Yayın tarihine göre
Temmuz 2026: sömürülen ve yeni ciddi CVE kayıtları
1.298 kayıt · 21 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 6 / 13
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-66015İstismar yok | JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.jfrog · artifactory · CWE-269 | Yüksek7,2 | — | %0,5 | 27 Tem 2026 |
30İzleyin | CVE-2026-28896İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Yüksek7,7 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-28911İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,4 | 27 Tem 2026 |
31İzleyin | CVE-2026-28912Kavram kanıtı | A logic issue was addressed with improved restrictions.apple · macos · CWE-693 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
28İzleyin | CVE-2026-28926İstismar yok | A race condition was addressed with improved state handling.apple · macos · CWE-362 | Yüksek7,0 | — | %0,1 | 27 Tem 2026 |
28İzleyin | CVE-2026-28945İstismar yok | A permissions issue was addressed with additional sandbox restrictions.apple · macos · CWE-284 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
31İzleyin | CVE-2026-28981İstismar yok | A buffer overflow was addressed with improved bounds checking.apple · macos · CWE-120 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-28982İstismar yok | A race condition was addressed with improved locking.apple · macos · CWE-362 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-39873İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
31İzleyin | CVE-2026-39874İstismar yok | A permissions issue was addressed with additional restrictions.apple · macos · CWE-276 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
31İzleyin | CVE-2026-39875Kavram kanıtı | A permissions issue was addressed with additional restrictions.apple · macos · CWE-276 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
31İzleyin | CVE-2026-39877İstismar yok | A memory corruption issue was addressed with improved memory handling.apple · macos · CWE-119 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
28İzleyin | CVE-2026-43672İstismar yok | An authorization issue was addressed with improved state management.apple · macos · CWE-863 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
28İzleyin | CVE-2026-43681İstismar yok | A buffer overflow was addressed with improved bounds checking.apple · macos · CWE-120 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43682Kavram kanıtı | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,7 | 27 Tem 2026 |
28İzleyin | CVE-2026-43693İstismar yok | A race condition was addressed with improved state handling.apple · macos · CWE-362 | Yüksek7,0 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43694İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
31İzleyin | CVE-2026-43698İstismar yok | An injection issue was addressed with improved validation.apple · macos · CWE-88 | Yüksek7,8 | — | %0,2 | 27 Tem 2026 |
39İzleyin | CVE-2026-43710İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
30İzleyin | CVE-2026-43728İstismar yok | This issue was addressed through improved state management.apple · macos · CWE-362 | Yüksek7,5 | — | %0,2 | 27 Tem 2026 |
28İzleyin | CVE-2026-43747İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43748İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-787 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
31İzleyin | CVE-2026-43749İstismar yok | A parsing issue in the handling of directory paths was addressed with improved path validation.apple · macos · CWE-22 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43750İstismar yok | A buffer overflow was addressed with improved bounds checking.apple · macos · CWE-120 | Kritik9,8 | — | %0,7 | 27 Tem 2026 |
28İzleyin | CVE-2026-43755İstismar yok | A race condition was addressed with improved state management.apple · macos · CWE-362 | Yüksek7,0 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43757İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
34İzleyin | CVE-2026-43760İstismar yok | An access issue was addressed with improved access restrictions.apple · macos · CWE-284 | Yüksek8,6 | — | %0,4 | 27 Tem 2026 |
39İzleyin | CVE-2026-43764İstismar yok | An integer overflow was addressed with improved input validation.apple · macos · CWE-190 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
28İzleyin | CVE-2026-43771İstismar yok | A stack overflow was addressed with improved input validation.apple · macos · CWE-121 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
32İzleyin | CVE-2026-43772İstismar yok | A path traversal issue was addressed with improved input validation.apple · macos · CWE-22 | Yüksek8,2 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-43773İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
30İzleyin | CVE-2026-43777İstismar yok | This issue was addressed with improved input validation.apple · macos · CWE-20 | Yüksek7,5 | — | %0,6 | 27 Tem 2026 |
39İzleyin | CVE-2026-43779İstismar yok | A logic issue was addressed with improved restrictions.apple · macos · CWE-284 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-43793İstismar yok | An issue existed in the handling of environment variables.apple · macos · CWE-20 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-43802İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-787 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
39İzleyin | CVE-2026-43809İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
31İzleyin | CVE-2026-64539İstismar yok | Bluetooth: eir: Fix stack OOB write when prepending the Flags ADlinux · linux · CWE-121 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
32İzleyin | CVE-2026-64540İstismar yok | usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()linux · linux · CWE-125 | Yüksek8,1 | — | %0,2 | 27 Tem 2026 |
39İzleyin | CVE-2026-64541İstismar yok | net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socketlinux · linux · CWE-416 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
31İzleyin | CVE-2026-64543İstismar yok | tipc: fix use-after-free of the discoverer in tipc_disc_rcv()linux · linux · CWE-416 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
30İzleyin | CVE-2026-64545İstismar yok | net, bpf: check master for NULL in xdp_master_redirect()linux · linux · CWE-476 | Yüksek7,5 | — | %0,5 | 27 Tem 2026 |
28İzleyin | CVE-2026-64546İstismar yok | drm/edid: fix OOB read in drm_parse_tiled_block()linux · linux · CWE-125 | Yüksek7,1 | — | %0,1 | 27 Tem 2026 |
32İzleyin | CVE-2026-64547İstismar yok | net: usb: net1080: validate packet_len before pad-byte access in rx_fixuplinux · linux · CWE-125 | Yüksek8,1 | — | %0,2 | 27 Tem 2026 |
33İzleyin | CVE-2026-64548İstismar yok | bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()linux · linux · CWE-190 | Yüksek8,4 | — | %0,1 | 27 Tem 2026 |
36İzleyin | CVE-2026-64551İstismar yok | sctp: validate STALE_COOKIE cause length before reading stalenesslinux · linux · CWE-125 | Kritik9,1 | — | %0,5 | 27 Tem 2026 |
33İzleyin | CVE-2026-64552İstismar yok | virtio-net: fix len check in receive_big()linux · linux · CWE-787 | Yüksek8,4 | — | %0,1 | 27 Tem 2026 |
35İzleyin | CVE-2026-64554İstismar yok | netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()linux · linux · CWE-416 | Yüksek8,8 | — | %0,2 | 27 Tem 2026 |
39İzleyin | CVE-2026-64691İstismar yok | A buffer overflow was addressed with improved size validation.apple · macos · CWE-120 | Kritik9,8 | — | %0,4 | 27 Tem 2026 |
39İzleyin | CVE-2026-64694İstismar yok | An integer overflow was addressed with improved input validation.apple · macos · CWE-190 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-64695İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,7 | 27 Tem 2026 |
39İzleyin | CVE-2026-64696İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,7 | 27 Tem 2026 |
39İzleyin | CVE-2026-64697İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-64698İstismar yok | The issue was addressed with improved memory handling.apple · macos · CWE-119 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-64702İstismar yok | An access issue was addressed with additional sandbox restrictions.apple · macos · CWE-284 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-64703İstismar yok | A use after free issue was addressed with improved memory management.apple · macos · CWE-416 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-64704İstismar yok | A type confusion issue was addressed with improved memory handling.apple · macos · CWE-843 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
39İzleyin | CVE-2026-64731İstismar yok | A path handling issue was addressed with improved validation.apple · macos · CWE-22 | Kritik9,8 | — | %0,6 | 27 Tem 2026 |
32İzleyin | CVE-2026-64737İstismar yok | An authorization issue was addressed with improved state management.apple · macos · CWE-284 | Yüksek8,2 | — | %0,1 | 27 Tem 2026 |
39İzleyin | CVE-2026-64738İstismar yok | A permissions issue was addressed with additional restrictions.apple · macos · CWE-284 | Kritik9,8 | — | %0,5 | 27 Tem 2026 |
31İzleyin | CVE-2026-64758İstismar yok | The issue was addressed with improved bounds checks.apple · ipados · CWE-119 | Yüksek7,8 | — | %0,1 | 27 Tem 2026 |
34İzleyin | CVE-2026-55685İstismar yok | React Router: Unauthenticated Denial of Service via Inefficient Route Matchingshopify · react-router · CWE-400 | Yüksek8,7 | — | %0,7 | 27 Tem 2026 |
30İzleyin | CVE-2025-63913İstismar yok | An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function #2 or the 'FiCWE-400 | Yüksek7,5 | — | %0,4 | 27 Tem 2026 |
28İzleyin | CVE-2026-61953İstismar yok | WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerabilityquantumcloud · simple link directory pro · CWE-918 | Yüksek7,2 | — | %0,2 | 27 Tem 2026 |
28İzleyin | CVE-2026-61957İstismar yok | WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerabilityminiorange · miniorange otp verification · CWE-79 | Yüksek7,1 | — | %0,2 | 27 Tem 2026 |
28İzleyin | CVE-2026-65438İstismar yok | WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.9 - Cross Site Scripting (XSS) vulnerabilitykofi mokome · message filter for contact form 7 · CWE-79 | Yüksek7,1 | — | %0,2 | 27 Tem 2026 |
28İzleyin | CVE-2026-65439İstismar yok | WordPress Ultimate Addons for Contact Form 7 plugin <=3.5.45 - Cross Site Scripting (XSS) vulnerabilitythemefic · ultimate addons for contact form 7 · CWE-79 | Yüksek7,1 | — | %0,2 | 27 Tem 2026 |
28İzleyin | CVE-2026-65440İstismar yok | WordPress GetGenie plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerabilityroxnor · getgenie · CWE-79 | Yüksek7,1 | — | %0,2 | 27 Tem 2026 |
28İzleyin | CVE-2026-65441İstismar yok | WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerabilitynexcess · givewp · CWE-79 | Yüksek7,1 | — | %0,2 | 27 Tem 2026 |
28İzleyin | CVE-2026-65442Kavram kanıtı | WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerabilitysubtle web inc · formcraft · CWE-918 | Yüksek7,2 | — | %0,5 | 27 Tem 2026 |
28İzleyin | CVE-2026-65443İstismar yok | WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerabilitywp media · backwpup · CWE-79 | Yüksek7,1 | — | %0,2 | 27 Tem 2026 |
28İzleyin | CVE-2026-65446İstismar yok | WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerabilitywp chill · kali forms · CWE-79 | Yüksek7,1 | — | %0,2 | 27 Tem 2026 |
30İzleyin | CVE-2026-66473İstismar yok | WordPress Xendit Payment plugin <= 7.1.0 - Broken Access Control vulnerabilityxendit · xendit payment · CWE-862 | Yüksek7,5 | — | %0,3 | 27 Tem 2026 |
34İzleyin | CVE-2026-17524İstismar yok | Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the caching mechanism for path validation during the CWE-22 | Yüksek8,7 | — | %1,1 | 28 Tem 2026 |
30İzleyin | CVE-2026-14490İstismar yok | Demi <= 0.0.6 - Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX actiondeveasel · demi – one click demo import, backup & site migration · CWE-22 | Yüksek7,5 | — | %0,7 | 28 Tem 2026 |
39İzleyin | CVE-2026-14545İstismar yok | TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Resetunknown · truebooker · CWE-269 | Kritik9,8 | — | %0,4 | 28 Tem 2026 |
28İzleyin | CVE-2026-14870Kavram kanıtı | Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_idunknown · database for contact form 7, wpforms, elementor forms · CWE-79 | Yüksek7,1 | — | %0,4 | 28 Tem 2026 |
30İzleyin | CVE-2026-14924İstismar yok | Tablesome < 1.1.31 - Unauthenticated Post Creation and Modificationunknown · tablesome table · CWE-862 | Yüksek7,5 | — | %0,4 | 28 Tem 2026 |
28İzleyin | CVE-2026-16585İstismar yok | Better Messages <= 2.15.19 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal via 'file' Parameterwordplus · better messages – chat rooms, group chat, private messages & ai chat bots · CWE-22 | Yüksek7,2 | — | %1,1 | 28 Tem 2026 |
30İzleyin | CVE-2026-12741Kavram kanıtı | WP Fast Total Search <= 1.80.280 - Unauthenticated SQL Injectionepsiloncool · wp fast total search – the power of indexed search · CWE-89 | Yüksek7,5 | — | %1,5 | 28 Tem 2026 |
39İzleyin | CVE-2026-15014İstismar yok | SMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' Parametercozyvision1 · sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery · CWE-288 | Kritik9,8 | — | %0,8 | 28 Tem 2026 |
30İzleyin | CVE-2026-12800Kavram kanıtı | Premium Packages <= 6.2.0 - Unauthenticated SQL Injectioncodename065 · premium packages – sell digital products securely · CWE-89 | Yüksek7,5 | — | %1,5 | 28 Tem 2026 |
30İzleyin | CVE-2026-13161İstismar yok | TrueBooker <= 1.2.2 - Unauthenticated SQL Injectionthemetechmount · truebooker – appointment booking and scheduler system · CWE-89 | Yüksek7,5 | — | %0,7 | 28 Tem 2026 |
34İzleyin | CVE-2026-14167İstismar yok | ads-tec Industrial IT: Privilege escalation during configuration importads-tec industrial it · dvg-irf1401 · CWE-863 | Yüksek8,7 | — | %0,4 | 28 Tem 2026 |
35İzleyin | CVE-2026-14168İstismar yok | ads-tec Industrial IT: Vertical privilege escalation via configuration table writeads-tec industrial it · dvg-irf1401 · CWE-862 | Yüksek8,8 | — | %0,4 | 28 Tem 2026 |
32İzleyin | CVE-2026-14169İstismar yok | ads-tec Industrial IT: Account lockout via non-atomic user creationads-tec industrial it · dvg-irf1401 · CWE-696 | Yüksek8,1 | — | %0,5 | 28 Tem 2026 |
30İzleyin | CVE-2026-14516İstismar yok | Online Scheduling and Appointment Booking System <= 27.5 - Unauthenticated SQL Injectionladela · online scheduling and appointment booking system – bookly · CWE-89 | Yüksek7,5 | — | %0,4 | 28 Tem 2026 |
35İzleyin | CVE-2026-59764İstismar yok | ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI.elecom co.,ltd. · wrc-x3000gs3-b · CWE-78 | Yüksek8,6 | — | %1,7 | 28 Tem 2026 |
35İzleyin | CVE-2026-61376İstismar yok | ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings.elecom co.,ltd. · wab-m1775-ps · CWE-78 | Yüksek8,6 | — | %1,7 | 28 Tem 2026 |
30İzleyin | CVE-2026-10207İstismar yok | PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameterpickplugins · pickplugins question answer · CWE-89 | Yüksek7,5 | — | %0,5 | 28 Tem 2026 |
37İzleyin | CVE-2026-11841İstismar yok | An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due tsick ag · inspectorp61x · CWE-552 | Kritik9,4 | — | %0,8 | 28 Tem 2026 |
35İzleyin | CVE-2026-14328İstismar yok | Eazy Plugin Manager <= 4.4.1 - Authenticated (Subscriber+) Privilege Escalation via pos_get_option AJAX Action and admin/login REST Endpointeazyplugins · eazy plugin manager – powerful plugin management solution for wordpress · CWE-269 | Yüksek8,8 | — | %0,7 | 28 Tem 2026 |
30İzleyin | CVE-2026-14785İstismar yok | Web Directory Free <= 1.7.13 - Unauthenticated SQL Injectionmihail-chepovskiy · web directory free · CWE-89 | Yüksek7,5 | — | %0,5 | 28 Tem 2026 |
28İzleyin | CVE-2026-13440İstismar yok | StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting wedevs · storegrowth – upsell, bogo, quick view, direct checkout & side cart for woocommerce · CWE-79 | Yüksek7,2 | — | %0,4 | 28 Tem 2026 |
30İzleyin | CVE-2026-15025İstismar yok | Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpointsuncannyowl · uncanny automator – easy automation, integration, webhooks & workflow builder plugin · CWE-862 | Yüksek7,5 | — | %0,7 | 28 Tem 2026 |
32İzleyin | CVE-2024-14041İstismar yok | ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)bouncycastle · bc-java · CWE-208 | Yüksek8,2 | — | %0,3 | 28 Tem 2026 |
40Planlayın | CVE-2026-11756İstismar yok | Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERdassault systèmes · station launcher app in 3dexperience platform · CWE-502 | Kritik10,0 | — | %0,8 | 28 Tem 2026 |
30İzleyin | CVE-2026-42492İstismar yok | vIRQ event channel binding may break Xenstorexen · xen · CWE-459 | Yüksek7,5 | — | %0,6 | 28 Tem 2026 |
30İzleyin | CVE-2026-42493İstismar yok | x86 shadow paging is deprecatedxen · xen · CWE-400 | Yüksek7,5 | — | %0,4 | 28 Tem 2026 |
35İzleyin | CVE-2026-62426İstismar yok | sysctl and platform-op locks open to abusexen · xen · CWE-412 | Yüksek8,8 | — | %0,2 | 28 Tem 2026 |
35İzleyin | CVE-2026-62427İstismar yok | sysctl and platform-op locks open to abusexen · xen · CWE-284 | Yüksek8,8 | — | %0,2 | 28 Tem 2026 |
- CVE-2026-6601528İzleyin
JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.
YüksekCVSS 7,2İstismar yokEPSS %0jfrog · artifactory27 Tem 2026
- CVE-2026-2889630İzleyin
The issue was addressed with improved memory handling.
YüksekCVSS 7,7İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-2891139İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-2891231İzleyin
A logic issue was addressed with improved restrictions.
YüksekCVSS 7,8Kavram kanıtıEPSS %0apple · macos27 Tem 2026
- CVE-2026-2892628İzleyin
A race condition was addressed with improved state handling.
YüksekCVSS 7,0İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-2894528İzleyin
A permissions issue was addressed with additional sandbox restrictions.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-2898131İzleyin
A buffer overflow was addressed with improved bounds checking.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-2898239İzleyin
A race condition was addressed with improved locking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-3987339İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-3987431İzleyin
A permissions issue was addressed with additional restrictions.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-3987531İzleyin
A permissions issue was addressed with additional restrictions.
YüksekCVSS 7,8Kavram kanıtıEPSS %0apple · macos27 Tem 2026
- CVE-2026-3987731İzleyin
A memory corruption issue was addressed with improved memory handling.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4367228İzleyin
An authorization issue was addressed with improved state management.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4368128İzleyin
A buffer overflow was addressed with improved bounds checking.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4368239İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8Kavram kanıtıEPSS %0apple · macos27 Tem 2026
- CVE-2026-4369328İzleyin
A race condition was addressed with improved state handling.
YüksekCVSS 7,0İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4369439İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4369831İzleyin
An injection issue was addressed with improved validation.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4371039İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4372830İzleyin
This issue was addressed through improved state management.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4374728İzleyin
An out-of-bounds read was addressed with improved bounds checking.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4374839İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4374931İzleyin
A parsing issue in the handling of directory paths was addressed with improved path validation.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4375039İzleyin
A buffer overflow was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4375528İzleyin
A race condition was addressed with improved state management.
YüksekCVSS 7,0İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4375739İzleyin
An out-of-bounds read was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4376034İzleyin
An access issue was addressed with improved access restrictions.
YüksekCVSS 8,6İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4376439İzleyin
An integer overflow was addressed with improved input validation.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4377128İzleyin
A stack overflow was addressed with improved input validation.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4377232İzleyin
A path traversal issue was addressed with improved input validation.
YüksekCVSS 8,2İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4377339İzleyin
An out-of-bounds read was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4377730İzleyin
This issue was addressed with improved input validation.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4377939İzleyin
A logic issue was addressed with improved restrictions.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4379339İzleyin
An issue existed in the handling of environment variables.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4380239İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-4380939İzleyin
An out-of-bounds read was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6453931İzleyin
Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6454032İzleyin
usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
YüksekCVSS 8,1İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6454139İzleyin
net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
KritikCVSS 9,8İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6454331İzleyin
tipc: fix use-after-free of the discoverer in tipc_disc_rcv()
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6454530İzleyin
net, bpf: check master for NULL in xdp_master_redirect()
YüksekCVSS 7,5İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6454628İzleyin
drm/edid: fix OOB read in drm_parse_tiled_block()
YüksekCVSS 7,1İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6454732İzleyin
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
YüksekCVSS 8,1İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6454833İzleyin
bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
YüksekCVSS 8,4İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6455136İzleyin
sctp: validate STALE_COOKIE cause length before reading staleness
KritikCVSS 9,1İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6455233İzleyin
virtio-net: fix len check in receive_big()
YüksekCVSS 8,4İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6455435İzleyin
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
YüksekCVSS 8,8İstismar yokEPSS %0linux · linux27 Tem 2026
- CVE-2026-6469139İzleyin
A buffer overflow was addressed with improved size validation.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6469439İzleyin
An integer overflow was addressed with improved input validation.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6469539İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6469639İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6469739İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6469839İzleyin
The issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6470239İzleyin
An access issue was addressed with additional sandbox restrictions.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6470339İzleyin
A use after free issue was addressed with improved memory management.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6470439İzleyin
A type confusion issue was addressed with improved memory handling.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6473139İzleyin
A path handling issue was addressed with improved validation.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6473732İzleyin
An authorization issue was addressed with improved state management.
YüksekCVSS 8,2İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6473839İzleyin
A permissions issue was addressed with additional restrictions.
KritikCVSS 9,8İstismar yokEPSS %0apple · macos27 Tem 2026
- CVE-2026-6475831İzleyin
The issue was addressed with improved bounds checks.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados27 Tem 2026
- CVE-2026-5568534İzleyin
React Router: Unauthenticated Denial of Service via Inefficient Route Matching
YüksekCVSS 8,7İstismar yokEPSS %0shopify · react-router27 Tem 2026
- CVE-2025-6391330İzleyin
An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function #2 or the 'Fi
YüksekCVSS 7,5İstismar yokEPSS %027 Tem 2026
- CVE-2026-6195328İzleyin
WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0quantumcloud · simple link directory pro27 Tem 2026
- CVE-2026-6195728İzleyin
WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0miniorange · miniorange otp verification27 Tem 2026
- CVE-2026-6543828İzleyin
WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.9 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0kofi mokome · message filter for contact form 727 Tem 2026
- CVE-2026-6543928İzleyin
WordPress Ultimate Addons for Contact Form 7 plugin <=3.5.45 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0themefic · ultimate addons for contact form 727 Tem 2026
- CVE-2026-6544028İzleyin
WordPress GetGenie plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0roxnor · getgenie27 Tem 2026
- CVE-2026-6544128İzleyin
WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0nexcess · givewp27 Tem 2026
- CVE-2026-6544228İzleyin
WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability
YüksekCVSS 7,2Kavram kanıtıEPSS %0subtle web inc · formcraft27 Tem 2026
- CVE-2026-6544328İzleyin
WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wp media · backwpup27 Tem 2026
- CVE-2026-6544628İzleyin
WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wp chill · kali forms27 Tem 2026
- CVE-2026-6647330İzleyin
WordPress Xendit Payment plugin <= 7.1.0 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0xendit · xendit payment27 Tem 2026
- CVE-2026-1752434İzleyin
Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the caching mechanism for path validation during the
YüksekCVSS 8,7İstismar yokEPSS %128 Tem 2026
- CVE-2026-1449030İzleyin
Demi <= 0.0.6 - Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX action
YüksekCVSS 7,5İstismar yokEPSS %0deveasel · demi – one click demo import, backup & site migration28 Tem 2026
- CVE-2026-1454539İzleyin
TrueBooker Appointment Booking < 1.2.4 - Unauthenticated Account Takeover via Password Reset
KritikCVSS 9,8İstismar yokEPSS %0unknown · truebooker28 Tem 2026
- CVE-2026-1487028İzleyin
Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_id
YüksekCVSS 7,1Kavram kanıtıEPSS %0unknown · database for contact form 7, wpforms, elementor forms28 Tem 2026
- CVE-2026-1492430İzleyin
Tablesome < 1.1.31 - Unauthenticated Post Creation and Modification
YüksekCVSS 7,5İstismar yokEPSS %0unknown · tablesome table28 Tem 2026
- CVE-2026-1658528İzleyin
Better Messages <= 2.15.19 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal via 'file' Parameter
YüksekCVSS 7,2İstismar yokEPSS %1wordplus · better messages – chat rooms, group chat, private messages & ai chat bots28 Tem 2026
- CVE-2026-1274130İzleyin
WP Fast Total Search <= 1.80.280 - Unauthenticated SQL Injection
YüksekCVSS 7,5Kavram kanıtıEPSS %1epsiloncool · wp fast total search – the power of indexed search28 Tem 2026
- CVE-2026-1501439İzleyin
SMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' Parameter
KritikCVSS 9,8İstismar yokEPSS %0cozyvision1 · sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery28 Tem 2026
- CVE-2026-1280030İzleyin
Premium Packages <= 6.2.0 - Unauthenticated SQL Injection
YüksekCVSS 7,5Kavram kanıtıEPSS %1codename065 · premium packages – sell digital products securely28 Tem 2026
- CVE-2026-1316130İzleyin
TrueBooker <= 1.2.2 - Unauthenticated SQL Injection
YüksekCVSS 7,5İstismar yokEPSS %0themetechmount · truebooker – appointment booking and scheduler system28 Tem 2026
- CVE-2026-1416734İzleyin
ads-tec Industrial IT: Privilege escalation during configuration import
YüksekCVSS 8,7İstismar yokEPSS %0ads-tec industrial it · dvg-irf140128 Tem 2026
- CVE-2026-1416835İzleyin
ads-tec Industrial IT: Vertical privilege escalation via configuration table write
YüksekCVSS 8,8İstismar yokEPSS %0ads-tec industrial it · dvg-irf140128 Tem 2026
- CVE-2026-1416932İzleyin
ads-tec Industrial IT: Account lockout via non-atomic user creation
YüksekCVSS 8,1İstismar yokEPSS %0ads-tec industrial it · dvg-irf140128 Tem 2026
- CVE-2026-1451630İzleyin
Online Scheduling and Appointment Booking System <= 27.5 - Unauthenticated SQL Injection
YüksekCVSS 7,5İstismar yokEPSS %0ladela · online scheduling and appointment booking system – bookly28 Tem 2026
- CVE-2026-5976435İzleyin
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI.
YüksekCVSS 8,6İstismar yokEPSS %1elecom co.,ltd. · wrc-x3000gs3-b28 Tem 2026
- CVE-2026-6137635İzleyin
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings.
YüksekCVSS 8,6İstismar yokEPSS %1elecom co.,ltd. · wab-m1775-ps28 Tem 2026
- CVE-2026-1020730İzleyin
PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter
YüksekCVSS 7,5İstismar yokEPSS %0pickplugins · pickplugins question answer28 Tem 2026
- CVE-2026-1184137İzleyin
An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due t
KritikCVSS 9,4İstismar yokEPSS %0sick ag · inspectorp61x28 Tem 2026
- CVE-2026-1432835İzleyin
Eazy Plugin Manager <= 4.4.1 - Authenticated (Subscriber+) Privilege Escalation via pos_get_option AJAX Action and admin/login REST Endpoint
YüksekCVSS 8,8İstismar yokEPSS %0eazyplugins · eazy plugin manager – powerful plugin management solution for wordpress28 Tem 2026
- CVE-2026-1478530İzleyin
Web Directory Free <= 1.7.13 - Unauthenticated SQL Injection
YüksekCVSS 7,5İstismar yokEPSS %0mihail-chepovskiy · web directory free28 Tem 2026
- CVE-2026-1344028İzleyin
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting
YüksekCVSS 7,2İstismar yokEPSS %0wedevs · storegrowth – upsell, bogo, quick view, direct checkout & side cart for woocommerce28 Tem 2026
- CVE-2026-1502530İzleyin
Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints
YüksekCVSS 7,5İstismar yokEPSS %0uncannyowl · uncanny automator – easy automation, integration, webhooks & workflow builder plugin28 Tem 2026
- CVE-2024-1404132İzleyin
ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)
YüksekCVSS 8,2İstismar yokEPSS %0bouncycastle · bc-java28 Tem 2026
- CVE-2026-1175640Planlayın
Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPER
KritikCVSS 10,0İstismar yokEPSS %0dassault systèmes · station launcher app in 3dexperience platform28 Tem 2026
- CVE-2026-4249230İzleyin
vIRQ event channel binding may break Xenstore
YüksekCVSS 7,5İstismar yokEPSS %0xen · xen28 Tem 2026
- CVE-2026-4249330İzleyin
x86 shadow paging is deprecated
YüksekCVSS 7,5İstismar yokEPSS %0xen · xen28 Tem 2026
- CVE-2026-6242635İzleyin
sysctl and platform-op locks open to abuse
YüksekCVSS 8,8İstismar yokEPSS %0xen · xen28 Tem 2026
- CVE-2026-6242735İzleyin
sysctl and platform-op locks open to abuse
YüksekCVSS 8,8İstismar yokEPSS %0xen · xen28 Tem 2026