İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2026: sömürülen ve yeni ciddi CVE kayıtları

305 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 4

  • CVE-2026-21248
    29İzleyin

    Windows Hyper-V Remote Code Execution Vulnerability

    YüksekCVSS 7,3Kavram kanıtıEPSS %1

    microsoft · windows 10 160710 Şub 2026

  • CVE-2026-21249
    16İzleyin

    Windows NTLM Spoofing Vulnerability

    DüşükCVSS 3,3İstismar yokEPSS %11

    microsoft · windows 10 160710 Şub 2026

  • CVE-2026-21250
    31İzleyin

    Windows HTTP.sys Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    microsoft · windows 11 24h210 Şub 2026

  • CVE-2026-21508
    28İzleyin

    Windows Storage Elevation of Privilege Vulnerability

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    microsoft · windows 10 160710 Şub 2026

  • CVE-2026-21510
    72Bu hafta

    Windows Shell Security Feature Bypass Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %24

    microsoft · windows 10 160710 Şub 2026

  • CVE-2026-21513
    70Bu hafta

    MSHTML Framework Security Feature Bypass Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %15

    microsoft · windows 10 160710 Şub 2026

  • CVE-2026-21514
    61Bu hafta

    Microsoft Word Security Feature Bypass Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    microsoft · 365 apps10 Şub 2026

  • CVE-2026-21519
    62Bu hafta

    Desktop Window Manager Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %2

    microsoft · windows 10 160710 Şub 2026

  • CVE-2026-21525
    55Planlayın

    Windows Remote Access Connection Manager Denial of Service Vulnerability

    OrtaCVSS 6,2KEVSilahlaştırılmışEPSS %4

    microsoft · windows 10 160710 Şub 2026

  • CVE-2026-21531
    40Planlayın

    Azure SDK for Python Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    microsoft · azure conversation authoring client library10 Şub 2026

  • CVE-2026-21533
    62Bu hafta

    Windows Remote Desktop Services Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %4

    microsoft · windows 10 160710 Şub 2026

  • CVE-2026-25993
    37İzleyin

    EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    evershop · evershop10 Şub 2026

  • CVE-2026-1357
    50Planlayın

    Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %35

    wpvividplugins · wpvivid — backup, migration & staging11 Şub 2026

  • CVE-2026-1560
    38İzleyin

    Custom Block Builder – Lazy Blocks <= 4.2.0 - Authenticated (Contributor+) Remote Code Execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %9

    nko · custom block builder – lazy blocks11 Şub 2026

  • CVE-2026-25924
    33İzleyin

    Kanboard is Missing Access Control on Plugin Installation leading to Administrative RCE

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    kanboard · kanboard11 Şub 2026

  • CVE-2026-25935
    34İzleyin

    Vikunja Affected by XSS Via Task Preview

    YüksekCVSS 8,6İstismar yokEPSS %0

    vikunja · vikunja11 Şub 2026

  • CVE-2026-25994
    33İzleyin

    PJSIP has a heap buffer overflow in ICE with long username

    YüksekCVSS 8,1Kavram kanıtıEPSS %2

    pjsip · pjsip11 Şub 2026

  • CVE-2026-26157
    28İzleyin

    Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    red hat · red hat hardened images11 Şub 2026

  • CVE-2026-26012
    26İzleyin

    vaultwarden has Full Cipher Enumeration Ignoring Organization Collection Permissions

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    dani-garcia · vaultwarden11 Şub 2026

  • CVE-2025-43537
    22İzleyin

    A path handling issue was addressed with improved validation.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    apple · ipados11 Şub 2026

  • CVE-2026-20660
    30İzleyin

    A path handling issue was addressed with improved logic.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    apple · safari11 Şub 2026

  • CVE-2026-20700
    61Bu hafta

    A memory corruption issue was addressed with improved state management.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    apple · ipados11 Şub 2026

  • CVE-2026-26215
    37İzleyin

    manga-image-translator Shared API Unsafe Deserialization RCE

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    zyddnys · manga-image-translator11 Şub 2026

  • CVE-2026-26235
    35İzleyin

    JUNG Smart Visu Server 1.1.1050 - 'JUNG Smart Visu Server' Missing Authentication

    YüksekCVSS 8,7Kavram kanıtıEPSS %2

    jung-group · smart visu server firmware12 Şub 2026

  • CVE-2026-25676
    28İzleyin

    The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    m-audio · m-track duo hd12 Şub 2026

  • CVE-2026-2005
    35İzleyin

    PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    postgresql · postgresql12 Şub 2026

  • CVE-2025-70886
    30İzleyin

    An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submi

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    halo · halo12 Şub 2026

  • CVE-2025-61880
    35İzleyin

    In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution.

    YüksekCVSS 8,8İstismar yokEPSS %0

    infoblox · nios12 Şub 2026

  • CVE-2026-26216
    42Planlayın

    Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter

    KritikCVSS 10,0Kavram kanıtıEPSS %6

    kidocode · crawl4ai12 Şub 2026

  • CVE-2026-26217
    37İzleyin

    Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling

    KritikCVSS 9,2Kavram kanıtıEPSS %2

    kidocode · crawl4ai12 Şub 2026

  • CVE-2026-25108
    66Bu hafta

    FileZen contains an OS command injection vulnerability.

    YüksekCVSS 8,7KEVSilahlaştırılmışEPSS %5

    soliton · filezen13 Şub 2026

  • CVE-2026-26221
    37İzleyin

    Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    hyland · onbase workflow timer service13 Şub 2026

  • CVE-2026-26268
    39İzleyin

    Cursor sandbox escape via Git hooks

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    anysphere · cursor13 Şub 2026

  • CVE-2026-23111
    31İzleyin

    netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel13 Şub 2026

  • CVE-2025-66676
    24İzleyin

    An issue in IObit Unlocker v1.3.0.11 allows attackers to cause a Denial of Service (DoS) via a crafted request.

    OrtaCVSS 6,2Kavram kanıtıEPSS %0

    iobit · iobit unlocker13 Şub 2026

  • CVE-2026-25964
    19İzleyin

    Tandoor Recipes Affected by Authenticated Local File Disclosure (LFD) via Recipe Import leads to Arbitrary File Read

    OrtaCVSS 4,9Kavram kanıtıEPSS %0

    tandoor · recipes13 Şub 2026

  • CVE-2026-25991
    30İzleyin

    Tandoor Recipes affected by Blind SSRF with Internal Network Access via Recipe Import

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    tandoor · recipes13 Şub 2026

  • CVE-2026-26190
    40Planlayın

    Milvus Allows Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    milvus · milvus13 Şub 2026

  • CVE-2026-2441
    81Hemen

    Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %54

    google · chrome13 Şub 2026

  • CVE-2026-26335
    38İzleyin

    Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE

    KritikCVSS 9,3Kavram kanıtıEPSS %2

    calero · verasmart13 Şub 2026

  • CVE-2026-1844
    28İzleyin

    PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    pixelyoursite · pixelyoursite pro – your smart pixel (tag) manager13 Şub 2026

  • CVE-2026-0692
    30İzleyin

    BlueSnap Payment Gateway for WooCommerce <= 3.4.0 - Missing Authorization to Unauthenticated Arbitrary Order Status Manipulation

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    bluesnap · bluesnap payment gateway for woocommerce14 Şub 2026

  • CVE-2025-6792
    21İzleyin

    One to one user Chat by WPGuppy <= 1.1.4 - Unauthenticated Information Disclosure via Chat Message Interception

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    amentotechpvtltd · one to one user chat by wpguppy14 Şub 2026

  • CVE-2026-0745
    22İzleyin

    User Language Switch <= 1.6.10 - Authenticated (Administrator+) Server-Side Request Forgery via 'info_language' Parameter

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    webilop · user language switch14 Şub 2026

  • CVE-2026-1306
    40Planlayın

    midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload via 'export' AJAX Action

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    adminkov · midi-synth14 Şub 2026

  • CVE-2026-2534
    13İzleyin

    Comfast CF-N1 V2 mbox-config sub_44AC4C command injection

    DüşükCVSS 2,1İstismar yokEPSS %15

    comfast · cf-n1 firmware16 Şub 2026

  • CVE-2026-2535
    13İzleyin

    Comfast CF-N1 V2 mbox-config sub_44AB9C command injection

    DüşükCVSS 2,1İstismar yokEPSS %15

    comfast · cf-n1 firmware16 Şub 2026

  • CVE-2026-2537
    16İzleyin

    Comfast CF-E4 HTTP POST Request mbox-config command injection

    DüşükCVSS 2,0İstismar yokEPSS %27

    comfast · cf-e4 firmware16 Şub 2026

  • CVE-2025-65717
    17İzleyin

    An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML p

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    ritwickdey · live server16 Şub 2026

  • CVE-2026-2002
    17İzleyin

    Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.50.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

    OrtaCVSS 4,4Kavram kanıtıEPSS %0

    wpmudev · forminator forms – contact form, payment form & custom form builder17 Şub 2026

  • CVE-2026-1657
    21İzleyin

    EventPrime <= 4.2.8.4 - Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    metagauss · eventprime – events calendar, bookings and tickets17 Şub 2026

  • CVE-2026-0829
    23İzleyin

    Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending

    OrtaCVSS 5,8Kavram kanıtıEPSS %0

    unknown · frontend file manager plugin17 Şub 2026

  • CVE-2025-70829
    22İzleyin

    An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via a custom H2 JDBC con

    OrtaCVSS 5,7Kavram kanıtıEPSS %0

    running-elephant · datart17 Şub 2026

  • CVE-2025-65753
    30İzleyin

    An issue in the TLS certification mechanism of Guardian Gryphon v01.06.0006.22 allows attackers to execute commands as root.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    17 Şub 2026

  • CVE-2025-70828
    35İzleyin

    An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    running-elephant · datart17 Şub 2026

  • CVE-2025-70830
    39İzleyin

    A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows authenticated attackers

    KritikCVSS 9,9Kavram kanıtıEPSS %1

    17 Şub 2026

  • CVE-2024-55271
    14İzleyin

    A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0.

    DüşükCVSS 3,5Kavram kanıtıEPSS %0

    phpgurukul · gym management system17 Şub 2026

  • CVE-2024-55270
    35İzleyin

    phpgurukul Student Management System 1.0 is vulnerable to SQL Injection in studentms/admin/search.php via the searchdata parameter.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    phpgurukul · student management system17 Şub 2026

  • CVE-2026-24733
    14İzleyin

    Apache Tomcat: Security constraint bypass with HTTP/0.9

    DüşükCVSS 3,7Kavram kanıtıEPSS %0

    apache · tomcat17 Şub 2026

  • CVE-2025-32355
    31İzleyin

    Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections.

    YüksekCVSS 7,9Kavram kanıtıEPSS %1

    rocketsoftware · trufusion enterprise17 Şub 2026

  • CVE-2026-22769
    74Bu hafta

    Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %13

    dell · recoverpoint for virtual machines17 Şub 2026

  • CVE-2026-26119
    35İzleyin

    Windows Admin Center Elevation of Privilege Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    microsoft · windows admin center17 Şub 2026

  • CVE-2026-1277
    18İzleyin

    URL Shortify <= 1.12.1 - Unauthenticated Open Redirect via 'redirect_to' Parameter

    OrtaCVSS 4,7Kavram kanıtıEPSS %0

    kaizencoders · url shortify – simple and easy url shortener18 Şub 2026

  • CVE-2026-1296
    24İzleyin

    Frontend Post Submission Manager Lite <= 1.2.7 - Unauthenticated Open Redirect via 'requested_page' Parameter

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    wpshuffle · frontend post submission manager lite – frontend posting wordpress plugin18 Şub 2026

  • CVE-2026-2576
    30İzleyin

    Business Directory Plugin <= 6.4.21 - Unauthenticated SQL Injection via payment Parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    strategy11team · business directory plugin – easy listing directories for wordpress18 Şub 2026

  • CVE-2026-1368
    30İzleyin

    Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    unknown · video conferencing with zoom18 Şub 2026

  • CVE-2026-1937
    28İzleyin

    YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Options Update via 'yaymail_import_state' AJAX Action

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    yaycommerce · yaymail – woocommerce email customizer18 Şub 2026

  • CVE-2025-14340
    29İzleyin

    Admin Account Takeover via malicious URL payload

    YüksekCVSS 7,3Kavram kanıtıEPSS %1

    payara platform · payara server18 Şub 2026

  • CVE-2026-2329
    60Bu hafta

    Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow

    KritikCVSS 9,3SilahlaştırılmışEPSS %41

    grandstream · gxp1610 firmware18 Şub 2026

  • CVE-2025-65791
    40Planlayın

    ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    zoneminder · zoneminder18 Şub 2026

  • CVE-2025-70149
    39İzleyin

    CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    codeastro · membership management system18 Şub 2026

  • CVE-2026-23491
    38İzleyin

    InvoicePlane has Unauthenticated Path Traversal in Guest Controller

    KritikCVSS 9,3Kavram kanıtıEPSS %4

    invoiceplane · invoiceplane18 Şub 2026

  • CVE-2026-1999
    28İzleyin

    Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized merging of pull requests

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    github · enterprise server18 Şub 2026

  • CVE-2026-24743
    30İzleyin

    InvoicePlane has a Stored Cross-Site Scripting (XSS) issue

    YüksekCVSS 7,5İstismar yokEPSS %0

    invoiceplane · invoiceplane18 Şub 2026

  • CVE-2026-27174
    60Bu hafta

    MajorDoMo Unauthenticated Remote Code Execution via Admin Console Eval

    KritikCVSS 9,3SilahlaştırılmışEPSS %5

    mjdm · majordomo18 Şub 2026

  • CVE-2026-27175
    60Bu hafta

    MajorDoMo Command Injection in rc/index.php via Race Condition

    KritikCVSS 9,2SilahlaştırılmışEPSS %7

    mjdm · majordomo18 Şub 2026

  • CVE-2026-27176
    20İzleyin

    MajorDoMo Reflected Cross-Site Scripting in command.php

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    mjdm · majordomo18 Şub 2026

  • CVE-2026-27179
    35İzleyin

    MajorDoMo Unauthenticated SQL Injection in Commands Module

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    mjdm · majordomo18 Şub 2026

  • CVE-2026-27180
    60Bu hafta

    MajorDoMo Supply Chain Remote Code Execution via Update URL Poisoning

    KritikCVSS 9,3SilahlaştırılmışEPSS %1

    mjdm · majordomo18 Şub 2026

  • CVE-2026-2670
    30İzleyin

    Advantech WISE-6610-NB Background Management openvpn_apply os command injection

    YüksekCVSS 7,3Kavram kanıtıEPSS %4

    advantech · wise-6610-nb18 Şub 2026

  • CVE-2026-25548
    36İzleyin

    InvoicePlane Vulnerable to Remote Code Execution via Local File Inclusion and Log Poisoning

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    invoiceplane · invoiceplane18 Şub 2026

  • CVE-2026-25594
    19İzleyin

    InvoicePlane has Stored XSS via Family Name in Product Form

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    invoiceplane · invoiceplane18 Şub 2026

  • CVE-2026-25595
    19İzleyin

    InvoicePlane has Stored XSS via Invoice Number in Invoice View and Dashboard

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    invoiceplane · invoiceplane18 Şub 2026

  • CVE-2026-25596
    19İzleyin

    InvoicePlane has Stored XSS via Product Unit Name in Invoice Item List

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    invoiceplane · invoiceplane18 Şub 2026

  • CVE-2026-24126
    36İzleyin

    Weblate has an argument injection in management console

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    weblate · weblate18 Şub 2026

  • CVE-2026-0561
    24İzleyin

    Shield Security <= 21.0.8 - Unauthenticated Reflected Cross-Site Scripting via 'message' Parameter

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    paultgoodchild · shield: blocks bots, protects users, and prevents security breaches19 Şub 2026

  • CVE-2026-0926
    42Planlayın

    Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name]

    KritikCVSS 9,8Kavram kanıtıEPSS %9

    prodigycommerce · prodigy commerce19 Şub 2026

  • CVE-2026-1405
    40Planlayın

    Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    franchidesign · slider future19 Şub 2026

  • CVE-2026-25232
    28İzleyin

    Gogs has a Protected Branch Deletion Bypass in Web Interface

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    gogs · gogs19 Şub 2026

  • CVE-2025-55853
    36İzleyin

    SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery (SSRF).

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    softvision · webpdf19 Şub 2026

  • CVE-2026-25527
    21İzleyin

    changedetection.io vulnerable to unauthenticated static path traversal

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    webtechnologies · changedetection19 Şub 2026

  • CVE-2026-25755
    35İzleyin

    jsPDF has PDF Object Injection via Unsanitized Input in addJS Method

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    parall · jspdf19 Şub 2026

  • CVE-2025-71243
    60Bu hafta

    SPIP Saisies Plugin < 5.11.1 Remote Code Execution

    KritikCVSS 9,3SilahlaştırılmışEPSS %5

    spip · saisies19 Şub 2026

  • CVE-2026-25940
    32İzleyin

    jsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property)

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    parall · jspdf19 Şub 2026

  • CVE-2026-1581
    31İzleyin

    wpForo Forum <= 2.4.14 - Unauthenticated Time-Based SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    tomdever · wpforo forum19 Şub 2026

  • CVE-2026-25998
    34İzleyin

    strongMan vulnerable to private credential recovery due to key and counter reuse

    YüksekCVSS 8,7İstismar yokEPSS %0

    strongswan · strongman19 Şub 2026

  • CVE-2026-26030
    40Planlayın

    Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution

    KritikCVSS 9,9Kavram kanıtıEPSS %4

    microsoft · semantic kernel19 Şub 2026

  • CVE-2026-26336
    34İzleyin

    Hyland Alfresco Improper Authorization Arbitrary File Read

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    hyland · alfresco content services19 Şub 2026

  • CVE-2026-27472
    21İzleyin

    SPIP < 4.4.9 Blind Server-Side Request Forgery via Syndicated Sites

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    spip · spip19 Şub 2026

  • CVE-2026-27475
    36İzleyin

    SPIP < 4.4.9 Insecure Deserialization

    KritikCVSS 9,2Kavram kanıtıEPSS %1

    spip · spip19 Şub 2026