İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2026: sömürülen ve yeni ciddi CVE kayıtları

1.299 kayıt · 21 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 4 / 13

  • CVE-2026-66374
    32İzleyin

    Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    nic · knot resolver24 Tem 2026

  • CVE-2026-10818
    33İzleyin

    WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering

    YüksekCVSS 8,1Kavram kanıtıEPSS %2

    wpforms · wpforms pro25 Tem 2026

  • CVE-2026-64468
    31İzleyin

    binder: fix UAF in binder_free_transaction()

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux25 Tem 2026

  • CVE-2026-64507
    0İzleyin

    x86/bugs: Enable IBPB flush on BPF JIT allocation

    Kavram kanıtıEPSS %0

    linux · linux25 Tem 2026

  • CVE-2026-66012
    40Planlayın

    SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    siyuan-note · siyuan25 Tem 2026

  • CVE-2026-63720
    30İzleyin

    datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    koxudaxi · datamodel-code-generator26 Tem 2026

  • CVE-2024-14040
    31İzleyin

    net: nexthop: Increase weight to u16

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Tem 2026

  • CVE-2026-64530
    39İzleyin

    net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux26 Tem 2026

  • CVE-2026-17496
    32İzleyin

    NoteGen chat preview XSS via unsanitized AI/skill HTML rendering

    YüksekCVSS 8,1İstismar yokEPSS %0

    notegen · notegen26 Tem 2026

  • CVE-2026-17497
    33İzleyin

    NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python

    YüksekCVSS 8,3İstismar yokEPSS %0

    notegen · notegen26 Tem 2026

  • GHSA-xg7c-246g-6qpv
    30İzleyin

    Remote Denial of Service via malformed NIP-04 IV

    YüksekCVSS 7,5İstismar yok

    26 Tem 2026

  • RUSTSEC-2026-0219
    30İzleyin

    Remote Denial of Service via malformed NIP-04 IV

    YüksekCVSS 7,5İstismar yok

    crates.io · nostr26 Tem 2026

  • CVE-2026-57989
    29İzleyin

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    YüksekCVSS 7,4İstismar yokEPSS %0

    microsoft · edge chromium26 Tem 2026

  • CVE-2026-57990
    29İzleyin

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    YüksekCVSS 7,4İstismar yokEPSS %0

    microsoft · edge chromium26 Tem 2026

  • CVE-2026-15928
    32İzleyin

    XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page comp

    YüksekCVSS 8,2İstismar yokEPSS %0

    xmlrpc-c · xmlrpc-c26 Tem 2026

  • CVE-2026-12255
    32İzleyin

    MainWP Child < 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site Registration

    YüksekCVSS 8,1İstismar yokEPSS %0

    unknown · mainwp child27 Tem 2026

  • CVE-2026-12394
    40Planlayın

    MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    unknown · memberglut27 Tem 2026

  • CVE-2026-12493
    30İzleyin

    Clover Payment Gateway by Zaytech for WooCommerce < 1.3.6 - Unauthenticated Payment Bypass via check_order

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · clover payment gateway by zaytech for woocommerce27 Tem 2026

  • CVE-2026-13152
    32İzleyin

    Custom Fields Account Registration For WooCommerce < 1.4 - Unauthenticated Privilege Escalation

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    unknown · custom fields account registration for woocommerce27 Tem 2026

  • CVE-2026-13332
    36İzleyin

    Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)

    KritikCVSS 9,1İstismar yokEPSS %0

    unknown · masteriyo lms27 Tem 2026

  • CVE-2026-13597
    36İzleyin

    QRcode Login for WeChat <= 1.3 - Unauthenticated Account Takeover

    KritikCVSS 9,1İstismar yokEPSS %0

    unknown · 微信二维码登陆27 Tem 2026

  • CVE-2026-13714
    39İzleyin

    Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    unknown · realtyna organic idx plugin + wpl real estate27 Tem 2026

  • CVE-2026-13726
    28İzleyin

    Multiple Page Generator Plugin – MPG < 4.1.8 - Reflected XSS via mpg_shortcode

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · mpg27 Tem 2026

  • CVE-2026-14235
    30İzleyin

    WordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download Key

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · download manager27 Tem 2026

  • CVE-2026-14289
    36İzleyin

    WP FacturaONE < 5.37 - Unauthenticated Remote Code Execution

    KritikCVSS 9,0İstismar yokEPSS %0

    unknown · facturaone para woocommerce con verifactu27 Tem 2026

  • CVE-2026-66412
    28İzleyin

    Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPC

    YüksekCVSS 7,1İstismar yokEPSS %0

    leantime · leantime27 Tem 2026

  • CVE-2026-9830
    32İzleyin

    BookingPress Pro < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback Bug

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    unknown · bookingpress-appointment-booking-pro27 Tem 2026

  • CVE-2026-14837
    34İzleyin

    SSH Enablement Signature Verification Bypass

    YüksekCVSS 8,5İstismar yokEPSS %0

    lenze · c43027 Tem 2026

  • CVE-2026-65893
    28İzleyin

    Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP Camera

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    cp-plus · ez-p21 ip camera27 Tem 2026

  • CVE-2026-65894
    34İzleyin

    Improper Authentication Vulnerability in CP PLUS EZ-P21 IP Camera

    YüksekCVSS 8,7İstismar yokEPSS %0

    cp-plus · ez-p21 ip camera27 Tem 2026

  • CVE-2026-17527
    30İzleyin

    Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone

    YüksekCVSS 7,7İstismar yokEPSS %0

    red hat · red hat container native virtualization 4.1427 Tem 2026

  • CVE-2026-40000
    7İzleyin

    Path Traversal Vulnerability in ZTE Blade A75 5G

    DüşükCVSS 1,8Kavram kanıtıEPSS %0

    zte · blade a75 5g27 Tem 2026

  • CVE-2025-15662
    34İzleyin

    Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery

    YüksekCVSS 8,6İstismar yokEPSS %0

    unknown · printcart web to print product designer for woocommerce27 Tem 2026

  • CVE-2026-64531
    31İzleyin

    net: openvswitch: reject oversized nested action attrs

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux27 Tem 2026

  • CVE-2026-64532
    31İzleyin

    fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux27 Tem 2026

  • CVE-2026-64533
    31İzleyin

    fs/ntfs3: validate lcns_follow in log_replay conversion

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux27 Tem 2026

  • CVE-2026-64534
    39İzleyin

    nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux27 Tem 2026

  • CVE-2026-64535
    39İzleyin

    nvmet-tcp: Fix potential UAF when ddgst mismatch

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux27 Tem 2026

  • CVE-2026-64536
    32İzleyin

    staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux27 Tem 2026

  • CVE-2026-14856
    25İzleyin

    Stored Cross-Site Scripting (XSS) in TastyIgniter Media Manager

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    media manager · tastyigniter27 Tem 2026

  • CVE-2026-41608
    30İzleyin

    Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport

    YüksekCVSS 7,5İstismar yokEPSS %1

    apache · thrift27 Tem 2026

  • CVE-2026-43871
    34İzleyin

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit

    YüksekCVSS 8,7İstismar yokEPSS %1

    apache · thrift27 Tem 2026

  • CVE-2026-48144
    36İzleyin

    Apache Thrift: c_glib TLS Client Missing Hostname Verification

    KritikCVSS 9,1İstismar yokEPSS %0

    apache · thrift27 Tem 2026

  • CVE-2026-48145
    32İzleyin

    Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache · thrift27 Tem 2026

  • CVE-2026-48586
    34İzleyin

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit

    YüksekCVSS 8,7İstismar yokEPSS %1

    apache · thrift27 Tem 2026

  • CVE-2026-49158
    30İzleyin

    Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb

    YüksekCVSS 7,5İstismar yokEPSS %1

    apache · thrift27 Tem 2026

  • CVE-2026-55968
    34İzleyin

    Apache Thrift: Node.js quadratic-time DoS in server receive transports

    YüksekCVSS 8,7İstismar yokEPSS %1

    apache · thrift27 Tem 2026

  • CVE-2026-55969
    34İzleyin

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()

    YüksekCVSS 8,7İstismar yokEPSS %1

    apache · thrift27 Tem 2026

  • CVE-2026-55971
    37İzleyin

    Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()

    KritikCVSS 9,3İstismar yokEPSS %0

    apache · thrift27 Tem 2026

  • CVE-2026-58389
    34İzleyin

    Apache Thrift: Rust binary protocol non-strict path missing string size limit

    YüksekCVSS 8,7İstismar yokEPSS %1

    apache · thrift27 Tem 2026

  • CVE-2026-58662
    34İzleyin

    Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass

    YüksekCVSS 8,7İstismar yokEPSS %1

    apache · thrift27 Tem 2026

  • CVE-2026-12989
    34İzleyin

    Multiple vulnerabilities in Ghost Robotics' Vision 60

    YüksekCVSS 8,7İstismar yokEPSS %0

    ghost robotics · vision 6027 Tem 2026

  • CVE-2026-12990
    30İzleyin

    Multiple vulnerabilities in Ghost Robotics' Vision 60

    YüksekCVSS 7,7İstismar yokEPSS %0

    ghost robotics · vision 6027 Tem 2026

  • CVE-2026-12991
    34İzleyin

    Multiple vulnerabilities in Ghost Robotics' Vision 60

    YüksekCVSS 8,7İstismar yokEPSS %0

    ghost robotics · vision 6027 Tem 2026

  • CVE-2026-59686
    34İzleyin

    Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface

    YüksekCVSS 8,4İstismar yokEPSS %1

    progress · connection manager for objectscale27 Tem 2026

  • CVE-2026-59687
    34İzleyin

    Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface

    YüksekCVSS 8,4İstismar yokEPSS %1

    progress · connection manager for objectscale27 Tem 2026

  • CVE-2026-59688
    34İzleyin

    Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality

    YüksekCVSS 8,4İstismar yokEPSS %1

    progress · connection manager for objectscale27 Tem 2026

  • CVE-2026-59689
    32İzleyin

    Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root

    YüksekCVSS 8,0İstismar yokEPSS %0

    progress · connection manager for objectscale27 Tem 2026

  • CVE-2026-59690
    32İzleyin

    Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via

    YüksekCVSS 8,0İstismar yokEPSS %0

    progress · connection manager for objectscale27 Tem 2026

  • CVE-2026-17523
    31İzleyin

    can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux kernel27 Tem 2026

  • CVE-2026-65766
    36İzleyin

    Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1

    KritikCVSS 9,2İstismar yokEPSS %0

    joomshaper.com · sp page builder extension for joomla27 Tem 2026

  • CVE-2026-65876
    36İzleyin

    Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0

    KritikCVSS 9,2İstismar yokEPSS %0

    joomshaper.com · sp page builder extension for joomla27 Tem 2026

  • CVE-2026-65877
    32İzleyin

    Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1

    YüksekCVSS 8,2İstismar yokEPSS %0

    joomshaper.com · sp page builder extension for joomla27 Tem 2026

  • CVE-2026-65878
    33İzleyin

    Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1

    YüksekCVSS 8,3İstismar yokEPSS %0

    joomshaper.com · sp page builder extension for joomla27 Tem 2026

  • CVE-2026-65879
    39İzleyin

    Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1

    KritikCVSS 9,8İstismar yokEPSS %0

    joomshaper.com · sp page builder extension for joomla27 Tem 2026

  • CVE-2026-59527
    37İzleyin

    WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    romancode · mapsvg27 Tem 2026

  • CVE-2026-59528
    30İzleyin

    WordPress ShipTime: Discounted Shipping Rates plugin <= 1.1.1 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    shiptime · shiptime: discounted shipping rates27 Tem 2026

  • CVE-2026-59529
    30İzleyin

    WordPress Ebook Store plugin <= 6.19 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    motov.net · ebook store27 Tem 2026

  • CVE-2026-59530
    30İzleyin

    WordPress Stripe For WooCommerce plugin <= 4.0.7 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    payment plugins · stripe for woocommerce27 Tem 2026

  • CVE-2026-59531
    30İzleyin

    WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    anh tran · falcon – wordpress optimizations & tweaks27 Tem 2026

  • CVE-2026-59532
    30İzleyin

    WordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    magepeopleteam · booking and rental manager27 Tem 2026

  • CVE-2026-59533
    37İzleyin

    WordPress Relevanssi Light plugin <= 1.2.2 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    christoph vielgrader · relevanssi light27 Tem 2026

  • CVE-2026-59534
    30İzleyin

    WordPress Post My CF7 Form plugin <= 6.2.0 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    aurovrata venet · post my cf7 form27 Tem 2026

  • CVE-2026-59535
    29İzleyin

    WordPress Thrive Product Manager plugin <= 10.9.2 - Broken Access Control vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    thrive themes coupon · thrive product manager27 Tem 2026

  • CVE-2026-59536
    30İzleyin

    WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    cocart headless · cocart – headless ecommerce27 Tem 2026

  • CVE-2026-59537
    30İzleyin

    WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.10.22 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    sender · sender – newsletter, sms and email marketing automation for woocommerce27 Tem 2026

  • CVE-2026-59538
    37İzleyin

    WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    ruben garcia · gamipress27 Tem 2026

  • CVE-2026-59539
    30İzleyin

    WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    cozmoslabs · paid member subscriptions27 Tem 2026

  • CVE-2026-59546
    29İzleyin

    WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability

    YüksekCVSS 7,4İstismar yokEPSS %0

    john darrel · hide my wp ghost27 Tem 2026

  • CVE-2026-59548
    30İzleyin

    WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    byteflows · byteflows travel &amp; hotel booking27 Tem 2026

  • CVE-2026-59549
    37İzleyin

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    rtcamp · rtmedia for wordpress, buddypress and bbpress27 Tem 2026

  • CVE-2026-59550
    37İzleyin

    WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    strategy11 team · awp classifieds27 Tem 2026

  • CVE-2026-59551
    34İzleyin

    WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    rtcamp · rtmedia for wordpress, buddypress and bbpress27 Tem 2026

  • CVE-2026-59552
    28İzleyin

    WordPress 3D Flipbook PDF Viewer & Embedder plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    shahadat hossain · 3d flipbook pdf viewer &amp; embedder27 Tem 2026

  • CVE-2026-59553
    28İzleyin

    WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    rextheme · product feed manager27 Tem 2026

  • CVE-2026-59556
    28İzleyin

    WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.11 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    acowebs · dynamic pricing with discount rules for woocommerce27 Tem 2026

  • CVE-2026-59558
    28İzleyin

    WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    wpdevelop · booking calendar27 Tem 2026

  • CVE-2026-66050
    34İzleyin

    NitroShare Desktop 0.3.4 Path Traversal via LAN File Transfer Server

    YüksekCVSS 8,7İstismar yokEPSS %1

    nitroshare · nitroshare-desktop27 Tem 2026

  • CVE-2026-66427
    30İzleyin

    WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    jgwhite33 · wp google review slider27 Tem 2026

  • CVE-2026-16812
    70Bu hafta

    VeloCloud Orchestrator OS Command Injection

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %1

    arista · velocloud orchestrator27 Tem 2026

  • CVE-2026-54890
    32İzleyin

    BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

    YüksekCVSS 8,2İstismar yokEPSS %0

    erlang · erlang\/otp27 Tem 2026

  • CVE-2026-55953
    36İzleyin

    TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

    KritikCVSS 9,1İstismar yokEPSS %0

    erlang · erlang\/otp27 Tem 2026

  • CVE-2026-58227
    34İzleyin

    TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

    YüksekCVSS 8,7İstismar yokEPSS %0

    erlang · erlang\/otp27 Tem 2026

  • CVE-2026-59250
    33İzleyin

    Megaco flex scanner buffer overflow via oversized property parm name

    YüksekCVSS 8,3İstismar yokEPSS %0

    erlang · otp27 Tem 2026

  • CVE-2026-59251
    34İzleyin

    Denial of service via exponential certificate policy tree growth in path validation

    YüksekCVSS 8,7İstismar yokEPSS %0

    erlang · erlang\/otp27 Tem 2026

  • CVE-2026-66395
    37İzleyin

    SiYuan Desktop before v3.7.2 Reflected XSS to RCE via siyuan Protocol

    KritikCVSS 9,4İstismar yokEPSS %0

    siyuan-note · siyuan27 Tem 2026

  • CVE-2026-66396
    37İzleyin

    SiYuan before v3.7.2 Stored XSS to RCE via title-img IAL

    KritikCVSS 9,3İstismar yokEPSS %0

    siyuan-note · siyuan27 Tem 2026

  • CVE-2026-66397
    34İzleyin

    phpMyFAQ before 4.1.6 Path Traversal via category image deletion

    YüksekCVSS 8,6İstismar yokEPSS %0

    thorsten · phpmyfaq27 Tem 2026

  • CVE-2026-66398
    37İzleyin

    phpMyFAQ before 4.1.6 Remote Code Execution via Configuration API

    KritikCVSS 9,4İstismar yokEPSS %0

    thorsten · phpmyfaq27 Tem 2026

  • CVE-2026-66399
    34İzleyin

    phpMyFAQ before 4.1.6 Privilege Escalation via Group Membership

    YüksekCVSS 8,5İstismar yokEPSS %0

    thorsten · phpmyfaq27 Tem 2026