İçeriğe atla
Noroxi
Yayın tarihine göre

Nisan 2026: sömürülen ve yeni ciddi CVE kayıtları

378 kayıt · 14 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 3 / 4

  • CVE-2026-32202
    68Bu hafta

    Windows Shell Spoofing Vulnerability

    OrtaCVSS 4,3KEVSilahlaştırılmışEPSS %71

    microsoft · windows 10 160714 Nis 2026

  • CVE-2026-33827
    32İzleyin

    Windows TCP/IP Remote Code Execution Vulnerability

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    microsoft · windows 10 160714 Nis 2026

  • CVE-2026-33829
    18İzleyin

    Windows Snipping Tool Spoofing Vulnerability

    OrtaCVSS 4,3Kavram kanıtıEPSS %3

    microsoft · windows 10 160714 Nis 2026

  • CVE-2026-35031
    35İzleyin

    Jellyfin: Potential RCE via subtitle upload path traversal + .strm chain

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    jellyfin · jellyfin14 Nis 2026

  • CVE-2026-35033
    37İzleyin

    Jellyfin: Potential SSRF + Arbitrary file read via stream argument injection

    KritikCVSS 9,3İstismar yokEPSS %0

    jellyfin · jellyfin14 Nis 2026

  • CVE-2026-39387
    28İzleyin

    BoidCMS: Local File Inclusion (LFI) leads to Remote Code Execution (RCE) via tpl parameter

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    boidcms · boidcms14 Nis 2026

  • CVE-2026-1314
    21İzleyin

    3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.17 - Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposu

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    iberezansky · 3d flipbook – pdf embedder, pdf flipbook viewer, flipbook image gallery15 Nis 2026

  • CVE-2026-39842
    39İzleyin

    OpenRemote is Vulnerable to Expression Injection

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    openremote · openremote15 Nis 2026

  • CVE-2026-1555
    39İzleyin

    WebStack <= 1.2024 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    owen · webstack15 Nis 2026

  • CVE-2026-40105
    26İzleyin

    XWiki has Reflected Cross-Site Scripting (XSS) in its page history compare functionality

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    xwiki · xwiki15 Nis 2026

  • CVE-2026-0827
    27İzleyin

    During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Len

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    lenovo · diagnostics15 Nis 2026

  • CVE-2026-20147
    42Planlayın

    Cisco Identity Services Engine Remote Code Execution Vulnerability

    KritikCVSS 9,9İstismar yokEPSS %10

    cisco · identity services engine passive identity connector15 Nis 2026

  • CVE-2026-20180
    41Planlayın

    Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability

    KritikCVSS 9,9Kavram kanıtıEPSS %6

    cisco · identity services engine15 Nis 2026

  • CVE-2026-40261
    36İzleyin

    Composer has Command Injection via Malicious Perforce Reference

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    getcomposer · composer15 Nis 2026

  • CVE-2026-40179
    21İzleyin

    Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    prometheus · prometheus15 Nis 2026

  • CVE-2026-5189
    36İzleyin

    Nexus Repository 3 - Hardcoded Credential in Internal Database Component

    KritikCVSS 9,2İstismar yokEPSS %0

    sonatype · nexus repository manager15 Nis 2026

  • CVE-2026-6300
    35İzleyin

    Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a cr

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    google · chrome15 Nis 2026

  • CVE-2026-6307
    35İzleyin

    Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    google · chrome15 Nis 2026

  • CVE-2026-40176
    31İzleyin

    Composer is vulnerable to Command Injection via Malicious Perforce Repository

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    getcomposer · composer15 Nis 2026

  • CVE-2026-5050
    30İzleyin

    Payment Gateway for Redsys & WooCommerce Lite <= 7.0.0 - Improper Verification of Cryptographic Signature to Unauthenticated Payment Status Manipulation

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    jconti · payment gateway for redsys & woocommerce lite16 Nis 2026

  • CVE-2026-1880
    21İzleyin

    An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    asus · driverhub16 Nis 2026

  • CVE-2026-5426
    36İzleyin

    KnowledgeDeliver deployments before February 24, 2026 use a static ASP.NET/IIS machineKey value

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    digital knowledge · knowledgedeliver16 Nis 2026

  • CVE-2026-40901
    30İzleyin

    DataEase: Quartz Deserialization → Remote Code Execution

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    dataease · dataease16 Nis 2026

  • CVE-2026-40308
    35İzleyin

    My Calendar: Unauthenticated Information Disclosure (IDOR) via Multisite switch_to_blog

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    joedolson · my-calendar16 Nis 2026

  • CVE-2026-35469
    34İzleyin

    SpdyStream: DOS on CRI

    YüksekCVSS 8,7İstismar yokEPSS %0

    moby · spdystream16 Nis 2026

  • CVE-2026-6421
    25İzleyin

    Mobatek MobaXterm Home Edition msimg32.dll uncontrolled search path

    OrtaCVSS 6,4Kavram kanıtıEPSS %0

    mobatek · mobaxterm home edition17 Nis 2026

  • CVE-2026-6483
    33İzleyin

    Wavlink WL-WN530H4 internet.cgi snprintf os command injection

    YüksekCVSS 7,3İstismar yokEPSS %13

    wavlink · wl-wn530h417 Nis 2026

  • CVE-2026-37749
    39İzleyin

    A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authen

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    17 Nis 2026

  • CVE-2026-5718
    34İzleyin

    Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass

    YüksekCVSS 8,1Kavram kanıtıEPSS %5

    glenwpcoder · drag and drop multiple file upload for contact form 717 Nis 2026

  • CVE-2025-70795
    22İzleyin

    STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to termin

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    17 Nis 2026

  • CVE-2026-23500
    37İzleyin

    Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    dolibarr · dolibarr erp\/crm17 Nis 2026

  • CVE-2026-21733
    29İzleyin

    GPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so)

    YüksekCVSS 7,3İstismar yokEPSS %0

    imaginationtech · ddk17 Nis 2026

  • CVE-2026-40342
    39İzleyin

    Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution

    KritikCVSS 9,9İstismar yokEPSS %0

    firebirdsql · firebird17 Nis 2026

  • CVE-2026-2262
    31İzleyin

    Easy Appointments <= 3.12.21 - Unauthenticated Sensitive Information Exposure via REST API

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    easyappointments · easy appointments17 Nis 2026

  • CVE-2026-35603
    21İzleyin

    Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    anthropic · claude code17 Nis 2026

  • CVE-2026-40477
    36İzleyin

    Improper restriction of the scope of accessible objects in Thymeleaf expressions

    KritikCVSS 9,0Kavram kanıtıEPSS %0

    thymeleaf · thymeleaf17 Nis 2026

  • CVE-2026-40487
    36İzleyin

    Postiz Has Unrestricted File Upload via MIME Type Spoofing that Leads to Stored XSS

    KritikCVSS 9,0Kavram kanıtıEPSS %0

    gitroom · postiz18 Nis 2026

  • CVE-2026-40489
    34İzleyin

    editorconfig-core-c has incomplete fix for CVE-2023-0341

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    editorconfig · editorconfig-core-c18 Nis 2026

  • CVE-2026-41254
    30İzleyin

    Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplica

    YüksekCVSS 7,5İstismar yokEPSS %0

    littlecms · little cms18 Nis 2026

  • CVE-2026-41242
    37İzleyin

    protobufjs has an arbitrary code execution issue

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    protobufjs project · protobufjs18 Nis 2026

  • CVE-2026-6596
    22İzleyin

    langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted upload

    OrtaCVSS 5,5İstismar yokEPSS %0

    langflow-ai · langflow19 Nis 2026

  • CVE-2026-31429
    22İzleyin

    net: skb: fix cross-cache free of KFENCE-allocated skb head

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    linux · linux kernel20 Nis 2026

  • CVE-2026-6643
    34İzleyin

    A stack-based buffer overflow vulnerability in the VPN Clients on the ADM

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    asustor · data master20 Nis 2026

  • CVE-2026-6644
    38İzleyin

    A command injection vulnerability was found in the PPTP VPN Clients on the ADM

    KritikCVSS 9,4Kavram kanıtıEPSS %1

    asustor · data master20 Nis 2026

  • CVE-2026-5760
    39İzleyin

    SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_templat

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    lmsys · sglang20 Nis 2026

  • CVE-2026-3517
    33İzleyin

    OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

    YüksekCVSS 7,2İstismar yokEPSS %15

    progress · connection manager for objectscale20 Nis 2026

  • CVE-2026-3518
    33İzleyin

    OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

    YüksekCVSS 7,2İstismar yokEPSS %16

    progress · connection manager for objectscale20 Nis 2026

  • CVE-2026-26399
    21İzleyin

    A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0.

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    20 Nis 2026

  • CVE-2026-6060
    18İzleyin

    Possible DoS via SQL Box

    OrtaCVSS 4,5Kavram kanıtıEPSS %0

    otrs ag · otrs20 Nis 2026

  • CVE-2026-6248
    32İzleyin

    wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path

    YüksekCVSS 8,1İstismar yokEPSS %0

    tomdever · wpforo forum20 Nis 2026

  • CVE-2025-66954
    26İzleyin

    A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid use

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    20 Nis 2026

  • CVE-2026-25524
    32İzleyin

    OpenMage LTS's Phar Deserialization leads to Remote Code Execution

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    openmage · magento20 Nis 2026

  • CVE-2026-32604
    39İzleyin

    Spinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    linuxfoundation · spinnaker20 Nis 2026

  • CVE-2026-33626
    44Planlayın

    LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

    YüksekCVSS 7,5Kavram kanıtıEPSS %45

    internlm · lmdeploy20 Nis 2026

  • CVE-2026-35570
    33İzleyin

    OpenClaude has Sandbox Bypass via Early-Exit Logic Flaw that Allows Path Traversal

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    gitlawb · openclaude21 Nis 2026

  • CVE-2026-41285
    17İzleyin

    In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    openbsd · openbsd21 Nis 2026

  • CVE-2026-41303
    34İzleyin

    OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    openclaw · openclaw21 Nis 2026

  • CVE-2026-39866
    30İzleyin

    Lawnchair vulnerable to Command Injection via unquoted workflow dispatch input in release_update.yml

    YüksekCVSS 7,4Kavram kanıtıEPSS %2

    lawnchair · lawnchair21 Nis 2026

  • CVE-2026-39973
    28İzleyin

    Apktool: Path Traversal to Arbitrary File Write

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    apktool · apktool21 Nis 2026

  • CVE-2026-6765
    21İzleyin

    Information disclosure in the Form Autofill component

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    mozilla · firefox21 Nis 2026

  • CVE-2026-6770
    27İzleyin

    Other issue in the Storage: IndexedDB component

    OrtaCVSS 6,5Kavram kanıtıEPSS %3

    mozilla · firefox21 Nis 2026

  • CVE-2026-41456
    21İzleyin

    Bludit CMS Reflected XSS via Search Plugin

    OrtaCVSS 5,1Kavram kanıtıEPSS %3

    bludit · bludit21 Nis 2026

  • CVE-2026-37748
    28İzleyin

    Visitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php/admin_user_insert.php and vms/php/update_1.

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    sanjay1313 · visitor management system21 Nis 2026

  • CVE-2026-40372
    39İzleyin

    ASP.NET Core Elevation of Privilege Vulnerability

    KritikCVSS 9,1İstismar yokEPSS %11

    microsoft · asp.net core21 Nis 2026

  • CVE-2026-40878
    8İzleyin

    mailcow-dockerized Login Page has Reflected Parameter Injection / Wrong-Context XSS Escaping

    DüşükCVSS 2,1Kavram kanıtıEPSS %0

    mailcow · mailcow-dockerized21 Nis 2026

  • CVE-2026-40887
    37İzleyin

    @vendure/core has a SQL Injection vulnerability

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    vendurehq · vendure21 Nis 2026

  • CVE-2026-22001
    10İzleyin

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).

    DüşükCVSS 2,7Kavram kanıtıEPSS %0

    oracle · mysql server21 Nis 2026

  • CVE-2026-22002
    19İzleyin

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

    OrtaCVSS 4,9Kavram kanıtıEPSS %0

    oracle · mysql server21 Nis 2026

  • CVE-2026-22003
    24İzleyin

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

    OrtaCVSS 6,0Kavram kanıtıEPSS %0

    oracle · graalvm21 Nis 2026

  • CVE-2026-22004
    19İzleyin

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

    OrtaCVSS 4,9Kavram kanıtıEPSS %0

    oracle · mysql server21 Nis 2026

  • CVE-2026-22005
    19İzleyin

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

    OrtaCVSS 4,9Kavram kanıtıEPSS %0

    oracle · mysql server21 Nis 2026

  • CVE-2026-22006
    21İzleyin

    Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Employee Snapshot).

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    oracle · peoplesoft enterprise hcm human resources21 Nis 2026

  • CVE-2026-22007
    11İzleyin

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securit

    DüşükCVSS 2,9Kavram kanıtıEPSS %0

    oracle · graalvm21 Nis 2026

  • CVE-2026-22008
    14İzleyin

    Vulnerability in Oracle Java SE (component: Libraries).

    DüşükCVSS 3,7Kavram kanıtıEPSS %0

    oracle · jdk21 Nis 2026

  • CVE-2026-22009
    26İzleyin

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    oracle · mysql server21 Nis 2026

  • CVE-2026-22010
    30İzleyin

    Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    oracle · financial services analytical applications infrastructure21 Nis 2026

  • CVE-2026-22011
    30İzleyin

    Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch).

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    oracle · applications dba21 Nis 2026

  • CVE-2026-22013
    21İzleyin

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    oracle · jdk21 Nis 2026

  • CVE-2026-22014
    15İzleyin

    Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Workflow and Business Events).

    DüşükCVSS 3,8Kavram kanıtıEPSS %0

    oracle · user management21 Nis 2026

  • CVE-2026-22015
    17İzleyin

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    oracle · mysql server21 Nis 2026

  • CVE-2026-22016
    30İzleyin

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    oracle · jre21 Nis 2026

  • CVE-2026-22017
    26İzleyin

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    oracle · mysql server21 Nis 2026

  • CVE-2026-22018
    14İzleyin

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librari

    DüşükCVSS 3,7Kavram kanıtıEPSS %0

    oracle · jre21 Nis 2026

  • CVE-2026-22019
    21İzleyin

    Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft (component: Person Search).

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    oracle · peoplesoft enterprise hcm shared components21 Nis 2026

  • CVE-2026-34308
    26İzleyin

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON).

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    oracle · mysql server21 Nis 2026

  • CVE-2026-40933
    43Planlayın

    Flowise: Authenticated RCE Via MCP Adapters

    KritikCVSS 9,9İstismar yokEPSS %11

    flowiseai · flowise21 Nis 2026

  • CVE-2026-40344
    35İzleyin

    MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads

    YüksekCVSS 8,8İstismar yokEPSS %0

    minio · minio22 Nis 2026

  • CVE-2026-22747
    32İzleyin

    Unauthorized User Impersonation when Using X.509 Client Certificates

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    vmware · spring security22 Nis 2026

  • CVE-2026-6023
    39İzleyin

    Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    progress · telerik ui for asp.net ajax22 Nis 2026

  • CVE-2026-31431
    90Hemen

    crypto: algif_aead - Revert to operating out-of-place

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %98

    linux · linux kernel22 Nis 2026

  • CVE-2026-6857
    30İzleyin

    Camel-infinispan: camel-infinispan: remote code execution via unsafe deserialization

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    red hat · red hat build of apache camel 4.18.1 for spring boot 3.5.1422 Nis 2026

  • CVE-2026-31525
    31İzleyin

    bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel22 Nis 2026

  • CVE-2026-33608
    39İzleyin

    Incomplete domain name sanitization during

    KritikCVSS 9,8İstismar yokEPSS %0

    powerdns · authoritative22 Nis 2026

  • CVE-2026-41651
    35İzleyin

    PackageKit vulnerable to TOCTOU Race on Transaction Flags leads to arbitrary package installation as root

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    packagekit project · packagekit22 Nis 2026

  • CVE-2026-6355
    26İzleyin

    A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploit

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    augmentt · augmentt22 Nis 2026

  • CVE-2026-6356
    38İzleyin

    A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through paramete

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    augmentt · augmentt22 Nis 2026

  • CVE-2026-41177
    22İzleyin

    Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    squidex · squidex22 Nis 2026

  • CVE-2026-34413
    60Bu hafta

    Xerte Online Toolkits Missing Authentication via connector.php

    YüksekCVSS 8,8SilahlaştırılmışEPSS %3

    thexerteproject · xerteonlinetoolkits22 Nis 2026

  • CVE-2026-34414
    40Planlayın

    Xerte Online Toolkits Path Traversal via connector.php

    YüksekCVSS 7,1SilahlaştırılmışEPSS %2

    thexerteproject · xerteonlinetoolkits22 Nis 2026

  • CVE-2026-34415
    60Bu hafta

    Xerte Online Toolkits File Upload RCE via elfinder Connector

    KritikCVSS 9,3SilahlaştırılmışEPSS %3

    thexerteproject · xerteonlinetoolkits22 Nis 2026