İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2026: sömürülen ve yeni ciddi CVE kayıtları

357 kayıt · 26 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 3 / 4

  • CVE-2026-49079
    37İzleyin

    WordPress JetSearch plugin <= 3.5.17 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    jetimpex inc. · jetsearch17 Haz 2026

  • CVE-2026-54806
    39İzleyin

    WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    melapress · wp activity log17 Haz 2026

  • CVE-2026-54807
    39İzleyin

    WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    themegrill · registration form for woocommerce17 Haz 2026

  • CVE-2026-8089
    28İzleyin

    weMail < 2.1.3 - Reflected Cross-Site Scripting

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    unknown · wemail: email marketing, email automation, newsletters, subscribers & email optins for woocommerce17 Haz 2026

  • CVE-2026-8383
    21İzleyin

    LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    unknown · learnpress17 Haz 2026

  • CVE-2026-49268
    35İzleyin

    Apache Shiro: LDAP DN Injection in DefaultLdapRealm

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    apache · shiro17 Haz 2026

  • CVE-2026-42055
    38İzleyin

    NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

    KritikCVSS 9,2Kavram kanıtıEPSS %6

    f5 · dos17 Haz 2026

  • CVE-2026-42530
    36İzleyin

    NGINX Open-Source ngx_http_v3_module vulnerability

    KritikCVSS 9,2Kavram kanıtıEPSS %1

    f5 · nginx gateway fabric17 Haz 2026

  • CVE-2026-54415
    34İzleyin

    Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    azuriom · azuriom cms17 Haz 2026

  • CVE-2025-48617
    31İzleyin

    In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android17 Haz 2026

  • CVE-2025-66391
    35İzleyin

    In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write operations, e.g., the

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    17 Haz 2026

  • CVE-2026-53805
    37İzleyin

    NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    nv-tlabs · gen3c17 Haz 2026

  • CVE-2026-47103
    37İzleyin

    Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() Injection

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    fgmacedo · python statemachine17 Haz 2026

  • CVE-2026-55200
    37İzleyin

    libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

    KritikCVSS 9,2Kavram kanıtıEPSS %4

    libssh2 · libssh217 Haz 2026

  • CVE-2025-26240
    33İzleyin

    In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server applicatio

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    17 Haz 2026

  • CVE-2026-12569
    81Hemen

    Remote Code Execution (RCE) vulnerability in Windchill PDMlink

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %46

    ptc · flexplm17 Haz 2026

  • CVE-2026-11784
    17İzleyin

    Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Acti

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    optimole · optimole – optimize images | convert webp & avif | cdn & lazy load | image optimization18 Haz 2026

  • CVE-2026-8461
    35İzleyin

    Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    ffmpeg · ffmpeg18 Haz 2026

  • CVE-2026-46580
    33İzleyin

    In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded and

    YüksekCVSS 8,4İstismar yokEPSS %0

    eclipse · theia18 Haz 2026

  • CVE-2026-56021
    27İzleyin

    Webmin information disclosure via regex pattern

    OrtaCVSS 6,9İstismar yokEPSS %0

    webmin · webmin18 Haz 2026

  • CVE-2026-54390
    37İzleyin

    JTL Shop < 5.7.2 Server-Side Template Injection via Smarty Renderer

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    jtl software · jtl shop18 Haz 2026

  • CVE-2026-11989
    26İzleyin

    Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    bitpressadmin · bit integrations – form integration, webhook, spreadsheets, crm, lms & email automation19 Haz 2026

  • CVE-2026-56132
    27İzleyin

    In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mis

    OrtaCVSS 6,9İstismar yokEPSS %0

    libexpat project · libexpat19 Haz 2026

  • CVE-2026-7515
    39İzleyin

    BetterDocs Pro <= 3.8.0 - Unauthenticated Local File Inclusion via doc_style

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    betterdocs · betterdocs pro19 Haz 2026

  • CVE-2026-8713
    37İzleyin

    Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry Value

    KritikCVSS 9,1Kavram kanıtıEPSS %3

    themefusion · avada (fusion) builder19 Haz 2026

  • CVE-2026-49230
    25İzleyin

    Apache APISIX: Authentication bypass in jwe-decrypt

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    apache · apisix19 Haz 2026

  • CVE-2025-62821
    36İzleyin

    Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving t

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    microsoft · heif image extension19 Haz 2026

  • CVE-2026-52910
    31İzleyin

    bpf: Free reuseport cBPF prog after RCU grace period.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel19 Haz 2026

  • CVE-2026-56073
    37İzleyin

    Cap-go - OTP Bypass via Response Manipulation in Email Verification

    KritikCVSS 9,3İstismar yokEPSS %0

    cap-go · capgo19 Haz 2026

  • CVE-2026-11551
    39İzleyin

    Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    wpmudev · branda – white label & branding, free login page customizer19 Haz 2026

  • CVE-2026-11912
    30İzleyin

    Simple File List <= 6.3.7 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    eemitch · simple file list20 Haz 2026

  • CVE-2026-48909
    39İzleyin

    Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4

    KritikCVSS 9,5Kavram kanıtıEPSS %4

    joomshaper.net · sp lms extension for joomla20 Haz 2026

  • CVE-2026-48939
    76Bu hafta

    Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %20

    joomlic · icagenda20 Haz 2026

  • CVE-2026-5366
    39İzleyin

    Git Argument Injection in prefecthq/prefect

    KritikCVSS 9,9Kavram kanıtıEPSS %1

    prefect · prefect20 Haz 2026

  • CVE-2026-48908
    97Hemen

    Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %88

    ollyo · sp page builder20 Haz 2026

  • CVE-2026-12771
    5İzleyin

    BerriAI litellm M2M JWT user_api_key_auth.py improper authorization

    DüşükCVSS 1,3İstismar yokEPSS %0

    litellm · litellm20 Haz 2026

  • CVE-2026-56265
    38İzleyin

    Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key

    KritikCVSS 9,3Kavram kanıtıEPSS %2

    kidocode · crawl4ai21 Haz 2026

  • CVE-2026-56423
    37İzleyin

    MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    misp-project · misp22 Haz 2026

  • CVE-2026-56446
    34İzleyin

    Authenticated Remote Code Execution via Arbitrary NDJSON Error Log Path in MISP

    YüksekCVSS 8,7İstismar yokEPSS %0

    misp-project · misp22 Haz 2026

  • CVE-2026-50178
    34İzleyin

    Angular: Remote Code Execution via JSDoc Hover Command Injection in VS Code Angular Language Service Extension

    YüksekCVSS 8,7İstismar yokEPSS %0

    angular · angular language service22 Haz 2026

  • CVE-2026-54266
    35İzleyin

    Angular: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning

    YüksekCVSS 8,8İstismar yokEPSS %0

    angular · angular22 Haz 2026

  • CVE-2026-53571
    32İzleyin

    Vite: `server.fs.deny` bypass on Windows alternate paths

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    vitejs · vite22 Haz 2026

  • CVE-2026-11834
    34İzleyin

    Unauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link Routers

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    tp-link systems inc. · archer mr200 v0722 Haz 2026

  • CVE-2026-45034
    36İzleyin

    PhpSpreadsheet: File::prohibitWrappers bypass

    KritikCVSS 9,2Kavram kanıtıEPSS %0

    phpoffice · phpspreadsheet22 Haz 2026

  • CVE-2026-49468
    39İzleyin

    LiteLLM: Authentication Bypass via Host Header Injection

    KritikCVSS 9,5Kavram kanıtıEPSS %3

    litellm · litellm22 Haz 2026

  • CVE-2026-48500
    26İzleyin

    Filament: Unauthenticated temporary file upload on auth pages

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    filamentphp · filament22 Haz 2026

  • CVE-2026-56348
    21İzleyin

    n8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpoint

    OrtaCVSS 5,3İstismar yokEPSS %0

    n8n · n8n22 Haz 2026

  • CVE-2026-54236
    21İzleyin

    vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    vllm · vllm22 Haz 2026

  • CVE-2026-11374
    37İzleyin

    Account Takeover via Predictable SSO Ticket Generation

    KritikCVSS 9,0Kavram kanıtıEPSS %2

    zohocorp · manageengine_adselfservice_plus23 Haz 2026

  • CVE-2026-56274
    40Planlayın

    Flowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess

    YüksekCVSS 8,7SilahlaştırılmışEPSS %7

    flowiseai · flowise23 Haz 2026

  • CVE-2026-56301
    27İzleyin

    Nuxt - Arbitrary File Read via World-Connectable vite-node IPC Socket on Linux

    OrtaCVSS 6,8İstismar yokEPSS %0

    nuxt · nuxt23 Haz 2026

  • CVE-2026-27604
    40Planlayın

    FOSSBilling: Improper API Role Validation (system) Enables Unauthenticated Access to Privileged Admin Functions

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    fossbilling · fossbilling23 Haz 2026

  • CVE-2026-28496
    38İzleyin

    FOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCE

    KritikCVSS 9,4Kavram kanıtıEPSS %1

    fossbilling · fossbilling23 Haz 2026

  • CVE-2026-44789
    37İzleyin

    n8n: HTTP Request Node Pagination Prototype Pollution to RCE

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    n8n · n8n23 Haz 2026

  • CVE-2026-48519
    38İzleyin

    Langflow: Unauthenticated RCE in Shareable Playgrounds

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    langflow · langflow23 Haz 2026

  • CVE-2026-50023
    38İzleyin

    yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)

    KritikCVSS 9,6İstismar yokEPSS %0

    yt-dlp project · yt-dlp23 Haz 2026

  • CVE-2026-55450
    37İzleyin

    Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    langflow · langflow23 Haz 2026

  • CVE-2026-54157
    37İzleyin

    LobeHub: Unauthenticated SSRF in `/webapi/proxy`

    KritikCVSS 9,0Kavram kanıtıEPSS %1

    lobehub · lobehub23 Haz 2026

  • CVE-2026-54316
    24İzleyin

    Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

    OrtaCVSS 6,0Kavram kanıtıEPSS %0

    anthropic · claude code23 Haz 2026

  • CVE-2026-57062
    11İzleyin

    CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supp

    DüşükCVSS 2,9Kavram kanıtıEPSS %0

    gnupg · gnupg23 Haz 2026

  • CVE-2026-53753
    41Planlayın

    Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

    KritikCVSS 10,0Kavram kanıtıEPSS %2

    kidocode · crawl4ai23 Haz 2026

  • CVE-2026-53755
    30İzleyin

    Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    kidocode · crawl4ai23 Haz 2026

  • CVE-2026-39253
    32İzleyin

    An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll and Pivotal.Engine.Cl

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    23 Haz 2026

  • CVE-2026-48020
    31İzleyin

    Traefik StripPrefix Route-Level Auth Bypass via Path Normalization

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    traefik · traefik23 Haz 2026

  • CVE-2026-54761
    24İzleyin

    Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services

    OrtaCVSS 6,0Kavram kanıtıEPSS %0

    traefik · traefik23 Haz 2026

  • CVE-2026-46552
    23İzleyin

    NocoDB: Shared-base link access can invite arbitrary users as persistent base members

    OrtaCVSS 5,8Kavram kanıtıEPSS %0

    nocodb · nocodb23 Haz 2026

  • CVE-2026-54512
    32İzleyin

    jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    fasterxml · jackson-databind23 Haz 2026

  • CVE-2026-54515
    21İzleyin

    jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    fasterxml · jackson-databind23 Haz 2026

  • CVE-2026-55255
    63Bu hafta

    Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

    YüksekCVSS 8,4KEVSilahlaştırılmışEPSS %0

    langflow · langflow23 Haz 2026

  • CVE-2026-7574
    34İzleyin

    Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    anthropic · claude desktop cowork23 Haz 2026

  • CVE-2026-12485
    40Planlayın

    GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD_IP_SET command

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    geovision inc. · gv-i/o box 4e24 Haz 2026

  • CVE-2026-12416
    39İzleyin

    Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    pravel · invoice generator24 Haz 2026

  • CVE-2026-52923
    31İzleyin

    ipc: limit next_id allocation to the valid ID range

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel24 Haz 2026

  • CVE-2026-52924
    39İzleyin

    sctp: purge outqueue on stale COOKIE-ECHO handling

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    linux · linux kernel24 Haz 2026

  • CVE-2026-56270
    35İzleyin

    Flowise - Unauthenticated OAuth Secrets Disclosure via /api/v1/loginmethod Endpoint

    YüksekCVSS 8,7Kavram kanıtıEPSS %2

    flowiseai · flowise24 Haz 2026

  • CVE-2026-52943
    31İzleyin

    net: skbuff: fix missing zerocopy reference in pskb_carve helpers

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel24 Haz 2026

  • CVE-2026-56111
    33İzleyin

    Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler

    YüksekCVSS 8,3Kavram kanıtıEPSS %0

    marlinfirmware · marlin24 Haz 2026

  • CVE-2026-56121
    37İzleyin

    Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    feast-dev · feast24 Haz 2026

  • CVE-2026-48732
    35İzleyin

    Warp: Remote SSH cwd can lead to unauthorized remote command execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    warpdotdev · warp24 Haz 2026

  • CVE-2026-54686
    17İzleyin

    Warp: DCS lifecycle hook spoofing can alter terminal session metadata

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    warpdotdev · warp24 Haz 2026

  • CVE-2026-52806
    41Planlayın

    Gogs: RCE via git rebase --exec argument injection in pull request merge

    KritikCVSS 9,9SilahlaştırılmışEPSS %7

    gogs · gogs24 Haz 2026

  • CVE-2026-52810
    28İzleyin

    Gogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusion

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    gogs · gogs24 Haz 2026

  • CVE-2026-52813
    40Planlayın

    Gogs: Path Traversal in organization name results in RCE through Git hooks

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    gogs · gogs24 Haz 2026

  • CVE-2026-52815
    22İzleyin

    Gogs: Unauthenticated Organization Teams Information Disclosure via API

    OrtaCVSS 5,5Kavram kanıtıEPSS %1

    gogs · gogs24 Haz 2026

  • CVE-2026-52993
    39İzleyin

    tipc: fix double-free in tipc_buf_append()

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    linux · linux kernel24 Haz 2026

  • CVE-2026-53075
    35İzleyin

    ppp: require CAP_NET_ADMIN in target netns for unattached ioctls

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    linux · linux kernel24 Haz 2026

  • CVE-2026-52794
    30İzleyin

    Sentry: Inefficient Regular Expression Complexity in sentry

    YüksekCVSS 7,5İstismar yokEPSS %0

    sentry · sentry24 Haz 2026

  • CVE-2026-54066
    31İzleyin

    SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    siyuan-note · siyuan24 Haz 2026

  • CVE-2026-54069
    36İzleyin

    SiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin Allowlist

    KritikCVSS 9,2Kavram kanıtıEPSS %0

    siyuan-note · siyuan24 Haz 2026

  • CVE-2026-39938
    39İzleyin

    Cacti: Unauthenticated RCE on Graph Image

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    cacti · cacti24 Haz 2026

  • CVE-2026-56129
    27İzleyin

    Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc.

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    dynabook inc. · generic io & memory access driver25 Haz 2026

  • CVE-2026-53266
    65Bu hafta

    netfilter: bridge: make ebt_snat ARP rewrite writable

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %0

    linux · linux kernel25 Haz 2026

  • CVE-2026-53264
    31İzleyin

    net/sched: act_api: use RCU with deferred freeing for action lifecycle

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel25 Haz 2026

  • CVE-2026-41120
    39İzleyin

    Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerabilit

    KritikCVSS 9,8İstismar yokEPSS %0

    dell · wyse management suite25 Haz 2026

  • CVE-2026-54836
    37İzleyin

    WordPress Filter & Grids plugin <= 3.11.5 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    ymc · ymc filter25 Haz 2026

  • CVE-2026-57588
    7İzleyin

    SQL Injection in Nessus via Malicious Scan Result File Import

    DüşükCVSS 1,8Kavram kanıtıEPSS %0

    tenable · nessus25 Haz 2026

  • CVE-2026-9086
    29İzleyin

    Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    redhat · build of keycloak25 Haz 2026

  • CVE-2026-54088
    37İzleyin

    File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    filebrowser · filebrowser25 Haz 2026

  • CVE-2026-54917
    31İzleyin

    SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    seaweedfs · seaweedfs25 Haz 2026

  • CVE-2026-56766
    35İzleyin

    Hydra - Stack Buffer Overflow in NTLM Authentication Handler

    YüksekCVSS 8,6Kavram kanıtıEPSS %2

    vanhauser-thc · thc-hydra25 Haz 2026