Yama Salısı

Eylül 2026

Her ayın ikinci salısı Microsoft, Adobe, SAP, Siemens ve Schneider Electric toplu yayın yapar; Oracle ocak, nisan, temmuz ve ekimde üçüncü salı. Burada o gün yayımlanan kayıtlar kendi veritabanımızdan, eylem puanına göre sıralı: önce KEV ve istismarı olgun olanlar.

Nasıl hesaplanır: CNA damgası + yayın tarihi (iki günlük pencere, UTC). Üreticinin bülteniyle bire bir eşleşme iddiası yok; ara güncellemeler ayrı günlerde çıkar.

583 kayıt · 2 KEV

Stack'inizi etkileyenler

Bu ayın kayıtlarından stack'inizdeki ürün ve sürümlere uyanlar.

Stack'inize uyanları görmek için giriş yapın; kayıtlar ve bildirimler ücretsiz. →

Microsoft · 8 Eylül

400 · 2 KEV · 42 kritik

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
62Bu hafta	CVE-2026-85880Silahlaştırılmış	Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Yerel yetki yükseltme Bellek hatası	Yüksek7,8	KEV	%3,6	8 Eyl 2026
61Bu hafta	CVE-2026-81963Silahlaştırılmış	Windows Update Stack Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-59 Yerel yetki yükseltme	Yüksek7,8	KEV	%0,4	8 Eyl 2026
39İzleyin	CVE-2026-66302İstismar yok	Skype for Business Remote Code Execution Vulnerabilitymicrosoft · skype for business server · CWE-73 pre-auth RCE Yol geçişi	Kritik9,8	—	%1,0	8 Eyl 2026
39İzleyin	CVE-2026-67631İstismar yok	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 pre-auth RCE Bellek hatası	Kritik9,8	—	%1,0	8 Eyl 2026
39İzleyin	CVE-2026-67643İstismar yok	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2022 · CWE-122 pre-auth RCE Bellek hatası	Kritik9,8	—	%1,0	8 Eyl 2026
39İzleyin	CVE-2026-68839İstismar yok	Windows USB Mass Storage Class Driver Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-20 pre-auth RCE	Kritik9,8	—	%1,0	8 Eyl 2026
39İzleyin	CVE-2026-69276İstismar yok	Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Bellek hatası	Kritik9,8	—	%1,0	8 Eyl 2026
39İzleyin	CVE-2026-69408İstismar yok	Microsoft Windows Media Foundation Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Bellek hatası	Kritik9,8	—	%1,0	8 Eyl 2026
39İzleyin	CVE-2026-69431İstismar yok	Telnet Client Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Bellek hatası	Kritik9,8	—	%1,0	8 Eyl 2026
39İzleyin	CVE-2026-69463İstismar yok	Windows NTFS Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Bellek hatası	Kritik9,8	—	%1,0	8 Eyl 2026
39İzleyin	CVE-2026-69491İstismar yok	Microsoft DirectMusic Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Bellek hatası	Kritik9,8	—	%1,0	8 Eyl 2026
39İzleyin	CVE-2026-69493İstismar yok	Windows Event Logging Service Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Bellek hatası	Kritik9,8	—	%1,0	8 Eyl 2026

CVE-2026-85880
62Bu hafta
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %4
- Yerel yetki yükseltme
- Bellek hatası
microsoft · windows 10 16078 Eyl 2026
CVE-2026-81963
61Bu hafta
Windows Update Stack Elevation of Privilege Vulnerability
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0
- Yerel yetki yükseltme
microsoft · windows 11 23h28 Eyl 2026
CVE-2026-66302
39İzleyin
Skype for Business Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Yol geçişi
microsoft · skype for business server8 Eyl 2026
CVE-2026-67631
39İzleyin
Microsoft SQL Server Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
microsoft · sql server 20178 Eyl 2026
CVE-2026-67643
39İzleyin
Microsoft SQL Server Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
microsoft · sql server 20228 Eyl 2026
CVE-2026-68839
39İzleyin
Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
microsoft · windows 10 16078 Eyl 2026
CVE-2026-69276
39İzleyin
Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
microsoft · windows 10 16078 Eyl 2026
CVE-2026-69408
39İzleyin
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
microsoft · windows 10 16078 Eyl 2026
CVE-2026-69431
39İzleyin
Telnet Client Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
microsoft · windows 10 16078 Eyl 2026
CVE-2026-69463
39İzleyin
Windows NTFS Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
microsoft · windows 10 16078 Eyl 2026
CVE-2026-69491
39İzleyin
Microsoft DirectMusic Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
microsoft · windows 10 16078 Eyl 2026
CVE-2026-69493
39İzleyin
Windows Event Logging Service Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
microsoft · windows 10 16078 Eyl 2026

+388 kayıt dahaÜreticinin tüm kayıtları

Adobe · 8 Eylül

167 · 0 KEV · 6 kritik

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
41Planlayın	CVE-2026-82004İstismar yok	Adobe Campaign Classic (ACC) \| Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)adobe · campaign · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik10,0	—	%3,3	8 Eyl 2026
39İzleyin	CVE-2026-19232İstismar yok	Adobe Experience Manager \| Incorrect Authorization (CWE-863)adobe · experience manager · CWE-863 RCE Erişim denetimi (IDOR)	Kritik9,9	—	%0,6	8 Eyl 2026
39İzleyin	CVE-2026-48273İstismar yok	ColdFusion \| Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)adobe · coldfusion · CWE-95 RCE	Kritik9,9	—	%1,3	8 Eyl 2026
37İzleyin	CVE-2026-76200İstismar yok	Adobe Commerce \| Cross-site Scripting (Stored XSS) (CWE-79)adobe · magento · CWE-79 Kimlik doğrulamasız XSS	Kritik9,3	—	%0,7	8 Eyl 2026
37İzleyin	CVE-2026-76201İstismar yok	Adobe Commerce \| Cross-site Scripting (Stored XSS) (CWE-79)adobe · commerce · CWE-79 Kimlik doğrulamasız XSS	Kritik9,3	—	%0,7	8 Eyl 2026
36İzleyin	CVE-2026-75746İstismar yok	ColdFusion \| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · coldfusion · CWE-89 RCE SQL enjeksiyonu	Kritik9,1	—	%1,0	8 Eyl 2026
35İzleyin	CVE-2026-81996İstismar yok	Acrobat Reader \| Incorrect Authorization (CWE-863)adobe · acrobat · CWE-863 Yerel yetki yükseltme Erişim denetimi (IDOR)	Yüksek8,8	—	%0,2	8 Eyl 2026
34İzleyin	CVE-2026-75990İstismar yok	Illustrator \| Incorrect Authorization (CWE-863)adobe · illustrator · CWE-863 RCE Erişim denetimi (IDOR)	Yüksek8,6	—	%0,3	8 Eyl 2026
34İzleyin	CVE-2026-75991İstismar yok	Illustrator \| Improper Input Validation (CWE-20)adobe · illustrator · CWE-20 RCE	Yüksek8,6	—	%0,3	8 Eyl 2026
34İzleyin	CVE-2026-75993İstismar yok	ColdFusion \| Cross-site Scripting (Reflected XSS) (CWE-79)adobe · coldfusion · CWE-79 Kimlik doğrulamasız XSS	Yüksek8,5	—	%0,5	8 Eyl 2026
34İzleyin	CVE-2026-76190İstismar yok	ColdFusion \| Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)adobe · coldfusion · CWE-95 pre-auth RCE	Yüksek8,6	—	%0,8	8 Eyl 2026
34İzleyin	CVE-2026-76199İstismar yok	Photoshop Desktop \| Uncontrolled Search Path Element (CWE-427)adobe · photoshop · CWE-427 RCE	Yüksek8,6	—	%0,3	8 Eyl 2026

CVE-2026-82004
41Planlayın
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
KritikCVSS 10,0İstismar yokEPSS %3
- pre-auth RCE
- Komut enjeksiyonu
adobe · campaign8 Eyl 2026
CVE-2026-19232
39İzleyin
Adobe Experience Manager | Incorrect Authorization (CWE-863)
KritikCVSS 9,9İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
adobe · experience manager8 Eyl 2026
CVE-2026-48273
39İzleyin
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
KritikCVSS 9,9İstismar yokEPSS %1
- RCE
adobe · coldfusion8 Eyl 2026
CVE-2026-76200
37İzleyin
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
KritikCVSS 9,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
adobe · magento8 Eyl 2026
CVE-2026-76201
37İzleyin
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
KritikCVSS 9,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
adobe · commerce8 Eyl 2026
CVE-2026-75746
36İzleyin
ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
KritikCVSS 9,1İstismar yokEPSS %1
- RCE
- SQL enjeksiyonu
adobe · coldfusion8 Eyl 2026
CVE-2026-81996
35İzleyin
Acrobat Reader | Incorrect Authorization (CWE-863)
YüksekCVSS 8,8İstismar yokEPSS %0
- Yerel yetki yükseltme
- Erişim denetimi (IDOR)
adobe · acrobat8 Eyl 2026
CVE-2026-75990
34İzleyin
Illustrator | Incorrect Authorization (CWE-863)
YüksekCVSS 8,6İstismar yokEPSS %0
- RCE
- Erişim denetimi (IDOR)
adobe · illustrator8 Eyl 2026
CVE-2026-75991
34İzleyin
Illustrator | Improper Input Validation (CWE-20)
YüksekCVSS 8,6İstismar yokEPSS %0
- RCE
adobe · illustrator8 Eyl 2026
CVE-2026-75993
34İzleyin
ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
YüksekCVSS 8,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
adobe · coldfusion8 Eyl 2026
CVE-2026-76190
34İzleyin
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
YüksekCVSS 8,6İstismar yokEPSS %1
- pre-auth RCE
adobe · coldfusion8 Eyl 2026
CVE-2026-76199
34İzleyin
Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)
YüksekCVSS 8,6İstismar yokEPSS %0
- RCE
adobe · photoshop8 Eyl 2026

+155 kayıt dahaÜreticinin tüm kayıtları

SAP · 8 Eylül

0 · 0 KEV · 0 kritik

Bu pencerede kayıt yok.

Siemens · 8 Eylül

13 · 0 KEV · 4 kritik

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
37İzleyin	CVE-2026-62645İstismar yok	A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,3	—	%0,6	8 Eyl 2026
37İzleyin	CVE-2026-62647İstismar yok	A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-20 Kimlik doğrulamasız	Kritik9,3	—	%0,6	8 Eyl 2026
36İzleyin	CVE-2026-62646İstismar yok	A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-331 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,1	—	%0,5	8 Eyl 2026
36İzleyin	CVE-2026-67367İstismar yok	A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), siemens · simove fleetmanager v3.1 · CWE-23 Kimlik doğrulamasız Yol geçişi	Kritik9,2	—	%1,1	8 Eyl 2026
35İzleyin	CVE-2026-50093İstismar yok	A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versionsiemens · siveillance control pro v3.0 · CWE-434 Dosya yükleme	Yüksek8,9	—	%0,3	8 Eyl 2026
34İzleyin	CVE-2026-34223İstismar yok	A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CCsiemens · desigo cc clickonce client v6 · CWE-94 RCE	Yüksek8,6	—	%0,2	8 Eyl 2026
34İzleyin	CVE-2026-58113İstismar yok	A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcentesiemens · teamcenter v2412 · CWE-79 Kimlik doğrulamasız XSS	Yüksek8,5	—	%0,4	8 Eyl 2026
34İzleyin	CVE-2026-62648İstismar yok	A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-787 Kimlik doğrulamasız Bellek hatası	Yüksek8,7	—	%0,6	8 Eyl 2026
34İzleyin	CVE-2026-62649İstismar yok	A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-770 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,7	—	%0,6	8 Eyl 2026
34İzleyin	CVE-2026-62650İstismar yok	A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-288 Kimlik doğrulama atlatma	Yüksek8,7	—	%0,6	8 Eyl 2026
28İzleyin	CVE-2026-62653İstismar yok	A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-787 RCE Bellek hatası	Yüksek7,0	—	%0,3	8 Eyl 2026
28İzleyin	CVE-2026-62654İstismar yok	A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-494 RCE	Yüksek7,0	—	%0,2	8 Eyl 2026

CVE-2026-62645
37İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
KritikCVSS 9,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
siemens · reyrolle 7sr58 Eyl 2026
CVE-2026-62647
37İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
KritikCVSS 9,3İstismar yokEPSS %1
- Kimlik doğrulamasız
siemens · reyrolle 7sr58 Eyl 2026
CVE-2026-62646
36İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
siemens · reyrolle 7sr58 Eyl 2026
CVE-2026-67367
36İzleyin
A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4),
KritikCVSS 9,2İstismar yokEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
siemens · simove fleetmanager v3.18 Eyl 2026
CVE-2026-50093
35İzleyin
A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All version
YüksekCVSS 8,9İstismar yokEPSS %0
- Dosya yükleme
siemens · siveillance control pro v3.08 Eyl 2026
CVE-2026-34223
34İzleyin
A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC
YüksekCVSS 8,6İstismar yokEPSS %0
- RCE
siemens · desigo cc clickonce client v68 Eyl 2026
CVE-2026-58113
34İzleyin
A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcente
YüksekCVSS 8,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
siemens · teamcenter v24128 Eyl 2026
CVE-2026-62648
34İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
YüksekCVSS 8,7İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bellek hatası
siemens · reyrolle 7sr58 Eyl 2026
CVE-2026-62649
34İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
YüksekCVSS 8,7İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
siemens · reyrolle 7sr58 Eyl 2026
CVE-2026-62650
34İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
YüksekCVSS 8,7İstismar yokEPSS %1
- Kimlik doğrulama atlatma
siemens · reyrolle 7sr58 Eyl 2026
CVE-2026-62653
28İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
YüksekCVSS 7,0İstismar yokEPSS %0
- RCE
- Bellek hatası
siemens · reyrolle 7sr58 Eyl 2026
CVE-2026-62654
28İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
YüksekCVSS 7,0İstismar yokEPSS %0
- RCE
siemens · reyrolle 7sr58 Eyl 2026

+1 kayıt dahaÜreticinin tüm kayıtları

Schneider Electric · 8 Eylül

3 · 0 KEV · 0 kritik

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
34İzleyin	CVE-2026-19233İstismar yok	CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server daschneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert) · CWE-918 RCE SSRF	Yüksek8,6	—	%0,7	9 Eyl 2026
34İzleyin	CVE-2026-77120İstismar yok	CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause prischneider electric · powerlogic t300 · CWE-78 RCE Yerel yetki yükseltme Komut enjeksiyonu	Yüksek8,7	—	%0,7	9 Eyl 2026
34İzleyin	CVE-2026-8044İstismar yok	CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote codeschneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert) · CWE-88 RCE	Yüksek8,6	—	%0,7	9 Eyl 2026

CVE-2026-19233
34İzleyin
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server da
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
- SSRF
schneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert)9 Eyl 2026
CVE-2026-77120
34İzleyin
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause pri
YüksekCVSS 8,7İstismar yokEPSS %1
schneider electric · powerlogic t3009 Eyl 2026
CVE-2026-8044
34İzleyin
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
schneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert)9 Eyl 2026

Üreticinin tüm kayıtları