İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2026: sömürülen ve yeni ciddi CVE kayıtları

305 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 3 / 4

  • CVE-2026-26744
    21İzleyin

    A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible via the /lostpwd endp

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    formalms · formalms19 Şub 2026

  • CVE-2026-26980
    32İzleyin

    Ghost has a SQL Injection in its Content API

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    ghost · ghost19 Şub 2026

  • CVE-2026-26988
    37İzleyin

    LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    librenms · librenms19 Şub 2026

  • CVE-2026-2823
    12İzleyin

    Comfast CF-E7 webmggnt mbox-config sub_41ACCC command injection

    DüşükCVSS 2,1İstismar yokEPSS %12

    comfast · cf-e7 firmware20 Şub 2026

  • CVE-2026-2824
    12İzleyin

    Comfast CF-E7 webmggnt mbox-config sub_441CF4 command injection

    DüşükCVSS 2,1İstismar yokEPSS %12

    comfast · cf-e7 firmware20 Şub 2026

  • CVE-2026-21627
    39İzleyin

    Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla

    KritikCVSS 9,5Kavram kanıtıEPSS %1

    tassos.gr · novarain/tassos framework (plg_system_nrframework)20 Şub 2026

  • CVE-2024-50555
    26İzleyin

    WordPress Elementor Website Builder plugin <= 3.29.0 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    elementor · elementor website builder20 Şub 2026

  • CVE-2025-68043
    29İzleyin

    WordPress LottieFiles plugin <= 3.0.0 - Broken Access Control vulnerability

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    lottiefiles · lottiefiles20 Şub 2026

  • CVE-2025-69295
    37İzleyin

    WordPress Coven Core plugin <= 1.3 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    teconcetheme · coven core20 Şub 2026

  • CVE-2026-22356
    30İzleyin

    WordPress Jetpack CRM plugin <= 6.7.0 - Local File Inclusion vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    automattic · jetpack crm20 Şub 2026

  • CVE-2026-24946
    26İzleyin

    WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    tychesoftwares · print invoice & delivery notes for woocommerce20 Şub 2026

  • CVE-2026-24953
    26İzleyin

    WordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    mitchell bennis · simple file list20 Şub 2026

  • CVE-2026-26746
    35İzleyin

    OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    opensourcepos · open source point of sale20 Şub 2026

  • CVE-2026-2472
    34İzleyin

    Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    google cloud · vertex ai sdk for python20 Şub 2026

  • CVE-2026-0777
    31İzleyin

    Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    xmind · xmind20 Şub 2026

  • CVE-2026-2041
    58Planlayın

    Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %75

    nagios · nagios xi20 Şub 2026

  • CVE-2026-2043
    58Planlayın

    Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %75

    nagios · nagios xi20 Şub 2026

  • CVE-2026-27199
    25İzleyin

    Werkzeug safe_join() allows Windows special device names

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    palletsprojects · werkzeug21 Şub 2026

  • CVE-2026-27212
    37İzleyin

    Swiper has a Prototype Pollution Vulnerability

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    swiperjs · swiper21 Şub 2026

  • CVE-2026-27470
    35İzleyin

    ZoneMinder: Second-Order SQL Injection in `getNearEvents()` via Stored Event Name and Cause Fields

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    zoneminder · zoneminder21 Şub 2026

  • CVE-2026-27574
    39İzleyin

    OneUptime: node:vm sandbox escape in probe allows any project member to achieve RCE

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    hackerbay · oneuptime21 Şub 2026

  • CVE-2026-27579
    29İzleyin

    CollabPlatform : CORS Misconfiguration Allows Arbitrary Origin With Credentials Leading to Authenticated Account Data Exposure

    YüksekCVSS 7,4Kavram kanıtıEPSS %0

    karnop · realtime-collaboration-platform21 Şub 2026

  • CVE-2026-2898
    8İzleyin

    funadmin Backend Endpoint AuthCloudService.php getMember deserialization

    DüşükCVSS 2,0Kavram kanıtıEPSS %0

    funadmin · funadmin21 Şub 2026

  • CVE-2026-2964
    5İzleyin

    higuma web-audio-recorder-js Dynamic Config Handling WebAudioRecorder.js extend prototype pollution

    DüşükCVSS 1,3Kavram kanıtıEPSS %0

    higuma · webaudiorecorder.js22 Şub 2026

  • CVE-2026-23552
    36İzleyin

    Apache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    apache · camel23 Şub 2026

  • CVE-2026-25747
    35İzleyin

    Apache Camel LevelDB: Deserialization of Untrusted Data in Camel LevelDB

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    apache · camel23 Şub 2026

  • CVE-2025-63945
    29İzleyin

    A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute

    YüksekCVSS 7,4Kavram kanıtıEPSS %0

    tencent · ioa23 Şub 2026

  • CVE-2025-63946
    29İzleyin

    A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to exec

    YüksekCVSS 7,4Kavram kanıtıEPSS %0

    tencent · pcmanager23 Şub 2026

  • CVE-2025-67733
    28İzleyin

    Valkey Affected by RESP Protocol Injection via Lua error_reply

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    lfprojects · valkey23 Şub 2026

  • CVE-2025-68930
    26İzleyin

    Traccar Missing Origin Validation in WebSockets

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    traccar · traccar23 Şub 2026

  • CVE-2026-23693
    37İzleyin

    ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    roxnor · elementskit elementor addons – advanced widgets & templates addons for elementor23 Şub 2026

  • CVE-2026-25545
    28İzleyin

    Astro has Full-Read SSRF in error rendering via Host: header injection

    OrtaCVSS 6,9Kavram kanıtıEPSS %2

    astro · \@astrojs\/node23 Şub 2026

  • CVE-2026-1459
    28İzleyin

    A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware vers

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    zyxel · vmg3625-t50c firmware23 Şub 2026

  • CVE-2026-26198
    30İzleyin

    ormar is vulnerable to SQL Injection through aggregate functions min() and max()

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    collerek · ormar23 Şub 2026

  • CVE-2026-26331
    36İzleyin

    yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    yt-dlp project · yt-dlp23 Şub 2026

  • CVE-2026-23980
    21İzleyin

    Apache Superset: Improper Neutralization of Special Elements used in a SQL Command

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    apache · superset24 Şub 2026

  • CVE-2026-2763
    39İzleyin

    Use-after-free in the JavaScript Engine component

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    mozilla · firefox24 Şub 2026

  • CVE-2026-2764
    39İzleyin

    JIT miscompilation, use-after-free in the JavaScript Engine: JIT component

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    mozilla · firefox24 Şub 2026

  • CVE-2026-2766
    39İzleyin

    Use-after-free in the JavaScript Engine: JIT component

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    mozilla · firefox24 Şub 2026

  • CVE-2026-2781
    39İzleyin

    Integer overflow in the Libraries component in NSS

    KritikCVSS 9,8İstismar yokEPSS %0

    mozilla · firefox24 Şub 2026

  • CVE-2026-2796
    39İzleyin

    JIT miscompilation in the JavaScript: WebAssembly component

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    mozilla · firefox24 Şub 2026

  • CVE-2025-67445
    30İzleyin

    TOTOLINK X5000R V9.1.0cu.2415_B20250515 contains a denial-of-service vulnerability in /cgi-bin/cstecgi.cgi.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    totolink · x5000r firmware24 Şub 2026

  • CVE-2026-27483
    38İzleyin

    MindsDB has Path Traversal in /api/files Leading to Remote Code Execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %9

    mindsdb · mindsdb24 Şub 2026

  • CVE-2026-3102
    9İzleyin

    exiftool PNG File MacOS.pm SetMacOSTags os command injection

    DüşükCVSS 2,1Kavram kanıtıEPSS %3

    exiftool project · exiftool24 Şub 2026

  • CVE-2025-69985
    41Planlayın

    FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE).

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    frangoteam · fuxa24 Şub 2026

  • CVE-2026-27507
    37İzleyin

    Binardat 10G08-0800GSM Network Switch Hard-coded Credentials

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    binardat · 10g08-0800gsm firmware24 Şub 2026

  • CVE-2025-62512
    22İzleyin

    Piwigo Vulnerable to User Enumeration via Password Reset Endpoint

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    piwigo · piwigo24 Şub 2026

  • CVE-2026-26341
    38İzleyin

    Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials

    KritikCVSS 9,3Kavram kanıtıEPSS %3

    tattile · smart\+ firmware24 Şub 2026

  • CVE-2026-22553
    37İzleyin

    InSAT MasterSCADA BUK-TS OS Command Injection

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    insat · masterscada24 Şub 2026

  • CVE-2026-24849
    27İzleyin

    OpenEMR Arbitrary File Read Vulnerability

    OrtaCVSS 6,5Kavram kanıtıEPSS %2

    open-emr · openemr24 Şub 2026

  • CVE-2025-5781
    20İzleyin

    Information Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager

    OrtaCVSS 5,2Kavram kanıtıEPSS %0

    hitachi · configuration manager24 Şub 2026

  • CVE-2026-27606
    35İzleyin

    Rollup 4 has Arbitrary File Write via Path Traversal

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    rollupjs · rollup24 Şub 2026

  • CVE-2026-27607
    36İzleyin

    RustFS's Missing Post Policy Validation leads to Arbitrary Object Write

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    rustfs · rustfs24 Şub 2026

  • CVE-2026-27621
    27İzleyin

    TypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File Upload

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    typicms · typicms24 Şub 2026

  • CVE-2026-27626
    39İzleyin

    OliveTin vulnerable to OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checks

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    olivetin · olivetin24 Şub 2026

  • CVE-2026-27597
    40Planlayın

    @enclave-vm/core is vulnerable to Sandbox Escape

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    agentfront · enclave25 Şub 2026

  • CVE-2026-27636
    40Planlayın

    FreeScout: Missing .htaccess in Restricted File Extensions Allows Remote Code Execution on Apache

    YüksekCVSS 8,8SilahlaştırılmışEPSS %2

    freescout · freescout25 Şub 2026

  • CVE-2026-27641
    39İzleyin

    Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    jugmac00 · flask-reuploaded25 Şub 2026

  • CVE-2026-27645
    24İzleyin

    changedetection.io Vulnerable to Reflected XSS in RSS Single Watch Error Response

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    webtechnologies · changedetection25 Şub 2026

  • CVE-2026-2416
    30İzleyin

    Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    cyberhobo · geo mashup25 Şub 2026

  • CVE-2026-3171
    8İzleyin

    SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scripting

    DüşükCVSS 2,0Kavram kanıtıEPSS %0

    pamzey · patients waiting area queue management system25 Şub 2026

  • CVE-2025-62878
    39İzleyin

    Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    suse · rancher25 Şub 2026

  • CVE-2026-2624
    40Planlayın

    Authentication Bypass in ePati's Antikor NGFW

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    epati · antikor next generation firewall25 Şub 2026

  • CVE-2025-1242
    37İzleyin

    Administrative Credentials Can Be Extracted Through Gardyn API Responses

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    gardyn · home kit25 Şub 2026

  • CVE-2026-27701
    35İzleyin

    LiveCodes vulnerable to JavaScript Injection via untrusted PR title in i18n-update-pull workflow

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    live-codes · livecodes25 Şub 2026

  • CVE-2026-20122
    59Planlayın

    Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

    OrtaCVSS 5,4KEVSilahlaştırılmışEPSS %25

    cisco · catalyst sd-wan manager25 Şub 2026

  • CVE-2026-20127
    97Hemen

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %88

    cisco · catalyst sd-wan manager25 Şub 2026

  • CVE-2026-20128
    62Bu hafta

    Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %7

    cisco · catalyst sd-wan manager25 Şub 2026

  • CVE-2026-20133
    70Bu hafta

    A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affect

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %32

    cisco · catalyst sd-wan manager25 Şub 2026

  • CVE-2026-26717
    19İzleyin

    An issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py.

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    25 Şub 2026

  • CVE-2026-21902
    43Planlayın

    Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root

    KritikCVSS 9,3Kavram kanıtıEPSS %18

    juniper · junos os evolved25 Şub 2026

  • CVE-2026-27739
    36İzleyin

    Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline

    KritikCVSS 9,2Kavram kanıtıEPSS %0

    angular · angular-cli25 Şub 2026

  • CVE-2026-25746
    35İzleyin

    OpenEMR has SQL Injection Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    open-emr · openemr25 Şub 2026

  • CVE-2026-22719
    67Bu hafta

    VMware Aria Operations command injection vulnerability

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %18

    vmware · aria operations25 Şub 2026

  • CVE-2026-2636
    22İzleyin

    Denial of Service in Microsoft OS

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    microsoft · windows os25 Şub 2026

  • CVE-2026-0542
    36İzleyin

    Remote Code Execution in ServiceNow AI Platform

    KritikCVSS 9,2Kavram kanıtıEPSS %0

    servicenow · servicenow ai platform25 Şub 2026

  • CVE-2026-27495
    37İzleyin

    n8n has a Sandbox Escape in its JavaScript Task Runner

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    n8n · n8n25 Şub 2026

  • CVE-2026-27577
    37İzleyin

    n8n: Expression Sandbox Escape Leads to RCE

    KritikCVSS 9,4Kavram kanıtıEPSS %1

    n8n · n8n25 Şub 2026

  • CVE-2026-27831
    30İzleyin

    rldns Vulnerable to Heap-based Out-of-Bounds Read

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    bluedragonsecurity · rldns25 Şub 2026

  • CVE-2026-27884
    21İzleyin

    NetExec vulnerable to arbitrary file write via path traversal in spider_plus module

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    pennyw0rth · netexec25 Şub 2026

  • CVE-2026-1557
    31İzleyin

    WP Responsive Images <= 1.0 - Unauthenticated Path Traversal to Arbitrary File Read via src

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    stuartbates · wp responsive images25 Şub 2026

  • CVE-2026-27938
    30İzleyin

    WPGraphQL Repo Vulnerable to Command Injection via Unsanitized GitHub Actions Expression in Release Workflow

    YüksekCVSS 7,7Kavram kanıtıEPSS %1

    wp-graphql · wp-graphql25 Şub 2026

  • CVE-2026-27941
    39İzleyin

    OpenLIT Vulnerable to Remote Code Execution and Secret Exposure via Misuse of `pull_request_target` in GitHub Actions Workflows

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    openlit · openlit software development kit25 Şub 2026

  • CVE-2026-27959
    30İzleyin

    Koa has Host Header Injection via `ctx.hostname`

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    koajs · koa25 Şub 2026

  • CVE-2026-27966
    60Bu hafta

    Langflow has Remote Code Execution in CSV Agent

    KritikCVSS 9,8SilahlaştırılmışEPSS %2

    langflow · langflow25 Şub 2026

  • CVE-2026-26077
    26İzleyin

    Discourse doesn't ensure webhooks require a token

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    discourse · discourse26 Şub 2026

  • CVE-2025-56605
    21İzleyin

    A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    26 Şub 2026

  • CVE-2026-26265
    30İzleyin

    Discourse has IDOR vulnerability in the directory items endpoint

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    discourse · discourse26 Şub 2026

  • CVE-2026-22722
    24İzleyin

    VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    vmware · workstation26 Şub 2026

  • CVE-2026-28363
    35İzleyin

    In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compres

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    openclaw · openclaw27 Şub 2026

  • CVE-2026-28364
    31İzleyin

    In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    ocaml · ocaml27 Şub 2026

  • CVE-2026-3286
    8İzleyin

    itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery

    DüşükCVSS 2,1İstismar yokEPSS %0

    itwanger · paicoding27 Şub 2026

  • CVE-2026-28372
    31İzleyin

    telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    gnu · inetutils27 Şub 2026

  • CVE-2026-1434
    20İzleyin

    Reflected XSS in Omega-PSIR

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    pw · omega-psir27 Şub 2026

  • CVE-2026-2749
    35İzleyin

    Path traversal in Centreon Open Tickets

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    centreon · open tickets27 Şub 2026

  • CVE-2026-3304
    34İzleyin

    Multer vulnerable to Denial of Service via incomplete cleanup

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    expressjs · multer27 Şub 2026

  • CVE-2026-28288
    22İzleyin

    Dify has a user enumeration issue

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    dify · dify27 Şub 2026

  • CVE-2026-28409
    29İzleyin

    WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection

    YüksekCVSS 7,2Kavram kanıtıEPSS %3

    wegia · wegia27 Şub 2026

  • CVE-2026-28411
    40Planlayın

    WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    wegia · wegia27 Şub 2026

  • CVE-2026-28414
    31İzleyin

    Gradio has Absolute Path Traversal on Windows with Python 3.13+

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    gradio project · gradio27 Şub 2026