İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2026: sömürülen ve yeni ciddi CVE kayıtları

355 kayıt · 26 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 4

  • CVE-2026-20452
    32İzleyin

    In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow.

    YüksekCVSS 8,0Kavram kanıtıEPSS %0

    mediatek · mt6890 firmware1 Haz 2026

  • CVE-2026-48188
    36İzleyin

    SQL Injection via MySQL Quote Method

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    otrs · otrs1 Haz 2026

  • CVE-2026-48208
    26İzleyin

    Denial-of-Service via SVG Rendering in Ticket

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    otrs · otrs1 Haz 2026

  • CVE-2026-10243
    22İzleyin

    code-projects Smart Parking System Admin Endpoint missing authentication

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    code-projects · smart parking system1 Haz 2026

  • CVE-2026-42588
    32İzleyin

    Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jolokia addNetworkConnector

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    apache · activemq1 Haz 2026

  • CVE-2026-44825
    40Planlayın

    Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    apache · solr1 Haz 2026

  • CVE-2026-0826
    46Planlayın

    Poly Voice – Possible Remote Control of Certain Poly Devices

    KritikCVSS 9,2SilahlaştırılmışEPSS %32

    hp inc. · poly_trio_83001 Haz 2026

  • CVE-2026-48866
    38İzleyin

    WordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerability

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    rocketgenius inc. · gravity forms1 Haz 2026

  • CVE-2026-45131
    40Planlayın

    CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requests

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    cloudpirates-io · helm-charts1 Haz 2026

  • CVE-2026-45132
    40Planlayın

    CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    cloudpirates-io · helm-charts1 Haz 2026

  • CVE-2026-45156
    32İzleyin

    Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    nextcloud · security-advisories1 Haz 2026

  • CVE-2024-52011
    30İzleyin

    launch-editor vulnerable to command injection via the crafted request on Windows

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    vitejs · launch-editor1 Haz 2026

  • CVE-2026-45729
    17İzleyin

    ThorVG: Null pointer dereference in SVG loader causes crash via 6-byte malformed input

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    thorvg · thorvg1 Haz 2026

  • CVE-2026-10288
    22İzleyin

    code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    code-projects · hotel and tourism reservation system1 Haz 2026

  • CVE-2026-10289
    8İzleyin

    code-projects Hotel and Tourism Reservation System tour.php cross site scripting

    DüşükCVSS 2,1Kavram kanıtıEPSS %0

    code-projects · hotel and tourism reservation system1 Haz 2026

  • CVE-2026-46243
    28İzleyin

    smb: client: reject userspace cifs.spnego descriptions

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    linux · linux kernel1 Haz 2026

  • CVE-2025-48595
    64Bu hafta

    In multiple locations, there is a possible way to achieve code execution due to an integer overflow.

    YüksekCVSS 8,4KEVSilahlaştırılmışEPSS %1

    google · android1 Haz 2026

  • CVE-2026-0009
    31İzleyin

    In multiple locations, there is a possible tapjacking due to a logic error in the code.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android1 Haz 2026

  • CVE-2026-0075
    23İzleyin

    In multiple functions, there is a possible way to access the contacts database due to a SQL injection.

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    google · android1 Haz 2026

  • CVE-2026-0091
    31İzleyin

    In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android1 Haz 2026

  • CVE-2026-10290
    22İzleyin

    code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    code-projects · hotel and tourism reservation system1 Haz 2026

  • CVE-2026-24088
    32İzleyin

    Missing Authentication for Critical Function in Boot

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    qualcomm · ar9380 firmware1 Haz 2026

  • CVE-2026-8206
    39İzleyin

    Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    themeum · kirki – freeform page builder, website builder & customizer2 Haz 2026

  • CVE-2026-49782
    21İzleyin

    WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    elementor · elementor website builder2 Haz 2026

  • CVE-2026-7299
    21İzleyin

    Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize database object names before rendering them in innerHTML, allowin

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    appsmith · appsmith2 Haz 2026

  • CVE-2026-49943
    25İzleyin

    CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matching implementation in

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    nic · bird2 Haz 2026

  • CVE-2026-10702
    17İzleyin

    JIT miscompilation in the JavaScript Engine: JIT component

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    mozilla · firefox2 Haz 2026

  • CVE-2026-48598
    8İzleyin

    CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection

    DüşükCVSS 2,1Kavram kanıtıEPSS %0

    elixir-tesla · tesla2 Haz 2026

  • CVE-2026-5073
    30İzleyin

    ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' Parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    armember · armember premium – membership plugin, content restriction, member levels, user profile & user signup2 Haz 2026

  • CVE-2026-5076
    39İzleyin

    ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    armember · armember premium – membership plugin, content restriction, member levels, user profile & user signup2 Haz 2026

  • CVE-2026-47117
    37İzleyin

    OpenMed < 1.5.2 Remote Code Execution via PII Model Loading

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    maziyarpanahi · openmed2 Haz 2026

  • CVE-2026-27145
    26İzleyin

    Inefficient candidate hostname parsing in crypto/x509

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    go standard library · crypto/x5092 Haz 2026

  • CVE-2026-39107
    25İzleyin

    A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature.

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    3 Haz 2026

  • CVE-2026-8888
    30İzleyin

    Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as JavaScript regular ex

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    securly · securly3 Haz 2026

  • CVE-2026-20230
    90Hemen

    Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %88

    cisco · unified communications manager3 Haz 2026

  • CVE-2026-49771
    30İzleyin

    WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    10web · photo gallery by 10web4 Haz 2026

  • CVE-2026-28318
    61Bu hafta

    SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %1

    solarwinds · serv-u4 Haz 2026

  • CVE-2026-35904
    39İzleyin

    Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allo

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    4 Haz 2026

  • CVE-2026-8037
    92Hemen

    OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %77

    progress · connection manager for objectscale4 Haz 2026

  • CVE-2025-65640
    25İzleyin

    Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to impro

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    4 Haz 2026

  • CVE-2026-10973
    29İzleyin

    Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML pag

    YüksekCVSS 7,4Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11101
    26İzleyin

    Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a craft

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11102
    35İzleyin

    Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary cod

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11103
    31İzleyin

    Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level pr

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11104
    26İzleyin

    Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obt

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11105
    26İzleyin

    Insufficient validation of untrusted input in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised th

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11106
    26İzleyin

    Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a craf

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11107
    17İzleyin

    Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a cra

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11108
    35İzleyin

    Inappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escala

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11109
    26İzleyin

    Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML pa

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11110
    26İzleyin

    Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML pa

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11111
    32İzleyin

    Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11112
    38İzleyin

    Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11113
    38İzleyin

    Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised th

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11114
    38İzleyin

    Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer pro

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11115
    29İzleyin

    Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalati

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11116
    35İzleyin

    Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious netwo

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11117
    35İzleyin

    Use after free in Views in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11118
    35İzleyin

    Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11119
    38İzleyin

    Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the ren

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-11120
    38İzleyin

    Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    google · chrome4 Haz 2026

  • CVE-2026-20245
    69Bu hafta

    Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %25

    cisco · catalyst sd-wan manager4 Haz 2026

  • CVE-2026-47644
    30İzleyin

    Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    microsoft · copilot chat4 Haz 2026

  • CVE-2026-41249
    32İzleyin

    CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    coreshop · coreshop4 Haz 2026

  • CVE-2026-41567
    28İzleyin

    Docker: `PUT /containers/{id}/archive` executes container binary on the host

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    moby · moby/v2/daemon4 Haz 2026

  • CVE-2026-48907
    75Bu hafta

    Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %16

    widgetfactorylimited · jce5 Haz 2026

  • CVE-2026-49777
    41Planlayın

    WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %2

    shapedplugin, llc · product slider pro for woocommerce5 Haz 2026

  • CVE-2026-6274
    39İzleyin

    Authentication Bypass in DTS Electronics' Redline WR3200

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    dts electronics industry and trade ltd. co. · redline wr32005 Haz 2026

  • CVE-2026-21017
    18İzleyin

    Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privil

    OrtaCVSS 4,6Kavram kanıtıEPSS %0

    samsung · android5 Haz 2026

  • CVE-2026-50230
    20İzleyin

    Lyrion Music Server 9.2.0 Reflected XSS via server.log

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    lms community · lyrion music server5 Haz 2026

  • CVE-2026-48095
    35İzleyin

    GHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocation

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    7-zip · 7-zip5 Haz 2026

  • CVE-2026-11344
    22İzleyin

    code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    code-projects · vehicle management system5 Haz 2026

  • CVE-2026-45746
    36İzleyin

    Termix Vulnerable to Arbitrary Command Execution via Session Hijacking

    KritikCVSS 9,0Kavram kanıtıEPSS %0

    termix · termix5 Haz 2026

  • CVE-2026-49492
    34İzleyin

    Markdown Preview Enhanced OS Command Injection in External File and Link Opening

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    shd101wyy · markdown preview enhanced5 Haz 2026

  • CVE-2026-10580
    40Planlayın

    Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    hippooo · hippoo mobile app for woocommerce5 Haz 2026

  • CVE-2026-46391
    34İzleyin

    HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    haxtheweb · @haxtheweb/open-apis5 Haz 2026

  • CVE-2026-46394
    30İzleyin

    HAX CMS Vulnerable to Command Injection using Git.php

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    haxtheweb · haxcms-php5 Haz 2026

  • CVE-2026-46395
    37İzleyin

    HAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementation

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    haxtheweb · haxcms-nodejs5 Haz 2026

  • CVE-2026-5411
    35İzleyin

    WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    webfactory · advanced google recaptcha5 Haz 2026

  • CVE-2026-5415
    35İzleyin

    WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    webfactory · advanced google recaptcha5 Haz 2026

  • CVE-2026-7473
    57Planlayın

    Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass

    OrtaCVSS 6,9KEVSilahlaştırılmışEPSS %0

    arista · eos5 Haz 2026

  • CVE-2026-7654
    35İzleyin

    Admin Columns <= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution via Custom Field Meta Value

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    codepress · admin columns5 Haz 2026

  • CVE-2025-12656
    15İzleyin

    Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion

    DüşükCVSS 3,8İstismar yokEPSS %0

    wpvividplugins · wpvivid — backup, migration & staging5 Haz 2026

  • CVE-2026-9290
    31İzleyin

    WP User Manager <= 2.9.17 - Unauthenticated Path Traversal to Local File Inclusion via 'tab' Query Parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    wpusermanager · wp user manager – user profile builder & membership5 Haz 2026

  • CVE-2026-7537
    28İzleyin

    MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    mdjm · mdjm event management6 Haz 2026

  • CVE-2026-7665
    21İzleyin

    Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    wpdevteam · essential addons for elementor – popular elementor templates & widgets6 Haz 2026

  • CVE-2026-8839
    21İzleyin

    MapPress Maps for WordPress <= 2.96.6 - Unauthenticated Insecure Direct Object Reference via REST API Endpoints

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    chrisvrichardson · mappress maps for wordpress6 Haz 2026

  • CVE-2026-11450
    27İzleyin

    GL.iNet GL-MT3000 Path Normalization dlopen command injection

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    gl.inet · gl-mt30006 Haz 2026

  • CVE-2026-9506
    35İzleyin

    Path Traversal Vulnerability in Bagisto

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    webkul · bagisto8 Haz 2026

  • CVE-2026-50751
    93Hemen

    User Authentication Bypass in VPN Remote Access and Mobile Access

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %85

    checkpoint · gaia os8 Haz 2026

  • CVE-2026-11499
    39İzleyin

    Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow

    KritikCVSS 9,3Kavram kanıtıEPSS %6

    tenda · hg7hg98 Haz 2026

  • CVE-2026-11518
    8İzleyin

    SourceCodester Inventory System User Management users.php cross site scripting

    DüşükCVSS 2,1Kavram kanıtıEPSS %0

    sourcecodester · inventory system8 Haz 2026

  • CVE-2026-42536
    31İzleyin

    Apache HTTP Server: mod_xml2enc heap overflow

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    apache · http server8 Haz 2026

  • CVE-2026-46442
    38İzleyin

    Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

    KritikCVSS 9,4Kavram kanıtıEPSS %3

    flowiseai · flowise8 Haz 2026

  • CVE-2026-49975
    31İzleyin

    Apache HTTP Server: mod_http2 denial of service

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    apache · http server8 Haz 2026

  • CVE-2026-25555
    38İzleyin

    OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header

    KritikCVSS 9,3Kavram kanıtıEPSS %2

    openbullet · openbullet28 Haz 2026

  • CVE-2026-46490
    34İzleyin

    samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    samlify project · samlify8 Haz 2026

  • CVE-2026-46275
    31İzleyin

    Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel8 Haz 2026

  • CVE-2026-11553
    29İzleyin

    Tenda HG7/HG9/HG10 formPPPEdit stack-based overflow

    YüksekCVSS 7,4Kavram kanıtıEPSS %0

    tenda · hg7hg98 Haz 2026

  • CVE-2026-11645
    66Bu hafta

    Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a san

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %2

    google · chrome8 Haz 2026