İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2026: sömürülen ve yeni ciddi CVE kayıtları

305 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 4

  • CVE-2026-25253
    42Planlayın

    OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket conne

    YüksekCVSS 8,8Kavram kanıtıEPSS %24

    openclaw · openclaw1 Şub 2026

  • CVE-2025-15030
    39İzleyin

    User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    unknown · user profile builder2 Şub 2026

  • CVE-2025-9974
    32İzleyin

    Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product

    YüksekCVSS 8,0Kavram kanıtıEPSS %0

    nokia · nokia ont2 Şub 2026

  • CVE-2026-20404
    26İzleyin

    In Modem, there is a possible system crash due to improper input validation.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    mediatek · nr152 Şub 2026

  • CVE-2026-0599
    39İzleyin

    Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference

    YüksekCVSS 7,5İstismar yokEPSS %29

    huggingface · huggingface/text-generation-inference2 Şub 2026

  • CVE-2026-1232
    27İzleyin

    Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    beyondtrust · privilege management for windows2 Şub 2026

  • CVE-2026-22226
    35İzleyin

    Command Injection Vulnerability on TP-Link Archer BE230 and AX73

    YüksekCVSS 8,5Kavram kanıtıEPSS %2

    tp-link · archer be230 firmware2 Şub 2026

  • CVE-2026-22778
    60Bu hafta

    vLLM leaks a heap address when PIL throws an error

    KritikCVSS 9,8SilahlaştırılmışEPSS %16

    vllm · vllm2 Şub 2026

  • CVE-2026-25137
    39İzleyin

    NixOs Odoo database and filestore publicly accessible with default odoo configuration

    KritikCVSS 9,1İstismar yokEPSS %10

    nixos · nixpkgs2 Şub 2026

  • CVE-2025-61638
    0İzleyin

    Sanitizer::validateAttributes data-XSS

    CVSS 0,0Kavram kanıtıEPSS %0

    mediawiki · mediawiki2 Şub 2026

  • CVE-2025-15556
    61Bu hafta

    Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification

    YüksekCVSS 7,7KEVSilahlaştırılmışEPSS %1

    notepad-plus-plus · notepad\+\+2 Şub 2026

  • CVE-2026-1375
    32İzleyin

    Tutor LMS <= 3.9.5 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Course Modification and Deletion

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    themeum · tutor lms – elearning and online course solution3 Şub 2026

  • CVE-2025-5319
    39İzleyin

    SQLi in Emit Informatics' DIGITA Efficiency Management System

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    emit informatics and communication technologies industry and trade ltd. co. · digita efficiency management system3 Şub 2026

  • CVE-2026-1207
    25İzleyin

    Potential SQL injection via raster lookups on PostGIS

    OrtaCVSS 5,4Kavram kanıtıEPSS %12

    djangoproject · django3 Şub 2026

  • CVE-2026-1312
    21İzleyin

    Potential SQL injection via QuerySet.order_by and FilteredRelation

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    djangoproject · django3 Şub 2026

  • CVE-2026-1814
    27İzleyin

    Rapid7 Nexpose Insecure Java Keystore Password Generation

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    rapid7 · insightvm/nexpose3 Şub 2026

  • CVE-2026-24945
    21İzleyin

    WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.34 - Broken Access Control vulnerability

    OrtaCVSS 5,3İstismar yokEPSS %0

    themefic · ultimate addons for contact form 73 Şub 2026

  • CVE-2025-57529
    39İzleyin

    YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    youdatasum · cpas audit management system3 Şub 2026

  • CVE-2025-61506
    39İzleyin

    An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /upl

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    mediacrush · mediacrush3 Şub 2026

  • CVE-2025-69848
    21İzleyin

    NetBox is an open-source infrastructure resource modeling and IP address management platform.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    netbox · netbox3 Şub 2026

  • CVE-2025-69971
    40Planlayın

    FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    frangoteam · fuxa3 Şub 2026

  • CVE-2025-70559
    26İzleyin

    pdfminer.six before 20251230 contains an insecure deserialization vulnerability in the CMap loading mechanism.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    3 Şub 2026

  • CVE-2025-70849
    24İzleyin

    Arbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload arbitrary files via crafted POST request to the /stor

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    stefanprodan · podinfo3 Şub 2026

  • CVE-2026-25616
    24İzleyin

    Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    phillipsdata · blesta3 Şub 2026

  • CVE-2026-1801
    26İzleyin

    Libsoup: libsoup: http request smuggling via malformed chunk headers

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    gnome · libsoup3 Şub 2026

  • CVE-2026-24514
    26İzleyin

    ingress-nginx Admission Controller denial of service

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    kubernetes · ingress-nginx3 Şub 2026

  • CVE-2025-62501
    28İzleyin

    SSH Hostkey Misconfiguration Vulnerability in Archer Devices

    YüksekCVSS 7,0İstismar yokEPSS %0

    tp-link · archer ax53 firmware3 Şub 2026

  • CVE-2026-20980
    28İzleyin

    Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands.

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    samsung · android4 Şub 2026

  • CVE-2025-15260
    26İzleyin

    MyRewards – Loyalty Points and Rewards for WooCommerce <= 5.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Loyalty Rule Modification

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    lwsdevelopers · myrewards4 Şub 2026

  • CVE-2026-0743
    17İzleyin

    WP Content Permission <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ohmem-message' Parameter

    OrtaCVSS 4,4Kavram kanıtıEPSS %0

    orenhav · wp content permission4 Şub 2026

  • CVE-2025-5329
    39İzleyin

    SQLi in Martcode Software's Delta Course Automation

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    martcode software inc. · delta course automation4 Şub 2026

  • CVE-2025-70545
    24İzleyin

    A stored cross-site scripting (XSS) vulnerability exists in the web management interface of the PPC (Belden) ONT 2K05X router running firmwa

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    belden · ppc 2k05x firmware4 Şub 2026

  • CVE-2026-25049
    37İzleyin

    n8n Has an Expression Escape Vulnerability Leading to RCE

    KritikCVSS 9,4Kavram kanıtıEPSS %1

    n8n · n8n4 Şub 2026

  • CVE-2026-25053
    37İzleyin

    n8n is Vulnerable to OS Command Injection in Git Node

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    n8n · n8n4 Şub 2026

  • CVE-2025-69213
    34İzleyin

    OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager4 Şub 2026

  • CVE-2025-69215
    34İzleyin

    OpenSTAManager has an SQL Injection in the Stampe Module

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager4 Şub 2026

  • CVE-2026-25513
    33İzleyin

    FacturaScripts has SQL Injection vulnerability in API ORDER BY Clause

    YüksekCVSS 8,3Kavram kanıtıEPSS %0

    facturascripts · facturascripts4 Şub 2026

  • CVE-2026-25514
    34İzleyin

    FacturaScripts has SQL Injection vulnerability in Autocomplete Actions

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    facturascripts · facturascripts4 Şub 2026

  • CVE-2026-25512
    38İzleyin

    Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler

    KritikCVSS 9,4Kavram kanıtıEPSS %3

    group-office · group office4 Şub 2026

  • CVE-2026-25526
    39İzleyin

    JinJava Bypass through ForTag leads to Arbitrary Java Execution

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    hubspot · jinjava4 Şub 2026

  • CVE-2026-25541
    22İzleyin

    Bytes is vulnerable to integer overflow in BytesMut::reserve

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    tokio-rs · bytes4 Şub 2026

  • CVE-2026-25546
    31İzleyin

    Godot MCP is vulnerable to Command Injection via unsanitized projectPath

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    coding-solo · godot mcp4 Şub 2026

  • CVE-2026-25547
    36İzleyin

    Uncontrolled Resource Consumption in @isaacs/brace-expansion

    KritikCVSS 9,2İstismar yokEPSS %0

    isaacs · brace-expansion4 Şub 2026

  • CVE-2026-22038
    32İzleyin

    AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    agpt · autogpt platform4 Şub 2026

  • CVE-2026-1953
    32İzleyin

    Stored Cross Site Scripting(XSS) in Nukegraphic CMS V3.1.2

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    nukegraphic cms · nukegraphic cms5 Şub 2026

  • CVE-2025-68721
    32İzleyin

    Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    axigen · axigen mail server5 Şub 2026

  • CVE-2025-68722
    35İzleyin

    Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebAdmin inter

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    axigen · axigen mail server5 Şub 2026

  • CVE-2020-37123
    38İzleyin

    Pinger 1.0 - Remote Code Execution

    KritikCVSS 9,3Kavram kanıtıEPSS %3

    wcchandler · pinger5 Şub 2026

  • CVE-2025-68723
    36İzleyin

    Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin interface.

    KritikCVSS 9,0Kavram kanıtıEPSS %0

    axigen · axigen mail server5 Şub 2026

  • CVE-2025-69906
    35İzleyin

    Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    monstra · monstra cms5 Şub 2026

  • CVE-2026-2000
    14İzleyin

    DCN DCME-320 Web Management Backend bridge_cfg.php apply_config command injection

    DüşükCVSS 2,0İstismar yokEPSS %19

    dcnetworks · dcme-320 firmware6 Şub 2026

  • CVE-2026-21643
    97Hemen

    An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may a

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %93

    fortinet · forticlientems6 Şub 2026

  • CVE-2026-1337
    4İzleyin

    Insufficient escaping of unicode characters in query log

    DüşükCVSS 1,1Kavram kanıtıEPSS %0

    neo4j · neo4j6 Şub 2026

  • CVE-2026-2058
    22İzleyin

    mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    vishalmathur · cloudclassroom-php-project6 Şub 2026

  • CVE-2026-1769
    21İzleyin

    Stored XSS on Xerox CentreWare Web 7.0.6

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    xerox · centreware web6 Şub 2026

  • CVE-2026-24135
    28İzleyin

    Gogs vulnerable to arbitrary file deletion via path traversal in wiki page update

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    gogs · gogs6 Şub 2026

  • CVE-2026-24419
    34İzleyin

    OpenSTAManager has an SQL Injection in the Prima Nota module

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager6 Şub 2026

  • CVE-2026-25725
    30İzleyin

    Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json

    YüksekCVSS 7,7İstismar yokEPSS %0

    anthropic · claude code6 Şub 2026

  • CVE-2025-69212
    38İzleyin

    OpenSTAManager has an OS Command Injection in P7M File Processing

    KritikCVSS 9,4Kavram kanıtıEPSS %1

    devcode · openstamanager6 Şub 2026

  • CVE-2025-69214
    34İzleyin

    OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager6 Şub 2026

  • CVE-2025-69216
    34İzleyin

    OpenSTAManager has an SQL Injection in Scadenzario Print Template

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager6 Şub 2026

  • CVE-2026-23989
    32İzleyin

    REVA Public Link Exploit

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    heinlein · opencloud reva6 Şub 2026

  • CVE-2026-24416
    34İzleyin

    OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager6 Şub 2026

  • CVE-2026-24417
    34İzleyin

    OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager6 Şub 2026

  • CVE-2026-24418
    34İzleyin

    OpenSTAManager has an SQL Injection vulnerability in the Scadenzario bulk operations module

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    devcode · openstamanager6 Şub 2026

  • CVE-2026-25643
    37İzleyin

    Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape

    KritikCVSS 9,1Kavram kanıtıEPSS %4

    frigate · frigate6 Şub 2026

  • CVE-2026-25632
    40Planlayın

    EPyT-Flow has unsafe JSON deserialization (__type__)

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    waterfutures · epyt-flow6 Şub 2026

  • CVE-2026-25731
    31İzleyin

    Calibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML Export

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    calibre-ebook · calibre6 Şub 2026

  • CVE-2025-68621
    29İzleyin

    Trilium Notes has a Timing Attack Vulnerability in /api/login/sync

    YüksekCVSS 7,4Kavram kanıtıEPSS %0

    triliumnotes · trilium6 Şub 2026

  • CVE-2026-1731
    97Hemen

    Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

    KritikCVSS 9,9KEVSilahlaştırılmışEPSS %92

    beyondtrust · privileged remote access6 Şub 2026

  • CVE-2026-25544
    39İzleyin

    Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    payloadcms · payload6 Şub 2026

  • CVE-2026-25732
    31İzleyin

    NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    zauberzeug · nicegui6 Şub 2026

  • CVE-2026-2080
    32İzleyin

    UTT HiPER 810 formUser setSysAdm command injection

    YüksekCVSS 7,3İstismar yokEPSS %10

    utt · 810 firmware7 Şub 2026

  • CVE-2026-2113
    23İzleyin

    yuan1994 tpadmin WebUploader preview.php deserialization

    OrtaCVSS 5,5Kavram kanıtıEPSS %2

    tpadmin project · tpadmin7 Şub 2026

  • CVE-2026-25857
    35İzleyin

    Tenda G300-F Command Injection via formSetWanDiag

    YüksekCVSS 8,6Kavram kanıtıEPSS %3

    tenda · g300-f firmware7 Şub 2026

  • CVE-2025-15100
    35İzleyin

    JAY Login & Register <= 2.6.03 - Authenticated (Subscriber+) Privilege Escalation via jay_panel_ajax_update_profile

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    jayarsiech · jay login & register7 Şub 2026

  • CVE-2026-2131
    13İzleyin

    XixianLiang HarmonyOS-mcp-server input_text os command injection

    DüşükCVSS 2,1İstismar yokEPSS %17

    xixianliang · harmonyos mcp server7 Şub 2026

  • CVE-2026-2143
    31İzleyin

    D-Link DIR-823X DDNS Service set_ddns os command injection

    YüksekCVSS 7,3İstismar yokEPSS %5

    dlink · dir-823x firmware8 Şub 2026

  • CVE-2026-2184
    30İzleyin

    Great Developers Certificate Generation System csv.php os command injection

    OrtaCVSS 6,9İstismar yokEPSS %10

    greatdevelopers · certificate8 Şub 2026

  • CVE-2026-2210
    30İzleyin

    D-Link DIR-823X set_filtering sub_4211C8 os command injection

    YüksekCVSS 7,3İstismar yokEPSS %4

    dlink · dir-823x firmware8 Şub 2026

  • CVE-2026-2222
    7İzleyin

    code-projects Online Reviewer System btn_functions.php cross site scripting

    DüşükCVSS 1,9Kavram kanıtıEPSS %0

    fabian · online reviewer system9 Şub 2026

  • CVE-2026-25916
    17İzleyin

    Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    roundcube · webmail9 Şub 2026

  • CVE-2026-1529
    32İzleyin

    Org.keycloak.services.resources.organizations: keycloak: unauthorized organization registration via improper invitation token validation

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    red hat · red hat build of keycloak 26.29 Şub 2026

  • CVE-2026-25057
    36İzleyin

    Zip Slip in MarkUs config upload allowing RCE

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    markusproject · markus9 Şub 2026

  • CVE-2026-25231
    31İzleyin

    FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    filerise · filerise9 Şub 2026

  • CVE-2026-25498
    34İzleyin

    Craft has a potential authenticated Remote Code Execution via malicious attached Behavior

    YüksekCVSS 8,6İstismar yokEPSS %1

    craftcms · craft cms9 Şub 2026

  • CVE-2026-25890
    32İzleyin

    File Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes in URL

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    filebrowser · filebrowser9 Şub 2026

  • CVE-2026-25892
    31İzleyin

    Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    adminer · adminer9 Şub 2026

  • CVE-2026-25961
    30İzleyin

    SumatraPDF Update MITM -> Arbitrary Code Execution

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    sumatrapdfreader · sumatrapdf9 Şub 2026

  • CVE-2026-25895
    40Planlayın

    FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API

    KritikCVSS 9,5Kavram kanıtıEPSS %6

    frangoteam · fuxa9 Şub 2026

  • CVE-2026-25938
    38İzleyin

    FUXA Unauthenticated Remote Code Execution in Node-RED Integration

    KritikCVSS 9,5Kavram kanıtıEPSS %1

    frangoteam · fuxa9 Şub 2026

  • CVE-2026-25939
    37İzleyin

    FUXA Unauthenticated Remote Arbitrary Scheduler Write

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    frangoteam · fuxa9 Şub 2026

  • CVE-2025-11142
    35İzleyin

    The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code execution.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    axis · axis os10 Şub 2026

  • CVE-2025-62676
    28İzleyin

    An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    fortinet · forticlient10 Şub 2026

  • CVE-2025-68686
    62Bu hafta

    An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1,

    OrtaCVSS 5,9KEVSilahlaştırılmışEPSS %29

    fortinet · fortios10 Şub 2026

  • CVE-2026-1603
    87Hemen

    An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %88

    ivanti · endpoint manager10 Şub 2026

  • CVE-2026-0651
    27İzleyin

    Path Traversal on TP-Link Tapo D235, C211, C520WS and C260 via Local https

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    tp-link · tapo c260 firmware10 Şub 2026

  • CVE-2026-0652
    41Planlayın

    Remote Code Execution on TP-Link Tapo C260 by Guest User

    YüksekCVSS 8,7İstismar yokEPSS %23

    tp-link · tapo c260 firmware10 Şub 2026

  • CVE-2026-20841
    34İzleyin

    Windows Notepad App Remote Code Execution Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %9

    microsoft · windows notepad10 Şub 2026

  • CVE-2026-21244
    29İzleyin

    Windows Hyper-V Remote Code Execution Vulnerability

    YüksekCVSS 7,3Kavram kanıtıEPSS %1

    microsoft · windows 10 160710 Şub 2026