Yama Salısı

Mayıs 2026

Her ayın ikinci salısı Microsoft, Adobe, SAP, Siemens ve Schneider Electric toplu yayın yapar; Oracle ocak, nisan, temmuz ve ekimde üçüncü salı. Burada o gün yayımlanan kayıtlar kendi veritabanımızdan, eylem puanına göre sıralı: önce KEV ve istismarı olgun olanlar.

Nasıl hesaplanır: CNA damgası + yayın tarihi (iki günlük pencere, UTC). Üreticinin bülteniyle bire bir eşleşme iddiası yok; ara güncellemeler ayrı günlerde çıkar.

197 kayıt · 0 KEV

Stack'inizi etkileyenler

Bu ayın kayıtlarından stack'inizdeki ürün ve sürümlere uyanlar.

Stack'inize uyanları görmek için giriş yapın; kayıtlar ve bildirimler ücretsiz. →

Microsoft · 12 Mayıs

125 · 0 KEV · 9 kritik

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2026-33821İstismar yok	Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerabilitymicrosoft · dynamics 365 customer insights · CWE-269	Kritik9,9	—	%0,8	12 May 2026
39İzleyin	CVE-2026-41089Kavram kanıtı	Windows Netlogon Remote Code Execution Vulnerabilitymicrosoft · windows server 2012 · CWE-121 pre-auth RCE Bellek hatası	Kritik9,8	—	%1,0	12 May 2026
39İzleyin	CVE-2026-41096Kavram kanıtı	Windows DNS Client Remote Code Execution Vulnerabilitymicrosoft · windows 11 23h2 · CWE-122 pre-auth RCE Bellek hatası	Kritik9,8	—	%1,0	12 May 2026
39İzleyin	CVE-2026-42823İstismar yok	Azure Logic Apps Elevation of Privilege Vulnerabilitymicrosoft · azure logic apps · CWE-284 Erişim denetimi (IDOR)	Kritik9,9	—	%0,8	12 May 2026
39İzleyin	CVE-2026-42898İstismar yok	Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerabilitymicrosoft · dynamics 365 · CWE-94 RCE	Kritik9,9	—	%1,0	12 May 2026
37İzleyin	CVE-2026-40402İstismar yok	Windows Hyper-V Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-416 Yerel yetki yükseltme Bellek hatası	Kritik9,3	—	%0,4	12 May 2026
36İzleyin	CVE-2026-33110İstismar yok	Microsoft SharePoint Server Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-502 RCE Deserializasyon	Yüksek8,8	—	%2,3	12 May 2026
36İzleyin	CVE-2026-33112İstismar yok	Microsoft SharePoint Server Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-502 RCE Deserializasyon	Yüksek8,8	—	%2,3	12 May 2026
36İzleyin	CVE-2026-33117İstismar yok	Azure SDK for Java Security Feature Bypass Vulnerabilitymicrosoft · azure sdk for java · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,1	—	%0,5	12 May 2026
36İzleyin	CVE-2026-35439İstismar yok	Microsoft SharePoint Server Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-502 RCE Deserializasyon	Yüksek8,8	—	%2,3	12 May 2026
36İzleyin	CVE-2026-40357İstismar yok	Microsoft SharePoint Server Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-502 RCE Deserializasyon	Yüksek8,8	—	%2,3	12 May 2026
36İzleyin	CVE-2026-41103İstismar yok	Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerabilitymicrosoft · confluence saml sso · CWE-303 Kimlik doğrulamasız	Kritik9,1	—	%0,8	12 May 2026

CVE-2026-33821
39İzleyin
Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability
KritikCVSS 9,9İstismar yokEPSS %1
microsoft · dynamics 365 customer insights12 May 2026
CVE-2026-41089
39İzleyin
Windows Netlogon Remote Code Execution Vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %1
- pre-auth RCE
- Bellek hatası
microsoft · windows server 201212 May 2026
CVE-2026-41096
39İzleyin
Windows DNS Client Remote Code Execution Vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %1
- pre-auth RCE
- Bellek hatası
microsoft · windows 11 23h212 May 2026
CVE-2026-42823
39İzleyin
Azure Logic Apps Elevation of Privilege Vulnerability
KritikCVSS 9,9İstismar yokEPSS %1
- Erişim denetimi (IDOR)
microsoft · azure logic apps12 May 2026
CVE-2026-42898
39İzleyin
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
KritikCVSS 9,9İstismar yokEPSS %1
- RCE
microsoft · dynamics 36512 May 2026
CVE-2026-40402
37İzleyin
Windows Hyper-V Elevation of Privilege Vulnerability
KritikCVSS 9,3İstismar yokEPSS %0
- Yerel yetki yükseltme
- Bellek hatası
microsoft · windows 11 23h212 May 2026
CVE-2026-33110
36İzleyin
Microsoft SharePoint Server Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
- Deserializasyon
microsoft · sharepoint server12 May 2026
CVE-2026-33112
36İzleyin
Microsoft SharePoint Server Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
- Deserializasyon
microsoft · sharepoint server12 May 2026
CVE-2026-33117
36İzleyin
Azure SDK for Java Security Feature Bypass Vulnerability
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
microsoft · azure sdk for java12 May 2026
CVE-2026-35439
36İzleyin
Microsoft SharePoint Server Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
- Deserializasyon
microsoft · sharepoint server12 May 2026
CVE-2026-40357
36İzleyin
Microsoft SharePoint Server Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
- Deserializasyon
microsoft · sharepoint server12 May 2026
CVE-2026-41103
36İzleyin
Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
microsoft · confluence saml sso12 May 2026

+113 kayıt dahaÜreticinin tüm kayıtları

Adobe · 12 Mayıs

51 · 0 KEV · 2 kritik

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2026-34659İstismar yok	Adobe Connect \| Deserialization of Untrusted Data (CWE-502)adobe · connect desktop application · CWE-502 pre-auth RCE Deserializasyon	Kritik9,6	—	%1,9	12 May 2026
37İzleyin	CVE-2026-34660İstismar yok	Adobe Connect \| Incorrect Authorization (CWE-863)adobe · connect desktop application · CWE-863 pre-auth RCE Erişim denetimi (IDOR)	Kritik9,3	—	%1,0	12 May 2026
34İzleyin	CVE-2026-34653İstismar yok	Adobe Commerce \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · commerce · CWE-22 Yol geçişi	Yüksek8,7	—	%1,0	12 May 2026
34İzleyin	CVE-2026-34686İstismar yok	Adobe Commerce \| Cross-site Scripting (Stored XSS) (CWE-79)adobe · commerce · CWE-79 XSS	Yüksek8,7	—	%0,7	12 May 2026
31İzleyin	CVE-2026-34636İstismar yok	Premiere Pro \| Out-of-bounds Write (CWE-787)adobe · premiere pro · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%0,3	12 May 2026
31İzleyin	CVE-2026-34637İstismar yok	Premiere Pro \| Out-of-bounds Write (CWE-787)adobe · premiere pro · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%0,3	12 May 2026
31İzleyin	CVE-2026-34638İstismar yok	Premiere Pro \| Use After Free (CWE-416)adobe · premiere pro · CWE-416 RCE Bellek hatası	Yüksek7,8	—	%0,4	12 May 2026
31İzleyin	CVE-2026-34639İstismar yok	Media Encoder \| Out-of-bounds Write (CWE-787)adobe · media encoder · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%0,3	12 May 2026
31İzleyin	CVE-2026-34640İstismar yok	Media Encoder \| Integer Overflow or Wraparound (CWE-190)adobe · media encoder · CWE-190 RCE Bellek hatası	Yüksek7,8	—	%0,3	12 May 2026
31İzleyin	CVE-2026-34642İstismar yok	After Effects \| Heap-based Buffer Overflow (CWE-122)adobe · after effects · CWE-122 RCE Bellek hatası	Yüksek7,8	—	%0,3	12 May 2026
31İzleyin	CVE-2026-34643İstismar yok	After Effects \| Out-of-bounds Write (CWE-787)adobe · after effects · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%0,3	12 May 2026
31İzleyin	CVE-2026-34644İstismar yok	After Effects \| Integer Overflow or Wraparound (CWE-190)adobe · after effects · CWE-190 RCE Bellek hatası	Yüksek7,8	—	%0,3	12 May 2026

CVE-2026-34659
39İzleyin
Adobe Connect | Deserialization of Untrusted Data (CWE-502)
KritikCVSS 9,6İstismar yokEPSS %2
- pre-auth RCE
- Deserializasyon
adobe · connect desktop application12 May 2026
CVE-2026-34660
37İzleyin
Adobe Connect | Incorrect Authorization (CWE-863)
KritikCVSS 9,3İstismar yokEPSS %1
- pre-auth RCE
- Erişim denetimi (IDOR)
adobe · connect desktop application12 May 2026
CVE-2026-34653
34İzleyin
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
YüksekCVSS 8,7İstismar yokEPSS %1
- Yol geçişi
adobe · commerce12 May 2026
CVE-2026-34686
34İzleyin
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
YüksekCVSS 8,7İstismar yokEPSS %1
- XSS
adobe · commerce12 May 2026
CVE-2026-34636
31İzleyin
Premiere Pro | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
adobe · premiere pro12 May 2026
CVE-2026-34637
31İzleyin
Premiere Pro | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
adobe · premiere pro12 May 2026
CVE-2026-34638
31İzleyin
Premiere Pro | Use After Free (CWE-416)
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
adobe · premiere pro12 May 2026
CVE-2026-34639
31İzleyin
Media Encoder | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
adobe · media encoder12 May 2026
CVE-2026-34640
31İzleyin
Media Encoder | Integer Overflow or Wraparound (CWE-190)
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
adobe · media encoder12 May 2026
CVE-2026-34642
31İzleyin
After Effects | Heap-based Buffer Overflow (CWE-122)
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
adobe · after effects12 May 2026
CVE-2026-34643
31İzleyin
After Effects | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
adobe · after effects12 May 2026
CVE-2026-34644
31İzleyin
After Effects | Integer Overflow or Wraparound (CWE-190)
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
adobe · after effects12 May 2026

+39 kayıt dahaÜreticinin tüm kayıtları

SAP · 12 Mayıs

0 · 0 KEV · 0 kritik

Bu pencerede kayıt yok.

Siemens · 12 Mayıs

18 · 0 KEV · 3 kritik

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
37İzleyin	CVE-2026-25786İstismar yok	Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interfacesiemens · simatic drive controller cpu 1504d tf · CWE-79 XSS	Kritik9,3	—	%0,5	12 May 2026
37İzleyin	CVE-2026-25787İstismar yok	Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the siemens · simatic drive controller cpu 1504d tf · CWE-79 XSS	Kritik9,3	—	%0,5	12 May 2026
37İzleyin	CVE-2026-41551Kavram kanıtı	A vulnerability has been identified in ROS# (All versions < V2.2.2).siemens · ros# · CWE-23 Kimlik doğrulamasız Yol geçişi	Kritik9,3	—	%0,6	12 May 2026
35İzleyin	CVE-2025-40949İstismar yok	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEsiemens · ruggedcom rox mx5000 firmware · CWE-78 RCE Komut enjeksiyonu	Yüksek8,9	—	%0,7	12 May 2026
35İzleyin	CVE-2026-22924İstismar yok	A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).siemens · simatic cn 4100 firmware · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,8	—	%0,3	12 May 2026
34İzleyin	CVE-2025-40833İstismar yok	The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests.siemens · ie/pb link ha · CWE-476 Kimlik doğrulamasız Bellek hatası	Yüksek8,7	—	%0,3	12 May 2026
34İzleyin	CVE-2026-22925İstismar yok	A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).siemens · simatic cn 4100 firmware · CWE-770 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,7	—	%0,3	12 May 2026
34İzleyin	CVE-2026-33862İstismar yok	A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcentesiemens · teamcenter · CWE-79 XSS	Yüksek8,5	—	%0,3	12 May 2026
34İzleyin	CVE-2026-33893İstismar yok	A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcentesiemens · teamcenter · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Yüksek8,7	—	%0,4	12 May 2026
30İzleyin	CVE-2025-40947İstismar yok	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEsiemens · ruggedcom rox mx5000 firmware · CWE-78 RCE Komut enjeksiyonu	Yüksek7,7	—	%0,5	12 May 2026
29İzleyin	CVE-2026-44411İstismar yok	A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5).siemens · solid edge se2026 · CWE-824 Bellek hatası	Yüksek7,3	—	%0,2	12 May 2026
29İzleyin	CVE-2026-44412İstismar yok	A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5).siemens · solid edge se2026 · CWE-121 Bellek hatası	Yüksek7,3	—	%0,2	12 May 2026

CVE-2026-25786
37İzleyin
Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface
KritikCVSS 9,3İstismar yokEPSS %1
- XSS
siemens · simatic drive controller cpu 1504d tf12 May 2026
CVE-2026-25787
37İzleyin
Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the
KritikCVSS 9,3İstismar yokEPSS %1
- XSS
siemens · simatic drive controller cpu 1504d tf12 May 2026
CVE-2026-41551
37İzleyin
A vulnerability has been identified in ROS# (All versions < V2.2.2).
KritikCVSS 9,3Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
siemens · ros#12 May 2026
CVE-2025-40949
35İzleyin
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGE
YüksekCVSS 8,9İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
siemens · ruggedcom rox mx5000 firmware12 May 2026
CVE-2026-22924
35İzleyin
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
siemens · simatic cn 4100 firmware12 May 2026
CVE-2025-40833
34İzleyin
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests.
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
siemens · ie/pb link ha12 May 2026
CVE-2026-22925
34İzleyin
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
siemens · simatic cn 4100 firmware12 May 2026
CVE-2026-33862
34İzleyin
A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcente
YüksekCVSS 8,5İstismar yokEPSS %0
- XSS
siemens · teamcenter12 May 2026
CVE-2026-33893
34İzleyin
A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcente
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
siemens · teamcenter12 May 2026
CVE-2025-40947
30İzleyin
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGE
YüksekCVSS 7,7İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
siemens · ruggedcom rox mx5000 firmware12 May 2026
CVE-2026-44411
29İzleyin
A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5).
YüksekCVSS 7,3İstismar yokEPSS %0
- Bellek hatası
siemens · solid edge se202612 May 2026
CVE-2026-44412
29İzleyin
A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5).
YüksekCVSS 7,3İstismar yokEPSS %0
- Bellek hatası
siemens · solid edge se202612 May 2026

+6 kayıt dahaÜreticinin tüm kayıtları

Schneider Electric · 12 Mayıs

3 · 0 KEV · 0 kritik

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
34İzleyin	CVE-2026-4827İstismar yok	Insufficient Entropy vulnerability on Multiple Productsschneider electric · easergy micom c264 · CWE-331 Kimlik doğrulamasız	Yüksek8,7	—	%0,4	12 May 2026
32İzleyin	CVE-2026-6866İstismar yok	Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Serverschneider-electric · ecostruxure panel server pas400 firmware · CWE-1188 Kimlik doğrulamasız	Yüksek8,2	—	%0,5	12 May 2026
28İzleyin	CVE-2026-6865İstismar yok	Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Productsschneider electric · easylogic t150 (formerly saitel dr) remote terminal unit & controller · CWE-22 Yol geçişi	Yüksek7,1	—	%0,4	12 May 2026

CVE-2026-4827
34İzleyin
Insufficient Entropy vulnerability on Multiple Products
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
schneider electric · easergy micom c26412 May 2026
CVE-2026-6866
32İzleyin
Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
schneider-electric · ecostruxure panel server pas400 firmware12 May 2026
CVE-2026-6865
28İzleyin
Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products
YüksekCVSS 7,1İstismar yokEPSS %0
- Yol geçişi
schneider electric · easylogic t150 (formerly saitel dr) remote terminal unit & controller12 May 2026

Üreticinin tüm kayıtları