İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2026: sömürülen ve yeni ciddi CVE kayıtları

355 kayıt · 26 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 4

  • CVE-2026-41710
    23İzleyin

    Cache Exhaustion in Stateful Retries leads to Denial of Service

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    broadcom · spring retry9 Haz 2026

  • CVE-2017-20251
    37İzleyin

    WordPress Insert PHP Plugin 4.7.0 PHP Code Injection via REST API

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    themeisle · woody code snippets9 Haz 2026

  • CVE-2026-10523
    55Planlayın

    An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthent

    KritikCVSS 9,8Kavram kanıtıEPSS %53

    ivanti · standalone sentry9 Haz 2026

  • CVE-2026-10727
    32İzleyin

    An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker

    YüksekCVSS 7,2İstismar yokEPSS %13

    ivanti · endpoint manager mobile9 Haz 2026

  • CVE-2026-25089
    92Hemen

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 th

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %76

    fortinet · fortisandbox9 Haz 2026

  • CVE-2026-46316
    37İzleyin

    KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    linux · linux kernel9 Haz 2026

  • CVE-2026-42978
    31İzleyin

    Windows Push Notifications Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    microsoft · windows 10 18099 Haz 2026

  • CVE-2026-42980
    31İzleyin

    NT OS Kernel Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    microsoft · windows 10 16079 Haz 2026

  • CVE-2026-45447
    36İzleyin

    Heap Use-After-Free in the PKCS7_verify() Function

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    openssl · openssl9 Haz 2026

  • CVE-2026-45504
    35İzleyin

    Microsoft Exchange Server Elevation of Privilege Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    microsoft · exchange server9 Haz 2026

  • CVE-2026-49160
    30İzleyin

    HTTP.sys Denial of Service Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    microsoft · windows 10 16079 Haz 2026

  • CVE-2026-50507
    27İzleyin

    Windows BitLocker Security Feature Bypass Vulnerability

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    microsoft · windows 10 16079 Haz 2026

  • CVE-2026-8863
    31İzleyin

    Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    oracle corporation · oraclelinux(7.2) shim9 Haz 2026

  • CVE-2026-10520
    100Hemen

    An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %99

    ivanti · standalone sentry9 Haz 2026

  • CVE-2026-25860
    21İzleyin

    OpenClinic GA 5.351.19 Reflected XSS via DICOM Image Upload Handler

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    frankverbeke · openclinic ga9 Haz 2026

  • CVE-2026-44963
    37İzleyin

    A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    veeam · backup and replication9 Haz 2026

  • CVE-2026-41729
    32İzleyin

    Spring Data REST SpEL Injection via Map Key in JSON Patch

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    vmware · spring data rest9 Haz 2026

  • CVE-2025-59382
    4İzleyin

    QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)

    DüşükCVSS 1,2Kavram kanıtıEPSS %0

    qnap systems inc. · qts9 Haz 2026

  • CVE-2026-29114
    9İzleyin

    A vulnerability has been found in some Dahua products.

    DüşükCVSS 2,3Kavram kanıtıEPSS %0

    dahua · ipc10 Haz 2026

  • CVE-2026-29115
    27İzleyin

    A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, trigg

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    dahua · ipc/sd10 Haz 2026

  • CVE-2026-29116
    34İzleyin

    A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, tri

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    dahua · ipc/sd/nvr/xvr/evs/vto/vth/asi/tpc10 Haz 2026

  • CVE-2026-3326
    34İzleyin

    XStore < 9.7.3 - Unauthenticated SQLi

    YüksekCVSS 8,6Kavram kanıtıEPSS %1

    unknown · xstore10 Haz 2026

  • CVE-2026-9067
    36İzleyin

    Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    unknown · schema & structured data for wp & amp10 Haz 2026

  • CVE-2026-11837
    29İzleyin

    Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    red hat · red hat enterprise linux 1010 Haz 2026

  • CVE-2026-3018
    30İzleyin

    Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    contrid · newsletters10 Haz 2026

  • CVE-2025-6254
    39İzleyin

    Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    amentotech · doctreat core10 Haz 2026

  • CVE-2026-49069
    28İzleyin

    WordPress WPZOOM Portfolio plugin <= 1.4.21 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    wpzoom · wpzoom portfolio10 Haz 2026

  • CVE-2026-53435
    36İzleyin

    In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in J

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    jenkins · jenkins10 Haz 2026

  • CVE-2026-46558
    33İzleyin

    Plane: Cross-workspace asset authorization bypass lets any authenticated user read, copy, delete, and overwrite assets in other Plane workspaces

    YüksekCVSS 8,3Kavram kanıtıEPSS %0

    plane · plane10 Haz 2026

  • CVE-2026-53694
    29İzleyin

    Potential local privileges escalation through argument injection in the nxchmod.sh script

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    nomachine · nomachine10 Haz 2026

  • CVE-2025-71329
    34İzleyin

    image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    image-size · image-size10 Haz 2026

  • CVE-2026-11417
    28İzleyin

    OS Command Injection in NodejsFunction Bundling in aws-cdk-lib

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    aws · aws cloud development kit library10 Haz 2026

  • CVE-2026-20251
    45Planlayın

    Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

    YüksekCVSS 8,8Kavram kanıtıEPSS %32

    splunk · splunk10 Haz 2026

  • CVE-2026-20253
    98Hemen

    Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %96

    splunk · splunk10 Haz 2026

  • CVE-2026-46529
    33İzleyin

    PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    mate-desktop · atril10 Haz 2026

  • CVE-2026-0273
    24İzleyin

    PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    paloaltonetworks · pan-os10 Haz 2026

  • CVE-2026-46522
    31İzleyin

    ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    imagemagick · imagemagick10 Haz 2026

  • CVE-2026-50131
    34İzleyin

    Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    fedify-dev · fedify10 Haz 2026

  • CVE-2026-42568
    17İzleyin

    Yamcs Vulnerable to LDAP Injection in LdapAuthModule

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    yamcs · yamcs10 Haz 2026

  • CVE-2026-46645
    17İzleyin

    SQLAdmin: Authorization Bypass on `ajax_lookup`

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    smithyhq · sqladmin10 Haz 2026

  • CVE-2026-35273
    98Hemen

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %96

    oracle · peoplesoft enterprise peopletools11 Haz 2026

  • CVE-2026-10795
    33İzleyin

    UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpc

    YüksekCVSS 8,1Kavram kanıtıEPSS %3

    davidanderson · updraftplus: wp backup & migration plugin11 Haz 2026

  • CVE-2026-40987
    28İzleyin

    Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalization

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    vmware · spring integration11 Haz 2026

  • CVE-2026-11561
    39İzleyin

    SSTI in Soagen Informatics' Apinizer

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    soagen informatics technologies software and consulting inc. · apinizer11 Haz 2026

  • CVE-2026-47172
    38İzleyin

    Quest Bot: Untrusted pull request code can be built and deployed by privileged `workflow_run` deployment.

    KritikCVSS 9,5Kavram kanıtıEPSS %0

    duck-organization · quest-bot11 Haz 2026

  • CVE-2026-42647
    37İzleyin

    WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    beardev · joomsport11 Haz 2026

  • CVE-2026-49060
    39İzleyin

    WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.4 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    hippoo · hippoo mobile app for woocommerce11 Haz 2026

  • CVE-2026-48611
    40Planlayın

    Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to u

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    phpbb · phpbb12 Haz 2026

  • CVE-2026-9271
    23İzleyin

    KeepInMind - Dashboard Notes < 0.8.4.2 - Contributor+ Stored XSS

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    unknown · keepinmind dashboard notes12 Haz 2026

  • CVE-2026-48914
    26İzleyin

    Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

    OrtaCVSS 6,7İstismar yokEPSS %0

    red hat · red hat enterprise linux 1012 Haz 2026

  • CVE-2026-45674
    40Planlayın

    Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    netty · netty12 Haz 2026

  • CVE-2026-47208
    40Planlayın

    vm2: Sandbox Breakout Using Promise Species

    KritikCVSS 10,0İstismar yokEPSS %0

    patriksimek · vm212 Haz 2026

  • CVE-2026-53787
    39İzleyin

    Amasty Order Attributes for Magento 2 < 4.0.0 Unauthenticated Arbitrary File Upload

    KritikCVSS 9,3Kavram kanıtıEPSS %6

    amasty · order attributes for magento 212 Haz 2026

  • CVE-2026-45833
    37İzleyin

    A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary c

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    trychroma · chromadb12 Haz 2026

  • CVE-2026-50011
    30İzleyin

    Netty has unbounded pre-allocation in RedisArrayAggregator from RESP array length

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    netty · netty12 Haz 2026

  • CVE-2026-54397
    24İzleyin

    MISP event editing allows unauthorized assignment to undisclosed sharing groups

    OrtaCVSS 6,1İstismar yokEPSS %0

    misp · misp12 Haz 2026

  • CVE-2026-48558
    70Bu hafta

    SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification

    KritikCVSS 9,5KEVSilahlaştırılmışEPSS %5

    simple-help · simplehelp12 Haz 2026

  • CVE-2026-46716
    39İzleyin

    Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    nezhahq · nezha12 Haz 2026

  • CVE-2026-53519
    37İzleyin

    Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key

    KritikCVSS 9,1Kavram kanıtıEPSS %2

    nezhahq · nezha12 Haz 2026

  • CVE-2026-53836
    34İzleyin

    OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases

    YüksekCVSS 8,7İstismar yokEPSS %0

    openclaw · openclaw12 Haz 2026

  • CVE-2026-9848
    30İzleyin

    WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    emarket-design · customer support ticket system & helpdesk12 Haz 2026

  • CVE-2026-5513
    28İzleyin

    Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Unauthenticated Stored Cross-Site Scripting via 'bookly-customer-full-name' Cookie

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    ladela · online scheduling and appointment booking system – bookly13 Haz 2026

  • CVE-2026-54420
    64Bu hafta

    LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP

    YüksekCVSS 8,5KEVSilahlaştırılmışEPSS %0

    litespeedtech · litespeed cpanel plugin14 Haz 2026

  • CVE-2026-12191
    28İzleyin

    Comma AI Openpilot Pickle modeld.py pickle.loads deserialization

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    comma ai · openpilot14 Haz 2026

  • CVE-2026-8385
    21İzleyin

    WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Datatables AJAX Fallback

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    unknown · wp go maps15 Haz 2026

  • CVE-2026-8386
    21İzleyin

    WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker ID

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    unknown · wp go maps15 Haz 2026

  • CVE-2026-49757
    36İzleyin

    OAuth2/OIDC account takeover in AshAuthentication via email-based user matching

    KritikCVSS 9,2Kavram kanıtıEPSS %0

    team-alembic · ash_authentication15 Haz 2026

  • CVE-2026-20262
    64Bu hafta

    Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %28

    cisco · catalyst sd-wan manager15 Haz 2026

  • CVE-2026-47777
    30İzleyin

    Mastodon has a consent-check bypass in its remote Collections

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    mastodon · mastodon15 Haz 2026

  • CVE-2026-36213
    31İzleyin

    An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.exe component.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    15 Haz 2026

  • CVE-2026-36670
    35İzleyin

    A Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control Panel (opensips-cp) prior to version 9.3.3

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    15 Haz 2026

  • CVE-2026-38812
    39İzleyin

    RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    15 Haz 2026

  • CVE-2026-49952
    38İzleyin

    Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

    KritikCVSS 9,3Kavram kanıtıEPSS %3

    discuz! · discuz! x5.015 Haz 2026

  • CVE-2026-52721
    21İzleyin

    Gstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsing

    OrtaCVSS 5,3İstismar yokEPSS %0

    red hat · red hat enterprise linux 1015 Haz 2026

  • CVE-2026-39468
    27İzleyin

    WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    elightup · meta box – wordpress custom fields framework15 Haz 2026

  • CVE-2026-39492
    37İzleyin

    WordPress WP Maps plugin <= 4.9.1 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    flipper code – wordpress development company · wp maps15 Haz 2026

  • CVE-2026-40776
    30İzleyin

    WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    arraytics · wp event solution15 Haz 2026

  • CVE-2026-40791
    28İzleyin

    WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    codepeople · wp time slots booking form15 Haz 2026

  • CVE-2026-49078
    30İzleyin

    WordPress WP Travel Engine plugin <= 6.7.10 - Other Vulnerability Type vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wp travel engine · wp travel engine15 Haz 2026

  • CVE-2026-49083
    30İzleyin

    WordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    latepoint · latepoint15 Haz 2026

  • CVE-2026-49085
    39İzleyin

    WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    crm perks · wp insightly for contact form 7, wpforms, elementor, formidable and ninja forms15 Haz 2026

  • CVE-2026-49104
    39İzleyin

    WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.2.1 - PHP Object Injection vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    crm perks · integration for keap/infusionsoft and contact form 7, wpforms, elementor, formidable, ninja forms15 Haz 2026

  • CVE-2026-49105
    39İzleyin

    WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    crm perks · wp zendesk for contact form 7, wpforms, elementor, formidable and ninja forms15 Haz 2026

  • CVE-2026-9691
    39İzleyin

    WordPress Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.1 - PHP Object Injection vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    crm perks · integration for activecampaign and contact form 7, wpforms, elementor, ninja forms15 Haz 2026

  • CVE-2026-12087
    36İzleyin

    Socket versions before 2.041 for Perl have an out-of-bounds heap read

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    pevans · socket15 Haz 2026

  • CVE-2026-48017
    35İzleyin

    DbGate: Remote Code Execution via functionName injection in loadReader endpoint

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    dbgate · dbgate15 Haz 2026

  • CVE-2026-7273
    66Bu hafta

    A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %2

    zyxel · gs1900-8 firmware15 Haz 2026

  • CVE-2026-49772
    37İzleyin

    WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    liquid web / stellarwp · the events calendar16 Haz 2026

  • CVE-2026-52715
    37İzleyin

    WordPress GEO my WordPress plugin <= 4.5.5 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    eyal fitoussi · geo my wordpress16 Haz 2026

  • CVE-2026-46331
    31İzleyin

    net/sched: fix pedit partial COW leading to page cache corruption

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel16 Haz 2026

  • CVE-2026-12295
    38İzleyin

    Sandbox escape in the DOM: Navigation component

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    mozilla · firefox16 Haz 2026

  • CVE-2026-42089
    34İzleyin

    yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    yeoman · environment16 Haz 2026

  • CVE-2026-50656
    28İzleyin

    Microsoft Defender Elevation of Privilege Vulnerability

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    microsoft · malware protection engine16 Haz 2026

  • CVE-2026-35301
    40Planlayın

    Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).

    KritikCVSS 10,0İstismar yokEPSS %0

    oracle · weblogic server17 Haz 2026

  • CVE-2026-46838
    39İzleyin

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).

    KritikCVSS 9,9İstismar yokEPSS %0

    oracle · webcenter portal17 Haz 2026

  • CVE-2026-46858
    36İzleyin

    Vulnerability in the APM - Application Performance Management product of Oracle Enterprise Manager (component: JADM, JVM Diagnostics).

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    oracle · application performance management17 Haz 2026

  • CVE-2026-0092
    40Planlayın

    In Package Manager, there is a possible device lock controller bypass due to a missing permission check.

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    google · android17 Haz 2026

  • CVE-2026-12360
    30İzleyin

    JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint

    YüksekCVSS 7,5İstismar yokEPSS %0

    crocoblock · jetengine17 Haz 2026

  • CVE-2026-28576
    40Planlayın

    In Contacts Provider, there is a possible way to access the contacts database due to SQL injection.

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    google · android17 Haz 2026

  • CVE-2026-49079
    37İzleyin

    WordPress JetSearch plugin <= 3.5.17 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    jetimpex inc. · jetsearch17 Haz 2026