todb
AHA!
34 kredili kayıt · son 12 ayda 17 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-105040İstismar yok | EnergizeLab Eilik User-ID Mass Assignment Account Takeoverenergizelab · nestjs auth service · CWE-639 | Yüksek8,8 | — | %0,3 | 6 gün önce |
38İzleyin | CVE-2026-105039İstismar yok | EnergizeLab Station Middleware Admin APIs Missing Role Checksenergizelab · station-middleware · CWE-862 | Kritik9,6 | — | %0,2 | 6 gün önce |
39İzleyin | CVE-2026-105038İstismar yok | EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switchingenergizelab · fastapi ai inference server · CWE-306 | Kritik9,8 | — | %0,6 | 6 gün önce |
39İzleyin | CVE-2026-105037İstismar yok | EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Readenergizelab · station-middleware · CWE-73 | Kritik9,9 | — | %0,4 | 6 gün önce |
30İzleyin | CVE-2026-105036İstismar yok | EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checksenergizelab · robot firmware (mode 104000) · CWE-494 | Yüksek7,5 | — | %0,2 | 6 gün önce |
31İzleyin | CVE-2026-105035İstismar yok | EnergizeLab FirmwareUpdater Universal Hard-Coded AES Keyenergizelab · firmwareupdater · CWE-321 | Yüksek7,8 | — | %0,1 | 6 gün önce |
32İzleyin | CVE-2026-105034İstismar yok | EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbersenergizelab · nestjs auth service · CWE-287 | Yüksek8,2 | — | %0,5 | 6 gün önce |
35İzleyin | CVE-2026-105033İstismar yok | EnergizeLab AI Station Default Root Credentials with SSH Enabledenergizelab · ai station firmware (rk3562) · CWE-798 | Yüksek8,8 | — | %0,3 | 6 gün önce |
36İzleyin | CVE-2026-105032İstismar yok | EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Writeenergizelab · fastapi ai inference server · CWE-22 | Kritik9,1 | — | %0,9 | 6 gün önce |
30İzleyin | CVE-2026-14765İstismar yok | Epic Games Unreal Engine Insecure Default URL Scheme Allowance in LaunchURLepic games · unreal engine · CWE-1188 | Yüksek7,7 | — | %0,3 | 14 Eki 2026 |
34İzleyin | CVE-2026-7574Kavram kanıtı | Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Useanthropic · claude desktop cowork · CWE-353 | Yüksek8,7 | — | %0,1 | 23 Haz 2026 |
39İzleyin | CVE-2026-7415İstismar yok | Open MQTT orchestration without read/write ACLs in Yarbo robot firmwareyarbo · lawn mower firmware · CWE-306 | Kritik9,8 | — | %0,7 | 7 May 2026 |
39İzleyin | CVE-2026-7414İstismar yok | Hardcoded credentials in Yarbo robot firmwareyarbo · lawn mower firmware · CWE-798 | Kritik9,8 | — | %0,6 | 7 May 2026 |
39İzleyin | CVE-2026-7413İstismar yok | Persistent undocumented backdoor access in Yarbo robotyarbo · lawn mower firmware · CWE-912 | Kritik9,8 | — | %0,7 | 7 May 2026 |
35İzleyin | CVE-2026-4946İstismar yok | NSA Ghidra Auto-Analysis Annotation Command Executionnsa · ghidra · CWE-78 | Yüksek8,8 | — | %0,7 | 29 Mar 2026 |
31İzleyin | CVE-2026-1442İstismar yok | Unitree UPK files Hard-Coded Keyunitree · go2 edu plus firmware · CWE-321 | Yüksek7,8 | — | %0,1 | 27 Şub 2026 |
38İzleyin | CVE-2025-35028İstismar yok | HexStrike AI MCP Server Command Injection0x4m4 · hexstrike ai · CWE-78 | Kritik9,1 | — | %5,2 | 30 Kas 2025 |
30İzleyin | CVE-2025-35027İstismar yok | Unitree Multiple Robotic Products Command Injectionunitree · g1 firmware · CWE-78 | Yüksek7,3 | — | %2,6 | 26 Eyl 2025 |
39İzleyin | CVE-2025-3461İstismar yok | ON Semiconductor Quantenna Telnet Missing Authenticationonsemi · qhs710 firmware · CWE-306 | Kritik9,8 | — | %0,5 | 8 Haz 2025 |
31İzleyin | CVE-2025-3460İstismar yok | ON Semiconductor Quantenna set_tx_pow Argument Injectiononsemi · qcs-ax3-s5 firmware · CWE-88 | Yüksek7,8 | — | %0,9 | 8 Haz 2025 |
31İzleyin | CVE-2025-3459İstismar yok | ON Semiconductor Quantenna transmit_file Argument Injectiononsemi · qcs-ax3-s5 firmware · CWE-88 | Yüksek7,8 | — | %0,6 | 8 Haz 2025 |
28İzleyin | CVE-2025-35010İstismar yok | Microhard Bullet-LTE and IPn4Gii AT+MNPINGTM Argument Injectionmicrohardcorp · ipn4gii-na2 firmware · CWE-88 | Yüksek7,1 | — | %1,0 | 8 Haz 2025 |
28İzleyin | CVE-2025-35009İstismar yok | Microhard Bullet-LTE and IPn4Gii AT+MNNETSP Argument Injectionmicrohardcorp · ipn4gii-na2 firmware · CWE-88 | Yüksek7,1 | — | %1,0 | 8 Haz 2025 |
28İzleyin | CVE-2025-35008İstismar yok | Microhard Bullet-LTE and IPn4Gii AT+MMNAME Argument Injectionmicrohardcorp · ipn4gii-na2 firmware · CWE-88 | Yüksek7,1 | — | %1,0 | 8 Haz 2025 |
28İzleyin | CVE-2025-35007İstismar yok | Microhard Bullet-LTE and IPn4Gii AT+MFRULE Argument Injectionmicrohardcorp · ipn4gii-na2 firmware · CWE-88 | Yüksek7,1 | — | %1,0 | 8 Haz 2025 |
- CVE-2026-10504035İzleyin
EnergizeLab Eilik User-ID Mass Assignment Account Takeover
YüksekCVSS 8,8İstismar yokEPSS %0energizelab · nestjs auth service6 gün önce
- CVE-2026-10503938İzleyin
EnergizeLab Station Middleware Admin APIs Missing Role Checks
KritikCVSS 9,6İstismar yokEPSS %0energizelab · station-middleware6 gün önce
- CVE-2026-10503839İzleyin
EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching
KritikCVSS 9,8İstismar yokEPSS %0energizelab · fastapi ai inference server6 gün önce
- CVE-2026-10503739İzleyin
EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read
KritikCVSS 9,9İstismar yokEPSS %0energizelab · station-middleware6 gün önce
- CVE-2026-10503630İzleyin
EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks
YüksekCVSS 7,5İstismar yokEPSS %0energizelab · robot firmware (mode 104000)6 gün önce
- CVE-2026-10503531İzleyin
EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key
YüksekCVSS 7,8İstismar yokEPSS %0energizelab · firmwareupdater6 gün önce
- CVE-2026-10503432İzleyin
EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers
YüksekCVSS 8,2İstismar yokEPSS %0energizelab · nestjs auth service6 gün önce
- CVE-2026-10503335İzleyin
EnergizeLab AI Station Default Root Credentials with SSH Enabled
YüksekCVSS 8,8İstismar yokEPSS %0energizelab · ai station firmware (rk3562)6 gün önce
- CVE-2026-10503236İzleyin
EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write
KritikCVSS 9,1İstismar yokEPSS %0energizelab · fastapi ai inference server6 gün önce
- CVE-2026-1476530İzleyin
Epic Games Unreal Engine Insecure Default URL Scheme Allowance in LaunchURL
YüksekCVSS 7,7İstismar yokEPSS %0epic games · unreal engine14 Eki 2026
- CVE-2026-757434İzleyin
Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use
YüksekCVSS 8,7Kavram kanıtıEPSS %0anthropic · claude desktop cowork23 Haz 2026
- CVE-2026-741539İzleyin
Open MQTT orchestration without read/write ACLs in Yarbo robot firmware
KritikCVSS 9,8İstismar yokEPSS %0yarbo · lawn mower firmware7 May 2026
- CVE-2026-741439İzleyin
Hardcoded credentials in Yarbo robot firmware
KritikCVSS 9,8İstismar yokEPSS %0yarbo · lawn mower firmware7 May 2026
- CVE-2026-741339İzleyin
Persistent undocumented backdoor access in Yarbo robot
KritikCVSS 9,8İstismar yokEPSS %0yarbo · lawn mower firmware7 May 2026
- CVE-2026-494635İzleyin
NSA Ghidra Auto-Analysis Annotation Command Execution
YüksekCVSS 8,8İstismar yokEPSS %0nsa · ghidra29 Mar 2026
- CVE-2026-144231İzleyin
Unitree UPK files Hard-Coded Key
YüksekCVSS 7,8İstismar yokEPSS %0unitree · go2 edu plus firmware27 Şub 2026
- CVE-2025-3502838İzleyin
HexStrike AI MCP Server Command Injection
KritikCVSS 9,1İstismar yokEPSS %50x4m4 · hexstrike ai30 Kas 2025
- CVE-2025-3502730İzleyin
Unitree Multiple Robotic Products Command Injection
YüksekCVSS 7,3İstismar yokEPSS %2unitree · g1 firmware26 Eyl 2025
- CVE-2025-346139İzleyin
ON Semiconductor Quantenna Telnet Missing Authentication
KritikCVSS 9,8İstismar yokEPSS %0onsemi · qhs710 firmware8 Haz 2025
- CVE-2025-346031İzleyin
ON Semiconductor Quantenna set_tx_pow Argument Injection
YüksekCVSS 7,8İstismar yokEPSS %0onsemi · qcs-ax3-s5 firmware8 Haz 2025
- CVE-2025-345931İzleyin
ON Semiconductor Quantenna transmit_file Argument Injection
YüksekCVSS 7,8İstismar yokEPSS %0onsemi · qcs-ax3-s5 firmware8 Haz 2025
- CVE-2025-3501028İzleyin
Microhard Bullet-LTE and IPn4Gii AT+MNPINGTM Argument Injection
YüksekCVSS 7,1İstismar yokEPSS %1microhardcorp · ipn4gii-na2 firmware8 Haz 2025
- CVE-2025-3500928İzleyin
Microhard Bullet-LTE and IPn4Gii AT+MNNETSP Argument Injection
YüksekCVSS 7,1İstismar yokEPSS %1microhardcorp · ipn4gii-na2 firmware8 Haz 2025
- CVE-2025-3500828İzleyin
Microhard Bullet-LTE and IPn4Gii AT+MMNAME Argument Injection
YüksekCVSS 7,1İstismar yokEPSS %1microhardcorp · ipn4gii-na2 firmware8 Haz 2025
- CVE-2025-3500728İzleyin
Microhard Bullet-LTE and IPn4Gii AT+MFRULE Argument Injection
YüksekCVSS 7,1İstismar yokEPSS %1microhardcorp · ipn4gii-na2 firmware8 Haz 2025