İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2026: sömürülen ve yeni ciddi CVE kayıtları

342 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 4

  • CVE-2026-3395
    23İzleyin

    MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %2

    max-3000 · maxsite cms1 Mar 2026

  • CVE-2026-26720
    39İzleyin

    An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts module.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    twenty · twenty2 Mar 2026

  • CVE-2026-21385
    61Bu hafta

    Integer Overflow or Wraparound in Graphics

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    qualcomm · sm7675p firmware2 Mar 2026

  • CVE-2026-28286
    39İzleyin

    ZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via API

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    zimaspace · zimaos2 Mar 2026

  • CVE-2026-28358
    10İzleyin

    NocoDB: User Enumeration via Password Reset Endpoint

    DüşükCVSS 2,7Kavram kanıtıEPSS %0

    nocodb · nocodb2 Mar 2026

  • CVE-2026-3180
    30İzleyin

    Contest Gallery <= 28.1.4 - Unauthenticated SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    contest-gallery · contest gallery – upload & vote photos, media, sell with paypal & stripe2 Mar 2026

  • CVE-2026-0006
    39İzleyin

    In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    google · android2 Mar 2026

  • CVE-2026-0010
    33İzleyin

    In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check.

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    google · android2 Mar 2026

  • CVE-2026-0013
    33İzleyin

    In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy.

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    google · android2 Mar 2026

  • CVE-2026-0014
    24İzleyin

    In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation.

    OrtaCVSS 6,2Kavram kanıtıEPSS %0

    google · android2 Mar 2026

  • CVE-2026-0023
    31İzleyin

    In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permis

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android2 Mar 2026

  • CVE-2026-0047
    33İzleyin

    In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permis

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    google · android2 Mar 2026

  • CVE-2026-2256
    26İzleyin

    Command injection vulnerability in ModelScope's ms-agent

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    modelscope · ms-agent2 Mar 2026

  • CVE-2026-1492
    47Planlayın

    User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration

    KritikCVSS 9,8Kavram kanıtıEPSS %27

    wpeverest · user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder3 Mar 2026

  • CVE-2025-59059
    39İzleyin

    Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    apache · ranger3 Mar 2026

  • CVE-2025-66680
    28İzleyin

    An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files v

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    wisecleaner · wise force deleter3 Mar 2026

  • CVE-2026-3494
    21İzleyin

    MariaDB Server Audit Plugin Comment Handling Bypass

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    mariadb · mariadb3 Mar 2026

  • CVE-2026-24415
    20İzleyin

    OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameter

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    devcode · openstamanager3 Mar 2026

  • CVE-2026-27971
    37İzleyin

    Qwik affected by unauthenticated RCE via server$ Deserialization

    KritikCVSS 9,2Kavram kanıtıEPSS %2

    qwik · qwik3 Mar 2026

  • CVE-2026-28289
    60Bu hafta

    FreeScout 1.8.206 Patch Bypass for CVE-2026-27636 via Zero-Width Space Character Leads to Remote Code Execution

    YüksekCVSS 8,1SilahlaştırılmışEPSS %2

    freescout · freescout3 Mar 2026

  • CVE-2026-1980
    21İzleyin

    WPBookit <= 1.0.8 - Missing Authorization to Unauthenticated Sensitive Customer Data Exposure

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    iqonicdesign · wpbookit3 Mar 2026

  • CVE-2026-2025
    30İzleyin

    Mail Mint < 1.19.5 - Unauthenticated Emails Disclosure

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    unknown · mail mint4 Mar 2026

  • CVE-2023-7337
    30İzleyin

    JS Help Desk – AI-Powered Support & Ticketing System 2.8.2 - Unauthenticated SQL Injection via 'js-support-ticket-token-tkstatus' Cookie

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    rabilal · js help desk – ai-powered support & ticketing system4 Mar 2026

  • CVE-2025-70341
    31İzleyin

    Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    app-auto-patch · app-auto-patch4 Mar 2026

  • CVE-2025-70342
    26İzleyin

    erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json.

    OrtaCVSS 6,6Kavram kanıtıEPSS %0

    grahampugh · erase-install4 Mar 2026

  • CVE-2026-23231
    31İzleyin

    netfilter: nf_tables: fix use-after-free in nf_tables_addchain()

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel4 Mar 2026

  • CVE-2025-66678
    39İzleyin

    An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execu

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    faintsnow · hardware read \& write utility4 Mar 2026

  • CVE-2026-28695
    30İzleyin

    Craft affected by authenticated RCE via Twig SSTI - create() function + Symfony Process gadget

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    craftcms · craft cms4 Mar 2026

  • CVE-2026-28696
    34İzleyin

    Craft affected by IDOR via GraphQL @parseRefs

    YüksekCVSS 8,7İstismar yokEPSS %0

    craftcms · craft cms4 Mar 2026

  • CVE-2026-28783
    37İzleyin

    Craft has a Twig Function Blocklist Bypass

    KritikCVSS 9,4İstismar yokEPSS %0

    craftcms · craft cms4 Mar 2026

  • CVE-2026-28784
    34İzleyin

    Craft is affected by potential authenticated Remote Code Execution via Twig SSTI

    YüksekCVSS 8,6İstismar yokEPSS %0

    craftcms · craft cms4 Mar 2026

  • CVE-2026-20079
    96Hemen

    Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %88

    cisco · secure firewall management center4 Mar 2026

  • CVE-2026-20131
    83Hemen

    Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %43

    cisco · secure firewall management center4 Mar 2026

  • CVE-2026-0847
    30İzleyin

    Path Traversal in nltk/nltk

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    nltk · nltk4 Mar 2026

  • CVE-2025-66024
    34İzleyin

    XWiki Blog Application home page vulnerable to Stored XSS via Post Title

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    xwiki · blog application4 Mar 2026

  • CVE-2026-29000
    37İzleyin

    pac4j-jwt JwtAuthenticator Authentication Bypass

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    pac4j · pac4j-jwt4 Mar 2026

  • CVE-2025-69411
    30İzleyin

    WordPress ionCube tester plus plugin <= 1.3 - Arbitrary File Download vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    robert seyfriedsberger · ioncube tester plus5 Mar 2026

  • CVE-2026-27344
    23İzleyin

    WordPress inseri core plugin <= 1.0.5 - Broken Access Control vulnerability

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    inseriswiss · inseri core5 Mar 2026

  • CVE-2026-27384
    36İzleyin

    WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability

    KritikCVSS 9,0Kavram kanıtıEPSS %0

    boldgrid · w3 total cache5 Mar 2026

  • CVE-2026-27541
    28İzleyin

    WordPress Wholesale Suite plugin <= 2.2.6 - Privilege Escalation vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    josh kohlbach · wholesale suite5 Mar 2026

  • CVE-2026-28134
    34İzleyin

    WordPress JetEngine plugin <= 3.7.2 - Remote Code Execution (RCE) vulnerability

    YüksekCVSS 8,5Kavram kanıtıEPSS %0

    crocoblock · jetengine5 Mar 2026

  • CVE-2026-29053
    60Bu hafta

    Ghost Vulnerable to Remote Code Execution via Malicious Themes

    KritikCVSS 9,8SilahlaştırılmışEPSS %4

    ghost · ghost5 Mar 2026

  • CVE-2026-21628
    40Planlayın

    Extension - astroidframe.work - Unauthenticated Remote Code Execution in Astroid Framework 2.0.0 - 3.3.10 for Joomla

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    templaza · astroid framework5 Mar 2026

  • CVE-2026-25048
    34İzleyin

    xgrammar: Multi-layer nesting causes DoS

    YüksekCVSS 8,7İstismar yokEPSS %1

    mlc-ai · xgrammar5 Mar 2026

  • CVE-2026-26416
    35İzleyin

    An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privilege

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    tcs · cognix platform5 Mar 2026

  • CVE-2026-26417
    32İzleyin

    A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authe

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    tcs · cognix platform5 Mar 2026

  • CVE-2026-26418
    30İzleyin

    Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to acc

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    tcs · cognix platform5 Mar 2026

  • CVE-2026-27944
    39İzleyin

    Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    nginxui · nginx ui5 Mar 2026

  • CVE-2024-43035
    24İzleyin

    Fonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint.

    OrtaCVSS 5,8Kavram kanıtıEPSS %2

    fonoster · fonoster5 Mar 2026

  • CVE-2025-55208
    36İzleyin

    Chamilo LMS has Stored Cross Site Scripting on Social Networks Uploaded Files

    KritikCVSS 9,0İstismar yokEPSS %0

    chamilo · chamilo lms5 Mar 2026

  • CVE-2025-70995
    35İzleyin

    An issue in Aranda Service Desk Web Edition (ASDK API 8.6) allows authenticated attackers to achieve remote code execution due to improper v

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    5 Mar 2026

  • CVE-2026-0848
    40Planlayın

    Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    nltk · nltk5 Mar 2026

  • CVE-2026-28466
    37İzleyin

    OpenClaw < 2026.2.14 - Remote Code Execution via Node Invoke Approval Bypass

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    openclaw · openclaw5 Mar 2026

  • CVE-2026-27778
    34İzleyin

    ePower epower.ie Improper Restriction of Excessive Authentication Attempts

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    epower · epower.ie5 Mar 2026

  • CVE-2026-3612
    32İzleyin

    Wavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injection

    YüksekCVSS 7,3İstismar yokEPSS %10

    wavlink · wl-nu516u1 firmware5 Mar 2026

  • CVE-2026-28501
    60Bu hafta

    WWBN AVideo: Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php

    KritikCVSS 9,8SilahlaştırılmışEPSS %1

    wwbn · avideo6 Mar 2026

  • CVE-2026-29041
    35İzleyin

    Chamilo: Authenticated Remote Code Execution via Unrestricted File Upload

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    chamilo · chamilo lms6 Mar 2026

  • CVE-2026-29058
    60Bu hafta

    AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php

    KritikCVSS 9,8SilahlaştırılmışEPSS %6

    wwbn · avideo-encoder6 Mar 2026

  • CVE-2026-29059
    28İzleyin

    Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly

    OrtaCVSS 6,9Kavram kanıtıEPSS %2

    windmill · windmill6 Mar 2026

  • CVE-2026-29183
    24İzleyin

    SiYuan: Unauthenticated reflected SVG XSS in `/api/icon/getDynamicIcon` (`type=8`) enables arbitrary JavaScript execution

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    b3log · siyuan6 Mar 2026

  • CVE-2026-29075
    39İzleyin

    Mesa: Checking out of untrusted code in `benchmarks.yml` workflow may lead to code execution in privileged runner

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    mesa project · mesa6 Mar 2026

  • CVE-2026-30844
    37İzleyin

    Wekan Vulnerable to SSRF through Lack of Validation or Filtering in Attachment URL Loading

    KritikCVSS 9,3İstismar yokEPSS %0

    wekan project · wekan6 Mar 2026

  • CVE-2026-30225
    17İzleyin

    OliveTin: RestartAction always runs actions as guest

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    olivetin · olivetin6 Mar 2026

  • CVE-2025-15602
    34İzleyin

    Snipe-IT < 8.3.7 Mass Assignment Vulnerability Leading to Privilege Escalation

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    snipeitapp · snipe-it6 Mar 2026

  • CVE-2026-2020
    30İzleyin

    JS Archive List <= 6.1.7 - Authenticated (Contributor+) PHP Object Injection via 'included' Shortcode Attribute

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    skatox · js archive list6 Mar 2026

  • CVE-2026-27796
    30İzleyin

    Homarr: Unauthenticated Information Disclosure (Integration Metadata Leak)

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    homarr · homarr7 Mar 2026

  • CVE-2026-30824
    31İzleyin

    Flowise: Missing Authentication on NVIDIA NIM Endpoints

    YüksekCVSS 7,7Kavram kanıtıEPSS %2

    flowiseai · flowise7 Mar 2026

  • CVE-2025-14675
    29İzleyin

    Meta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File Deletion

    YüksekCVSS 7,2Kavram kanıtıEPSS %2

    metabox · meta box7 Mar 2026

  • CVE-2026-3661
    11İzleyin

    Wavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection

    DüşükCVSS 2,0İstismar yokEPSS %11

    wavlink · wl-nu516u1 firmware7 Mar 2026

  • CVE-2026-3662
    11İzleyin

    Wavlink WL-NU516U1 adm.cgi usb_p910 command injection

    DüşükCVSS 2,0İstismar yokEPSS %11

    wavlink · wl-nu516u1 firmware7 Mar 2026

  • CVE-2026-29780
    22İzleyin

    eml_parser: Path Traversal in Official Example Script Leading to Arbitrary File Write

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    govcert.lu · eml parser7 Mar 2026

  • CVE-2026-29781
    8İzleyin

    Sliver: Authenticated Nil-Pointer Dereference in Handlers

    DüşükCVSS 2,1Kavram kanıtıEPSS %0

    bishopfox · sliver7 Mar 2026

  • CVE-2026-29786
    32İzleyin

    node-tar: Hardlink Path Traversal via Drive-Relative Linkpath

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    isaacs · tar7 Mar 2026

  • CVE-2026-3786
    8İzleyin

    EasyCMS Request Parameter RbacuserAction.class.php sql injection

    DüşükCVSS 2,1Kavram kanıtıEPSS %0

    easycms · easycms8 Mar 2026

  • CVE-2026-3796
    7İzleyin

    Qi-ANXIN QAX Virus Removal Mini Filter Driver QKSecureIO_Imp.sys ZwTerminateProcess access control

    DüşükCVSS 1,9Kavram kanıtıEPSS %0

    qianxin · qax internet control gateway9 Mar 2026

  • CVE-2026-3798
    11İzleyin

    Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection

    DüşükCVSS 2,0İstismar yokEPSS %11

    comfast · cf-ac100 firmware9 Mar 2026

  • CVE-2025-69219
    35İzleyin

    Apache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    apache · airflow providers http9 Mar 2026

  • CVE-2026-25604
    21İzleyin

    Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    apache · apache-airflow-providers-amazon9 Mar 2026

  • CVE-2025-14558
    40Planlayın

    Remote code execution via ND6 Router Advertisements

    YüksekCVSS 7,2SilahlaştırılmışEPSS %6

    freebsd · freebsd9 Mar 2026

  • CVE-2024-14027
    22İzleyin

    xattr: switch to CLASS(fd)

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    linux · linux kernel9 Mar 2026

  • CVE-2026-31816
    37İzleyin

    Budibase Universal Auth Bypass via Webhook Query Param Injection

    KritikCVSS 9,1Kavram kanıtıEPSS %2

    budibase · budibase9 Mar 2026

  • CVE-2026-3288
    35İzleyin

    ingress-nginx rewrite-target nginx configuration injection

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    kubernetes · ingress-nginx9 Mar 2026

  • CVE-2026-31802
    32İzleyin

    node-tar Symlink Path Traversal via Drive-Relative Linkpath

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    isaacs · tar10 Mar 2026

  • CVE-2026-30862
    36İzleyin

    Critical Stored XSS & Privilege Escalation in Appsmith

    KritikCVSS 9,0Kavram kanıtıEPSS %0

    appsmith · appsmith10 Mar 2026

  • CVE-2025-56422
    39İzleyin

    A deserialization vulnerability in LimeSurvey before v6.15.0+250623 allows a remote attacker to execute arbitrary code on the server.

    KritikCVSS 9,8İstismar yokEPSS %0

    limesurvey · limesurvey10 Mar 2026

  • CVE-2026-23907
    21İzleyin

    Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    apache · pdfbox-examples10 Mar 2026

  • CVE-2026-24018
    31İzleyin

    A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    fortinet · forticlient10 Mar 2026

  • CVE-2026-24291
    32İzleyin

    Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %3

    microsoft · windows 10 160710 Mar 2026

  • CVE-2026-24294
    32İzleyin

    Windows SMB Server Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %4

    microsoft · windows 10 160710 Mar 2026

  • CVE-2026-25172
    32İzleyin

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

    YüksekCVSS 8,0Kavram kanıtıEPSS %0

    microsoft · windows server 201210 Mar 2026

  • CVE-2026-25177
    35İzleyin

    Active Directory Domain Services Elevation of Privilege Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    microsoft · windows 10 160710 Mar 2026

  • CVE-2026-26114
    36İzleyin

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    microsoft · sharepoint server10 Mar 2026

  • CVE-2026-26118
    35İzleyin

    Azure MCP Server Tools Elevation of Privilege Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    microsoft · azure mcp server10 Mar 2026

  • CVE-2026-26128
    31İzleyin

    Windows SMB Server Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    microsoft · windows 10 160710 Mar 2026

  • CVE-2026-30928
    34İzleyin

    Glances Exposes Unauthenticated Configuration Secrets

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    nicolargo · glances10 Mar 2026

  • CVE-2026-30944
    35İzleyin

    StudioCMS Affected by Privilege Escalation via Insecure API Token Generation

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    studiocms · studiocms10 Mar 2026

  • CVE-2026-30945
    28İzleyin

    StudioCMS: IDOR — Arbitrary API Token Revocation Leading to Denial of Service

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    studiocms · studiocms10 Mar 2026

  • CVE-2026-3228
    25İzleyin

    NextScripts: Social Networks Auto-Poster <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' Shortcode

    OrtaCVSS 6,4Kavram kanıtıEPSS %0

    nextscripts · nextscripts: social networks auto-poster10 Mar 2026

  • CVE-2026-3306
    21İzleyin

    Improper authorization in GitHub Projects allows modification of issue and pull request metadata without repository write access

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    github · enterprise server10 Mar 2026

  • CVE-2026-3854
    34İzleyin

    Remote code execution via git push option injection in GitHub Enterprise Server

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    github · enterprise server10 Mar 2026