Yayın tarihine göre
Temmuz 2026: sömürülen ve yeni ciddi CVE kayıtları
1.299 kayıt · 21 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 5 / 13
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-17191İstismar yok | VeloCloud Orchestrator Flow Metrics API SQL Injectionarista networks · velocloud orchestrator on-prem · CWE-89 | Yüksek8,5 | — | %0,3 | 27 Tem 2026 |
31İzleyin | CVE-2026-24252İstismar yok | NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection.nvidia · nemo · CWE-78 | Yüksek7,8 | — | %1,4 | 27 Tem 2026 |
96Hemen | CVE-2026-63077Silahlaştırılmış | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocoljetbrains · teamcity · CWE-502 | Kritik9,8 | KEV | %89,5 | 27 Tem 2026 |
34İzleyin | CVE-2026-66729Kavram kanıtı | facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parserboazsegev · facil.io · CWE-125 | Yüksek8,7 | — | %0,7 | 27 Tem 2026 |
34İzleyin | CVE-2026-66730Kavram kanıtı | facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parserboazsegev · facil.io · CWE-835 | Yüksek8,7 | — | %0,7 | 27 Tem 2026 |
34İzleyin | CVE-2026-66731Kavram kanıtı | facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoSboazsegev · facil.io · CWE-125 | Yüksek8,7 | — | %0,7 | 27 Tem 2026 |
36İzleyin | CVE-2026-17552İstismar yok | Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in callrrwo · plack::app::prerender · CWE-918 | Kritik9,1 | — | %0,5 | 27 Tem 2026 |
35İzleyin | CVE-2026-17568İstismar yok | Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated non-administrative user holdevolutions · devolutions server · CWE-863 | Yüksek8,8 | — | %0,4 | 27 Tem 2026 |
36İzleyin | CVE-2026-45623İstismar yok | PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS commentspostcss · postcss · CWE-22 | Kritik9,1 | — | %0,6 | 27 Tem 2026 |
41Planlayın | CVE-2026-48030Kavram kanıtı | Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)pheditor · pheditor · CWE-78 | Kritik9,9 | — | %7,5 | 27 Tem 2026 |
35İzleyin | CVE-2026-54540İstismar yok | Authenticated terminal command whitelist bypass in Pheditorpheditor · pheditor · CWE-78 | Yüksek8,8 | — | %0,7 | 27 Tem 2026 |
35İzleyin | CVE-2026-55578İstismar yok | Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injectionpheditor · pheditor · CWE-78 | Yüksek8,8 | — | %0,6 | 27 Tem 2026 |
39İzleyin | CVE-2026-55579Kavram kanıtı | Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromisepheditor · pheditor · CWE-798 | Kritik9,8 | — | %0,7 | 27 Tem 2026 |
34İzleyin | CVE-2026-59239İstismar yok | Stored XSS in Prospero Flow CRM email body allows administrator account takeoverroskus · prospero flow crm · CWE-79 | Yüksek8,6 | — | %0,6 | 27 Tem 2026 |
32İzleyin | CVE-2026-64641İstismar yok | Next.js: Denial of Service in App Router using Server Actionsvercel · next.js · CWE-834 | Yüksek8,2 | — | %0,8 | 27 Tem 2026 |
33İzleyin | CVE-2026-64642İstismar yok | Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single localevercel · next.js · CWE-285 | Yüksek8,3 | — | %0,6 | 27 Tem 2026 |
39İzleyin | CVE-2026-61511Kavram kanıtı | vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.phpvbulletin · vbulletin · CWE-95 | Kritik9,3 | — | %5,6 | 27 Tem 2026 |
33İzleyin | CVE-2026-64645İstismar yok | Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostnamevercel · next.js · CWE-601 | Yüksek8,3 | — | %0,4 | 27 Tem 2026 |
28İzleyin | CVE-2026-66028İstismar yok | Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Emailcreativeitem · ekushey project manager crm · CWE-303 | Yüksek7,1 | — | %0,6 | 27 Tem 2026 |
34İzleyin | CVE-2025-59172İstismar yok | Improper Neutralization of Special Elements used in an OS Command Vulnerabilityericsson · packet core controller (pcc) · CWE-78 | Yüksek8,5 | — | %0,2 | 27 Tem 2026 |
30İzleyin | CVE-2026-12383İstismar yok | Eda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dnred hat · red hat ansible automation platform 2.5 for rhel 8 · CWE-345 | Yüksek7,5 | — | %0,2 | 27 Tem 2026 |
28İzleyin | CVE-2026-66759İstismar yok | Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns imagesgimp · gimp · CWE-125 | Yüksek7,1 | — | %0,3 | 27 Tem 2026 |
68Bu hafta | CVE-2026-42016Silahlaştırılmış | Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalationjfrog · artifactory · CWE-863 | Yüksek8,8 | KEV | %8,6 | 27 Tem 2026 |
35İzleyin | CVE-2026-42017İstismar yok | Privilege escalation via JFrog Worker event token exposurejfrog · artifactory · CWE-200 | Yüksek8,8 | — | %0,5 | 27 Tem 2026 |
34İzleyin | CVE-2026-56747İstismar yok | Code Injection in JSON Pointer Processing Component in Cribl Streamcribl · cribl stream · CWE-94 | Yüksek8,7 | — | %0,6 | 27 Tem 2026 |
34İzleyin | CVE-2026-56748İstismar yok | Authenticated RCE via Symlink Following in Cribl Stream Pack Git Importcribl · cribl stream · CWE-61 | Yüksek8,7 | — | %0,9 | 27 Tem 2026 |
24İzleyin | CVE-2026-64648İstismar yok | Next.js: Response Body Cache Confusion for Requests Containing Bodiesvercel · next.js · CWE-524 | Orta6,0 | — | %0,3 | 27 Tem 2026 |
33İzleyin | CVE-2026-64649İstismar yok | Next.js: Server-Side Request Forgery in Server Actions on Custom Serversvercel · next.js · CWE-918 | Yüksek8,3 | — | %0,4 | 27 Tem 2026 |
35İzleyin | CVE-2026-65616Kavram kanıtı | Potential privilege escalation to JFrog administrator privilegesjfrog · artifactory · CWE-347 | Yüksek8,8 | — | %0,3 | 27 Tem 2026 |
35İzleyin | CVE-2026-65617İstismar yok | Potential remote code execution on an Artifactory package service container.jfrog · artifactory · CWE-502 | Yüksek8,8 | — | %0,6 | 27 Tem 2026 |
35İzleyin | CVE-2026-65921İstismar yok | Potential path traversal leading to unauthorized file writesjfrog · artifactory · CWE-22 | Yüksek8,8 | — | %0,5 | 27 Tem 2026 |
35İzleyin | CVE-2026-66014İstismar yok | Potential authentication bypass leading to privilege escalation in Artifactoryjfrog · artifactory · CWE-287 | Yüksek8,8 | — | %0,6 | 27 Tem 2026 |
28İzleyin | CVE-2026-66015İstismar yok | JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.jfrog · artifactory · CWE-269 | Yüksek7,2 | — | %0,5 | 27 Tem 2026 |
36İzleyin | CVE-2025-50455Kavram kanıtı | SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1.CWE-89 | Kritik9,1 | — | %1,1 | 27 Tem 2026 |
37İzleyin | CVE-2026-66394İstismar yok | SiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer Bypasssiyuan-note · siyuan · CWE-79 | Kritik9,3 | — | %0,3 | 27 Tem 2026 |
30İzleyin | CVE-2026-28896İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Yüksek7,7 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-28911İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,4 | 27 Tem 2026 |
31İzleyin | CVE-2026-28912Kavram kanıtı | A logic issue was addressed with improved restrictions.apple · macos · CWE-693 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
28İzleyin | CVE-2026-28926İstismar yok | A race condition was addressed with improved state handling.apple · macos · CWE-362 | Yüksek7,0 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-28928İstismar yok | A use after free issue was addressed with improved memory management.apple · ipados · CWE-416 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
35İzleyin | CVE-2026-28931İstismar yok | A buffer overflow was addressed with improved bounds checking.apple · ipados · CWE-120 | Yüksek8,8 | — | %0,4 | 27 Tem 2026 |
28İzleyin | CVE-2026-28945İstismar yok | A permissions issue was addressed with additional sandbox restrictions.apple · macos · CWE-284 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
34İzleyin | CVE-2026-28973İstismar yok | An integer overflow was addressed with improved input validation.apple · ipados · CWE-190 | Yüksek8,6 | — | %0,1 | 27 Tem 2026 |
31İzleyin | CVE-2026-28981İstismar yok | A buffer overflow was addressed with improved bounds checking.apple · macos · CWE-120 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-28982İstismar yok | A race condition was addressed with improved locking.apple · macos · CWE-362 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-39873İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
31İzleyin | CVE-2026-39874İstismar yok | A permissions issue was addressed with additional restrictions.apple · macos · CWE-276 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
31İzleyin | CVE-2026-39875Kavram kanıtı | A permissions issue was addressed with additional restrictions.apple · macos · CWE-276 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
31İzleyin | CVE-2026-39877İstismar yok | A memory corruption issue was addressed with improved memory handling.apple · macos · CWE-119 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
28İzleyin | CVE-2026-43672İstismar yok | An authorization issue was addressed with improved state management.apple · macos · CWE-863 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
31İzleyin | CVE-2026-43673İstismar yok | The issue was addressed with improved memory handling.apple · ipados · CWE-119 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
28İzleyin | CVE-2026-43681İstismar yok | A buffer overflow was addressed with improved bounds checking.apple · macos · CWE-120 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43682Kavram kanıtı | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,7 | 27 Tem 2026 |
28İzleyin | CVE-2026-43693İstismar yok | A race condition was addressed with improved state handling.apple · macos · CWE-362 | Yüksek7,0 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43694İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
31İzleyin | CVE-2026-43698İstismar yok | An injection issue was addressed with improved validation.apple · macos · CWE-88 | Yüksek7,8 | — | %0,2 | 27 Tem 2026 |
39İzleyin | CVE-2026-43710İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
31İzleyin | CVE-2026-43711İstismar yok | A memory corruption issue was addressed with improved memory handling.apple · ipados · CWE-119 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
31İzleyin | CVE-2026-43723İstismar yok | A path handling issue was addressed with improved validation.apple · ipados · CWE-22 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
30İzleyin | CVE-2026-43728İstismar yok | This issue was addressed through improved state management.apple · macos · CWE-362 | Yüksek7,5 | — | %0,2 | 27 Tem 2026 |
31İzleyin | CVE-2026-43729İstismar yok | The issue was addressed with improved memory handling.apple · ipados · CWE-119 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43730İstismar yok | A permissions issue was addressed with additional restrictions.apple · ipados · CWE-200 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
31İzleyin | CVE-2026-43733İstismar yok | The issue was addressed with improved memory handling.apple · ipados · CWE-119 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
28İzleyin | CVE-2026-43747İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43748İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-787 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
31İzleyin | CVE-2026-43749İstismar yok | A parsing issue in the handling of directory paths was addressed with improved path validation.apple · macos · CWE-22 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43750İstismar yok | A buffer overflow was addressed with improved bounds checking.apple · macos · CWE-120 | Kritik9,8 | — | %0,7 | 27 Tem 2026 |
28İzleyin | CVE-2026-43755İstismar yok | A race condition was addressed with improved state management.apple · macos · CWE-362 | Yüksek7,0 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43757İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
34İzleyin | CVE-2026-43760İstismar yok | An access issue was addressed with improved access restrictions.apple · macos · CWE-284 | Yüksek8,6 | — | %0,4 | 27 Tem 2026 |
39İzleyin | CVE-2026-43764İstismar yok | An integer overflow was addressed with improved input validation.apple · macos · CWE-190 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-43769İstismar yok | An integer overflow was addressed with improved input validation.apple · ipados · CWE-190 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
28İzleyin | CVE-2026-43771İstismar yok | A stack overflow was addressed with improved input validation.apple · macos · CWE-121 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
32İzleyin | CVE-2026-43772İstismar yok | A path traversal issue was addressed with improved input validation.apple · macos · CWE-22 | Yüksek8,2 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43773İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
31İzleyin | CVE-2026-43776İstismar yok | A buffer overflow was addressed with improved bounds checking.apple · ipados · CWE-120 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
30İzleyin | CVE-2026-43777İstismar yok | This issue was addressed with improved input validation.apple · macos · CWE-20 | Yüksek7,5 | — | %0,6 | 27 Tem 2026 |
39İzleyin | CVE-2026-43778İstismar yok | A use after free issue was addressed with improved memory management.apple · ipados · CWE-416 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
39İzleyin | CVE-2026-43779İstismar yok | A logic issue was addressed with improved restrictions.apple · macos · CWE-284 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
31İzleyin | CVE-2026-43780İstismar yok | An integer overflow was addressed with improved input validation.apple · ipados · CWE-190 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43793İstismar yok | An issue existed in the handling of environment variables.apple · macos · CWE-20 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-43799İstismar yok | A use after free issue was addressed with improved memory management.apple · ipados · CWE-416 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
39İzleyin | CVE-2026-43802İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-787 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
39İzleyin | CVE-2026-43803İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Kritik9,8 | — | %0,8 | 27 Tem 2026 |
39İzleyin | CVE-2026-43805Kavram kanıtı | A race condition was addressed with improved state handling.apple · ipados · CWE-362 | Kritik9,8 | — | %0,4 | 27 Tem 2026 |
39İzleyin | CVE-2026-43807İstismar yok | A buffer overflow was addressed with improved bounds checking.apple · ipados · CWE-120 | Kritik9,8 | — | %0,7 | 27 Tem 2026 |
39İzleyin | CVE-2026-43809İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
39İzleyin | CVE-2026-43810İstismar yok | The issue was addressed with improved memory handling.apple · ipados · CWE-119 | Kritik9,8 | — | %0,8 | 27 Tem 2026 |
39İzleyin | CVE-2026-43812İstismar yok | A use after free issue was addressed with improved memory management.apple · ipados · CWE-416 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
28İzleyin | CVE-2026-43813Kavram kanıtı | A validation issue was addressed with improved input sanitization.apple · ipados · CWE-20 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43814İstismar yok | A use after free issue was addressed with improved memory management.apple · ipados · CWE-416 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
35İzleyin | CVE-2026-43818İstismar yok | An integer overflow was addressed with improved input validation.apple · ipados · CWE-190 | Yüksek8,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-43822İstismar yok | A use after free issue was addressed with improved memory management.apple · ipados · CWE-416 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
29İzleyin | CVE-2026-64550İstismar yok | net: qualcomm: rmnet: validate MAP frame length before ingress parsinglinux · linux | Yüksek7,3 | — | %0,1 | 27 Tem 2026 |
35İzleyin | CVE-2026-64555İstismar yok | KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()linux · linux | Yüksek8,8 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-64691İstismar yok | A buffer overflow was addressed with improved size validation.apple · macos · CWE-120 | Kritik9,8 | — | %0,4 | 27 Tem 2026 |
28İzleyin | CVE-2026-64692İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · ipados · CWE-125 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-64694İstismar yok | An integer overflow was addressed with improved input validation.apple · macos · CWE-190 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-64695İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,7 | 27 Tem 2026 |
39İzleyin | CVE-2026-64696İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,7 | 27 Tem 2026 |
- CVE-2026-1719134İzleyin
VeloCloud Orchestrator Flow Metrics API SQL Injection
YüksekCVSS 8,5İstismar yokEPSS %0arista networks · velocloud orchestrator on-prem27 Tem 2026
- CVE-2026-2425231İzleyin
NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection.
YüksekCVSS 7,8İstismar yokEPSS %1nvidia · nemo27 Tem 2026
- CVE-2026-6307796Hemen
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %89jetbrains · teamcity27 Tem 2026
- CVE-2026-6672934İzleyin
facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser
YüksekCVSS 8,7Kavram kanıtıEPSS %0boazsegev · facil.io27 Tem 2026
- CVE-2026-6673034İzleyin
facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser
YüksekCVSS 8,7Kavram kanıtıEPSS %0boazsegev · facil.io27 Tem 2026
- CVE-2026-6673134İzleyin
facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS
YüksekCVSS 8,7Kavram kanıtıEPSS %0boazsegev · facil.io27 Tem 2026
- CVE-2026-1755236İzleyin
Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call
KritikCVSS 9,1İstismar yokEPSS %0rrwo · plack::app::prerender27 Tem 2026
- CVE-2026-1756835İzleyin
Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated non-administrative user hol
YüksekCVSS 8,8İstismar yokEPSS %0devolutions · devolutions server27 Tem 2026
- CVE-2026-4562336İzleyin
PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
KritikCVSS 9,1İstismar yokEPSS %0postcss · postcss27 Tem 2026
- CVE-2026-4803041Planlayın
Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)
KritikCVSS 9,9Kavram kanıtıEPSS %7pheditor · pheditor27 Tem 2026
- CVE-2026-5454035İzleyin
Authenticated terminal command whitelist bypass in Pheditor
YüksekCVSS 8,8İstismar yokEPSS %0pheditor · pheditor27 Tem 2026
- CVE-2026-5557835İzleyin
Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection
YüksekCVSS 8,8İstismar yokEPSS %0pheditor · pheditor27 Tem 2026
- CVE-2026-5557939İzleyin
Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise
KritikCVSS 9,8Kavram kanıtıEPSS %0pheditor · pheditor27 Tem 2026
- CVE-2026-5923934İzleyin
Stored XSS in Prospero Flow CRM email body allows administrator account takeover
YüksekCVSS 8,6İstismar yokEPSS %0roskus · prospero flow crm27 Tem 2026
- CVE-2026-6464132İzleyin
Next.js: Denial of Service in App Router using Server Actions
YüksekCVSS 8,2İstismar yokEPSS %0vercel · next.js27 Tem 2026
- CVE-2026-6464233İzleyin
Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
YüksekCVSS 8,3İstismar yokEPSS %0vercel · next.js27 Tem 2026
- CVE-2026-6151139İzleyin
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
KritikCVSS 9,3Kavram kanıtıEPSS %5vbulletin · vbulletin27 Tem 2026
- CVE-2026-6464533İzleyin
Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
YüksekCVSS 8,3İstismar yokEPSS %0vercel · next.js27 Tem 2026
- CVE-2026-6602828İzleyin
Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email
YüksekCVSS 7,1İstismar yokEPSS %0creativeitem · ekushey project manager crm27 Tem 2026
- CVE-2025-5917234İzleyin
Improper Neutralization of Special Elements used in an OS Command Vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0ericsson · packet core controller (pcc)27 Tem 2026
- CVE-2026-1238330İzleyin
Eda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dn
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat ansible automation platform 2.5 for rhel 827 Tem 2026
- CVE-2026-6675928İzleyin
Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images
YüksekCVSS 7,1İstismar yokEPSS %0gimp · gimp27 Tem 2026
- CVE-2026-4201668Bu hafta
Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %8jfrog · artifactory27 Tem 2026
- CVE-2026-4201735İzleyin
Privilege escalation via JFrog Worker event token exposure
YüksekCVSS 8,8İstismar yokEPSS %0jfrog · artifactory27 Tem 2026
- CVE-2026-5674734İzleyin
Code Injection in JSON Pointer Processing Component in Cribl Stream
YüksekCVSS 8,7İstismar yokEPSS %0cribl · cribl stream27 Tem 2026
- CVE-2026-5674834İzleyin
Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import
YüksekCVSS 8,7İstismar yokEPSS %0cribl · cribl stream27 Tem 2026
- CVE-2026-6464824İzleyin
Next.js: Response Body Cache Confusion for Requests Containing Bodies
OrtaCVSS 6,0İstismar yokEPSS %0vercel · next.js27 Tem 2026
- CVE-2026-6464933İzleyin
Next.js: Server-Side Request Forgery in Server Actions on Custom Servers
YüksekCVSS 8,3İstismar yokEPSS %0vercel · next.js27 Tem 2026
- CVE-2026-6561635İzleyin
Potential privilege escalation to JFrog administrator privileges
YüksekCVSS 8,8Kavram kanıtıEPSS %0jfrog · artifactory27 Tem 2026
- CVE-2026-6561735İzleyin
Potential remote code execution on an Artifactory package service container.
YüksekCVSS 8,8İstismar yokEPSS %0jfrog · artifactory27 Tem 2026
- CVE-2026-6592135İzleyin
Potential path traversal leading to unauthorized file writes
YüksekCVSS 8,8İstismar yokEPSS %0jfrog · artifactory27 Tem 2026
- CVE-2026-6601435İzleyin
Potential authentication bypass leading to privilege escalation in Artifactory
YüksekCVSS 8,8İstismar yokEPSS %0jfrog · artifactory27 Tem 2026
- CVE-2026-6601528İzleyin
JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.
YüksekCVSS 7,2İstismar yokEPSS %0jfrog · artifactory27 Tem 2026
- CVE-2025-5045536İzleyin
SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1.
KritikCVSS 9,1Kavram kanıtıEPSS %127 Tem 2026
- CVE-2026-6639437İzleyin
SiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer Bypass
KritikCVSS 9,3İstismar yokEPSS %0siyuan-note · siyuan27 Tem 2026
- CVE-2026-2889630İzleyin
The issue was addressed with improved memory handling.
YüksekCVSS 7,7İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-2891139İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-2891231İzleyin
A logic issue was addressed with improved restrictions.
YüksekCVSS 7,8Kavram kanıtıEPSS %0apple · macos27 Tem 2026
- CVE-2026-2892628İzleyin
A race condition was addressed with improved state handling.
YüksekCVSS 7,0İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-2892839İzleyin
A use after free issue was addressed with improved memory management.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-2893135İzleyin
A buffer overflow was addressed with improved bounds checking.
YüksekCVSS 8,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-2894528İzleyin
A permissions issue was addressed with additional sandbox restrictions.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-2897334İzleyin
An integer overflow was addressed with improved input validation.
YüksekCVSS 8,6İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-2898131İzleyin
A buffer overflow was addressed with improved bounds checking.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-2898239İzleyin
A race condition was addressed with improved locking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-3987339İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-3987431İzleyin
A permissions issue was addressed with additional restrictions.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-3987531İzleyin
A permissions issue was addressed with additional restrictions.
YüksekCVSS 7,8Kavram kanıtıEPSS %0apple · macos27 Tem 2026
- CVE-2026-3987731İzleyin
A memory corruption issue was addressed with improved memory handling.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4367228İzleyin
An authorization issue was addressed with improved state management.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4367331İzleyin
The issue was addressed with improved memory handling.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4368128İzleyin
A buffer overflow was addressed with improved bounds checking.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4368239İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8Kavram kanıtıEPSS %0apple · macos27 Tem 2026
- CVE-2026-4369328İzleyin
A race condition was addressed with improved state handling.
YüksekCVSS 7,0İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4369439İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4369831İzleyin
An injection issue was addressed with improved validation.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4371039İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4371131İzleyin
A memory corruption issue was addressed with improved memory handling.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4372331İzleyin
A path handling issue was addressed with improved validation.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4372830İzleyin
This issue was addressed through improved state management.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4372931İzleyin
The issue was addressed with improved memory handling.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4373039İzleyin
A permissions issue was addressed with additional restrictions.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4373331İzleyin
The issue was addressed with improved memory handling.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4374728İzleyin
An out-of-bounds read was addressed with improved bounds checking.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4374839İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4374931İzleyin
A parsing issue in the handling of directory paths was addressed with improved path validation.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4375039İzleyin
A buffer overflow was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4375528İzleyin
A race condition was addressed with improved state management.
YüksekCVSS 7,0İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4375739İzleyin
An out-of-bounds read was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4376034İzleyin
An access issue was addressed with improved access restrictions.
YüksekCVSS 8,6İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4376439İzleyin
An integer overflow was addressed with improved input validation.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4376939İzleyin
An integer overflow was addressed with improved input validation.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4377128İzleyin
A stack overflow was addressed with improved input validation.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4377232İzleyin
A path traversal issue was addressed with improved input validation.
YüksekCVSS 8,2İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4377339İzleyin
An out-of-bounds read was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4377631İzleyin
A buffer overflow was addressed with improved bounds checking.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4377730İzleyin
This issue was addressed with improved input validation.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4377839İzleyin
A use after free issue was addressed with improved memory management.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4377939İzleyin
A logic issue was addressed with improved restrictions.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4378031İzleyin
An integer overflow was addressed with improved input validation.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4379339İzleyin
An issue existed in the handling of environment variables.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4379939İzleyin
A use after free issue was addressed with improved memory management.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4380239İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4380339İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4380539İzleyin
A race condition was addressed with improved state handling.
KritikCVSS 9,8Kavram kanıtıEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4380739İzleyin
A buffer overflow was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4380939İzleyin
An out-of-bounds read was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4381039İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4381239İzleyin
A use after free issue was addressed with improved memory management.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4381328İzleyin
A validation issue was addressed with improved input sanitization.
YüksekCVSS 7,1Kavram kanıtıEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4381439İzleyin
A use after free issue was addressed with improved memory management.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4381835İzleyin
An integer overflow was addressed with improved input validation.
YüksekCVSS 8,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-4382239İzleyin
A use after free issue was addressed with improved memory management.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-6455029İzleyin
net: qualcomm: rmnet: validate MAP frame length before ingress parsing
YüksekCVSS 7,3İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6455535İzleyin
KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()
YüksekCVSS 8,8İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6469139İzleyin
A buffer overflow was addressed with improved size validation.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6469228İzleyin
An out-of-bounds read was addressed with improved bounds checking.
YüksekCVSS 7,1İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-6469439İzleyin
An integer overflow was addressed with improved input validation.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6469539İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6469639İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026