İçeriğe atla
Noroxi

Yama Salısı

Nisan 2026

Her ayın ikinci salısı Microsoft, Adobe, SAP, Siemens ve Schneider Electric toplu yayın yapar; Oracle ocak, nisan, temmuz ve ekimde üçüncü salı. Burada o gün yayımlanan kayıtlar kendi veritabanımızdan, eylem puanına göre sıralı: önce KEV ve istismarı olgun olanlar.

Nasıl hesaplanır: CNA damgası + yayın tarihi (iki günlük pencere, UTC). Üreticinin bülteniyle bire bir eşleşme iddiası yok; ara güncellemeler ayrı günlerde çıkar.

331 kayıt · 4 KEV

Stack'inizi etkileyenler

Bu ayın kayıtlarından stack'inizdeki ürün ve sürümlere uyanlar.

Stack'inize uyanları görmek için giriş yapın; kayıtlar ve bildirimler ücretsiz. →

Microsoft · 14 Nisan

163 · 4 KEV · 2 kritik
  • CVE-2026-32201
    69Bu hafta

    Microsoft SharePoint Server Spoofing Vulnerability

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %43

    microsoft · sharepoint server14 Nis 2026

  • CVE-2026-33824
    69Bu hafta

    Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %2

    microsoft · windows 10 160714 Nis 2026

  • CVE-2026-33825
    61Bu hafta

    Microsoft Defender Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0

    microsoft · defender antimalware platform14 Nis 2026

  • CVE-2026-32202
    48Planlayın

    Windows Shell Spoofing Vulnerability

    OrtaCVSS 4,3KEVSilahlaştırılmışEPSS %5

    microsoft · windows 10 160714 Nis 2026

  • CVE-2026-26149
    36İzleyin

    Microsoft Power Apps Desktop Client Spoofing Vulnerability

    KritikCVSS 9,0İstismar yokEPSS %1

    microsoft · power apps14 Nis 2026

  • CVE-2026-26178
    35İzleyin

    Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    microsoft · windows 10 160714 Nis 2026

  • CVE-2026-32157
    35İzleyin

    Remote Desktop Client Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    microsoft · remote desktop client14 Nis 2026

  • CVE-2026-32171
    35İzleyin

    Azure Logic Apps Elevation of Privilege Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    microsoft · azure logic apps14 Nis 2026

  • CVE-2026-32225
    35İzleyin

    Windows Shell Security Feature Bypass Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    microsoft · windows 10 160714 Nis 2026

  • CVE-2026-33120
    35İzleyin

    Microsoft SQL Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    microsoft · sql server 201614 Nis 2026

  • CVE-2026-27928
    34İzleyin

    Windows Hello Security Feature Bypass Vulnerability

    YüksekCVSS 8,7İstismar yokEPSS %1

    microsoft · windows server 201614 Nis 2026

  • CVE-2026-32162
    33İzleyin

    Windows COM Elevation of Privilege Vulnerability

    YüksekCVSS 8,4İstismar yokEPSS %0

    microsoft · windows 10 180914 Nis 2026

+151 kayıt dahaÜreticinin tüm kayıtları

Adobe · 14 Nisan

53 · 0 KEV · 6 kritik
  • CVE-2026-27303
    39İzleyin

    Adobe Connect | Deserialization of Untrusted Data (CWE-502)

    KritikCVSS 9,6İstismar yokEPSS %2

    adobe · connect14 Nis 2026

  • CVE-2026-34615
    38İzleyin

    Adobe Connect | Deserialization of Untrusted Data (CWE-502)

    KritikCVSS 9,3İstismar yokEPSS %2

    adobe · connect14 Nis 2026

  • CVE-2026-27243
    37İzleyin

    Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

    KritikCVSS 9,3İstismar yokEPSS %1

    adobe · connect14 Nis 2026

  • CVE-2026-27245
    37İzleyin

    Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

    KritikCVSS 9,3İstismar yokEPSS %1

    adobe · connect14 Nis 2026

  • CVE-2026-27246
    37İzleyin

    Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

    KritikCVSS 9,3İstismar yokEPSS %1

    adobe · connect14 Nis 2026

  • CVE-2026-27304
    37İzleyin

    ColdFusion | Improper Input Validation (CWE-20)

    KritikCVSS 9,3İstismar yokEPSS %0

    adobe · coldfusion14 Nis 2026

  • CVE-2026-27290
    34İzleyin

    Adobe Framemaker | Untrusted Search Path (CWE-426)

    YüksekCVSS 8,6İstismar yokEPSS %0

    adobe · framemaker14 Nis 2026

  • CVE-2026-27305
    34İzleyin

    ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    YüksekCVSS 8,6İstismar yokEPSS %1

    adobe · coldfusion14 Nis 2026

  • CVE-2026-34617
    34İzleyin

    Adobe Connect | Cross-site Scripting (XSS) (CWE-79)

    YüksekCVSS 8,7İstismar yokEPSS %1

    adobe · connect14 Nis 2026

  • CVE-2026-34622
    34İzleyin

    Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

    YüksekCVSS 8,6İstismar yokEPSS %1

    adobe · acrobat14 Nis 2026

  • CVE-2026-34632
    34İzleyin

    Photoshop Installer | CWE-427: Uncontrolled Search Path Element

    YüksekCVSS 8,6İstismar yokEPSS %0

    adobe · photoshop installer15 Nis 2026

  • CVE-2026-27306
    33İzleyin

    ColdFusion | Improper Input Validation (CWE-20)

    YüksekCVSS 8,4İstismar yokEPSS %0

    adobe · coldfusion14 Nis 2026

+41 kayıt dahaÜreticinin tüm kayıtları

SAP · 14 Nisan

0 · 0 KEV · 0 kritik

Bu pencerede kayıt yok.

Siemens · 14 Nisan

5 · 0 KEV · 0 kritik
  • CVE-2026-25654
    34İzleyin

    A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3).

    YüksekCVSS 8,7İstismar yokEPSS %1

    siemens · sinec nms14 Nis 2026

  • CVE-2026-27668
    34İzleyin

    A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8).

    YüksekCVSS 8,7İstismar yokEPSS %0

    siemens · ruggedcom crossbow secure access manager primary (sam-p)14 Nis 2026

  • CVE-2026-24032
    27İzleyin

    A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC).

    OrtaCVSS 6,9İstismar yokEPSS %0

    siemens · sinec nms14 Nis 2026

  • CVE-2025-40745
    25İzleyin

    A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcente

    OrtaCVSS 6,3İstismar yokEPSS %0

    siemens · simcenter 3d14 Nis 2026

  • CVE-2026-33892
    20İzleyin

    A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro

    OrtaCVSS 5,1İstismar yokEPSS %0

    siemens · industrial edge management pro v114 Nis 2026

Üreticinin tüm kayıtları

Schneider Electric · 14 Nisan

8 · 0 KEV · 0 kritik
  • CVE-2026-2399
    27İzleyin

    CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause critical files o

    OrtaCVSS 6,9İstismar yokEPSS %0

    schneider-electric · powerchute serial shutdown14 Nis 2026

  • CVE-2026-2402
    27İzleyin

    CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the us

    OrtaCVSS 6,9İstismar yokEPSS %0

    schneider-electric · powerchute serial shutdown14 Nis 2026

  • CVE-2026-2404
    27İzleyin

    CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters t

    OrtaCVSS 6,9İstismar yokEPSS %0

    schneider-electric · powerchute serial shutdown14 Nis 2026

  • CVE-2026-4832
    27İzleyin

    CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unau

    OrtaCVSS 6,9İstismar yokEPSS %0

    schneider electric · easergy micom p14x14 Nis 2026

  • CVE-2026-2400
    21İzleyin

    CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to re

    OrtaCVSS 5,3İstismar yokEPSS %0

    schneider-electric · powerchute serial shutdown14 Nis 2026

  • CVE-2026-2403
    21İzleyin

    CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting lo

    OrtaCVSS 5,3İstismar yokEPSS %0

    schneider-electric · powerchute serial shutdown14 Nis 2026

  • CVE-2026-2405
    21İzleyin

    CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of se

    OrtaCVSS 5,3İstismar yokEPSS %0

    schneider-electric · powerchute serial shutdown14 Nis 2026

  • CVE-2026-2401
    9İzleyin

    CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when

    DüşükCVSS 2,4İstismar yokEPSS %0

    schneider-electric · powerchute serial shutdown14 Nis 2026

Üreticinin tüm kayıtları

Oracle (Critical Patch Update) · 21 Nisan

102 · 0 KEV · 5 kritik
  • CVE-2026-34275
    39İzleyin

    Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Setup and Administration).

    KritikCVSS 9,8İstismar yokEPSS %1

    oracle · advanced inbound telephony21 Nis 2026

  • CVE-2026-34279
    36İzleyin

    Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management).

    KritikCVSS 9,1İstismar yokEPSS %0

    oracle · enterprise manager base platform21 Nis 2026

  • CVE-2026-34285
    36İzleyin

    Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

    KritikCVSS 9,1İstismar yokEPSS %0

    oracle · identity manager connector21 Nis 2026

  • CVE-2026-34286
    36İzleyin

    Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

    KritikCVSS 9,1İstismar yokEPSS %0

    oracle · identity manager connector21 Nis 2026

  • CVE-2026-34287
    36İzleyin

    Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

    KritikCVSS 9,1İstismar yokEPSS %0

    oracle · identity manager connector21 Nis 2026

  • CVE-2026-21997
    34İzleyin

    Vulnerability in the Oracle Life Sciences Empirica Signal product of Oracle Life Science Applications (component: Common Core).

    YüksekCVSS 8,5İstismar yokEPSS %0

    oracle · life sciences empirica signal21 Nis 2026

  • CVE-2026-34291
    34İzleyin

    Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core).

    YüksekCVSS 8,7İstismar yokEPSS %0

    oracle · http server21 Nis 2026

  • CVE-2026-34309
    32İzleyin

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · peoplesoft enterprise peopletools21 Nis 2026

  • CVE-2026-35243
    31İzleyin

    Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces).

    YüksekCVSS 7,8İstismar yokEPSS %0

    oracle · application development framework21 Nis 2026

  • CVE-2026-22010
    30İzleyin

    Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    oracle · financial services analytical applications infrastructure21 Nis 2026

  • CVE-2026-22011
    30İzleyin

    Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch).

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    oracle · applications dba21 Nis 2026

  • CVE-2026-22016
    30İzleyin

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    oracle · jre21 Nis 2026

+90 kayıt dahaÜreticinin tüm kayıtları