9,1 | — | %0,6 | 28 Nis 2026 |
23İzleyin | CVE-2026-41373İstismar yok | OpenClaw < 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution Policyopenclaw · openclaw · CWE-427 | Orta5,8 | — | %0,2 | 28 Nis 2026 |
28İzleyin | CVE-2026-41369İstismar yok | OpenClaw < 2026.3.31 - Insufficient Environment Variable Sanitization in Host Executionopenclaw · openclaw · CWE-668 | Yüksek7,1 | — | %0,5 | 27 Nis 2026 |
24İzleyin | CVE-2026-41366İstismar yok | OpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelistingopenclaw · openclaw · CWE-732 | Orta6,0 | — | %0,3 | 27 Nis 2026 |
21İzleyin | CVE-2026-41355İstismar yok | OpenClaw < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File Conversionopenclaw · openclaw · CWE-829 | Orta5,4 | — | %0,2 | 23 Nis 2026 |
21İzleyin | CVE-2026-41350İstismar yok | OpenClaw < 2026.3.31 - Session Visibility Bypass via session_status in Unsandboxed Invocationsopenclaw · openclaw · CWE-863 | Orta5,3 | — | %0,3 | 23 Nis 2026 |
34İzleyin | CVE-2026-41303Kavram kanıtı | OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commandsopenclaw · openclaw · CWE-863 | Yüksek8,7 | — | %0,5 | 20 Nis 2026 |
19İzleyin | CVE-2026-41302İstismar yok | OpenClaw < 2026.3.31 - Server-Side Request Forgery via Unguarded fetch() in Marketplace Plugin Downloadopenclaw · openclaw · CWE-918 | Orta4,8 | — | %0,4 | 20 Nis 2026 |
34İzleyin | CVE-2026-41294İstismar yok | OpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env Fileopenclaw · openclaw · CWE-15 | Yüksek8,5 | — | %0,2 | 20 Nis 2026 |
28İzleyin | CVE-2026-35653İstismar yok | OpenClaw < 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.requestopenclaw · openclaw · CWE-863 | Yüksek7,2 | — | %0,7 | 10 Nis 2026 |
21İzleyin | CVE-2026-35620İstismar yok | OpenClaw < 2026.3.24 - Missing Authorization in /send and /allowlist Chat Commandsopenclaw · openclaw · CWE-862 | Orta5,3 | — | %0,5 | 10 Nis 2026 |
27İzleyin | CVE-2026-35640İstismar yok | OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsingopenclaw · openclaw · CWE-696 | Orta6,9 | — | %0,8 | 9 Nis 2026 |
25İzleyin | CVE-2026-35635İstismar yok | OpenClaw < 2026.3.22 - Webhook Path Route Replacement Vulnerability in Synology Chatopenclaw · openclaw · CWE-706 | Orta6,3 | — | %0,4 | 9 Nis 2026 |
28İzleyin | CVE-2026-35631İstismar yok | OpenClaw < 2026.3.22 - Missing Authorization Enforcement in Internal ACP Chat Commandsopenclaw · openclaw · CWE-862 | Yüksek7,1 | — | %0,4 | 9 Nis 2026 |
23İzleyin | CVE-2026-32988İstismar yok | OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creationopenclaw · openclaw · CWE-367 | Orta5,8 | — | %0,1 | 31 Mar 2026 |
28İzleyin | CVE-2026-32976İstismar yok | OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commandsopenclaw · openclaw · CWE-639 | Yüksek7,1 | — | %0,3 | 31 Mar 2026 |
29İzleyin | CVE-2026-32971İstismar yok | OpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commandsopenclaw · openclaw · CWE-451 | Yüksek7,3 | — | %0,4 | 31 Mar 2026 |
8İzleyin | CVE-2026-32970İstismar yok | OpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefsopenclaw · openclaw · CWE-636 | Düşük2,0 | — | %0,1 | 31 Mar 2026 |
21İzleyin | CVE-2026-32921İstismar yok | OpenClaw < 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.runopenclaw · openclaw · CWE-367 | Orta5,3 | — | %0,3 | 31 Mar 2026 |
36İzleyin | CVE-2026-32916İstismar yok | OpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopesopenclaw · openclaw · CWE-266 | Kritik9,2 | — | %0,6 | 31 Mar 2026 |
23İzleyin | CVE-2026-33574İstismar yok | OpenClaw < 2026.3.8 - Path Traversal via Tools Root Rebinding in Skills Downloadopenclaw · openclaw · CWE-367 | Orta5,8 | — | %0,1 | 29 Mar 2026 |
34İzleyin | CVE-2026-33573İstismar yok | OpenClaw < 2026.3.11 - Workspace Boundary Bypass via Agent RPC Parametersopenclaw · openclaw · CWE-668 | Yüksek8,7 | — | %0,5 | 29 Mar 2026 |
- CVE-2026-10055934İzleyin
OpenClaw before 2026.8.1 Command Injection via Escaped Newlines
YüksekCVSS 8,6İstismar yokEPSS %0openclaw · openclaw26 Eyl 2026
- CVE-2026-4357728İzleyin
OpenClaw < 2026.4.9 - Arbitrary File Read via Browser Interaction Routes
YüksekCVSS 7,1İstismar yokEPSS %0openclaw · openclaw6 May 2026
- CVE-2026-4138734İzleyin
OpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitization
YüksekCVSS 8,5İstismar yokEPSS %0openclaw · openclaw28 Nis 2026
- CVE-2026-4138636İzleyin
OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codes
KritikCVSS 9,1İstismar yokEPSS %1openclaw · openclaw28 Nis 2026
- CVE-2026-4137323İzleyin
OpenClaw < 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution Policy
OrtaCVSS 5,8İstismar yokEPSS %0openclaw · openclaw28 Nis 2026
- CVE-2026-4136928İzleyin
OpenClaw < 2026.3.31 - Insufficient Environment Variable Sanitization in Host Execution
YüksekCVSS 7,1İstismar yokEPSS %1openclaw · openclaw27 Nis 2026
- CVE-2026-4136624İzleyin
OpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelisting
OrtaCVSS 6,0İstismar yokEPSS %0openclaw · openclaw27 Nis 2026
- CVE-2026-4135521İzleyin
OpenClaw < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File Conversion
OrtaCVSS 5,4İstismar yokEPSS %0openclaw · openclaw23 Nis 2026
- CVE-2026-4135021İzleyin
OpenClaw < 2026.3.31 - Session Visibility Bypass via session_status in Unsandboxed Invocations
OrtaCVSS 5,3İstismar yokEPSS %0openclaw · openclaw23 Nis 2026
- CVE-2026-4130334İzleyin
OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands
YüksekCVSS 8,7Kavram kanıtıEPSS %1openclaw · openclaw20 Nis 2026
- CVE-2026-4130219İzleyin
OpenClaw < 2026.3.31 - Server-Side Request Forgery via Unguarded fetch() in Marketplace Plugin Download
OrtaCVSS 4,8İstismar yokEPSS %0openclaw · openclaw20 Nis 2026
- CVE-2026-4129434İzleyin
OpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env File
YüksekCVSS 8,5İstismar yokEPSS %0openclaw · openclaw20 Nis 2026
- CVE-2026-3565328İzleyin
OpenClaw < 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.request
YüksekCVSS 7,2İstismar yokEPSS %1openclaw · openclaw10 Nis 2026
- CVE-2026-3562021İzleyin
OpenClaw < 2026.3.24 - Missing Authorization in /send and /allowlist Chat Commands
OrtaCVSS 5,3İstismar yokEPSS %1openclaw · openclaw10 Nis 2026
- CVE-2026-3564027İzleyin
OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing
OrtaCVSS 6,9İstismar yokEPSS %1openclaw · openclaw9 Nis 2026
- CVE-2026-3563525İzleyin
OpenClaw < 2026.3.22 - Webhook Path Route Replacement Vulnerability in Synology Chat
OrtaCVSS 6,3İstismar yokEPSS %0openclaw · openclaw9 Nis 2026
- CVE-2026-3563128İzleyin
OpenClaw < 2026.3.22 - Missing Authorization Enforcement in Internal ACP Chat Commands
YüksekCVSS 7,1İstismar yokEPSS %0openclaw · openclaw9 Nis 2026
- CVE-2026-3298823İzleyin
OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation
OrtaCVSS 5,8İstismar yokEPSS %0openclaw · openclaw31 Mar 2026
- CVE-2026-3297628İzleyin
OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands
YüksekCVSS 7,1İstismar yokEPSS %0openclaw · openclaw31 Mar 2026
- CVE-2026-3297129İzleyin
OpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands
YüksekCVSS 7,3İstismar yokEPSS %0openclaw · openclaw31 Mar 2026
- CVE-2026-329708İzleyin
OpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs
DüşükCVSS 2,0İstismar yokEPSS %0openclaw · openclaw31 Mar 2026
- CVE-2026-3292121İzleyin
OpenClaw < 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.run
OrtaCVSS 5,3İstismar yokEPSS %0openclaw · openclaw31 Mar 2026
- CVE-2026-3291636İzleyin
OpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes
KritikCVSS 9,2İstismar yokEPSS %1openclaw · openclaw31 Mar 2026
- CVE-2026-3357423İzleyin
OpenClaw < 2026.3.8 - Path Traversal via Tools Root Rebinding in Skills Download
OrtaCVSS 5,8İstismar yokEPSS %0openclaw · openclaw29 Mar 2026
- CVE-2026-3357334İzleyin
OpenClaw < 2026.3.11 - Workspace Boundary Bypass via Agent RPC Parameters
YüksekCVSS 8,7İstismar yokEPSS %1openclaw · openclaw29 Mar 2026