İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2026: sömürülen ve yeni ciddi CVE kayıtları

1.299 kayıt · 21 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 7 / 13

  • CVE-2026-63301
    28İzleyin

    Denial of Service in Quick.CMS

    YüksekCVSS 7,0İstismar yokEPSS %0

    opensolution · quick.cms28 Tem 2026

  • CVE-2026-65880
    40Planlayın

    Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3

    KritikCVSS 10,0İstismar yokEPSS %0

    balbooa.com · balbooa forms component for joomla28 Tem 2026

  • CVE-2026-13440
    28İzleyin

    StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting

    YüksekCVSS 7,2İstismar yokEPSS %0

    wedevs · storegrowth – upsell, bogo, quick view, direct checkout & side cart for woocommerce28 Tem 2026

  • CVE-2026-15025
    30İzleyin

    Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints

    YüksekCVSS 7,5İstismar yokEPSS %0

    uncannyowl · uncanny automator – easy automation, integration, webhooks & workflow builder plugin28 Tem 2026

  • CVE-2026-21047
    33İzleyin

    Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code.

    YüksekCVSS 8,3İstismar yokEPSS %0

    samsung mobile · samsung mobile devices28 Tem 2026

  • CVE-2024-14041
    32İzleyin

    ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)

    YüksekCVSS 8,2İstismar yokEPSS %0

    bouncycastle · bc-java28 Tem 2026

  • CVE-2026-42492
    30İzleyin

    vIRQ event channel binding may break Xenstore

    YüksekCVSS 7,5İstismar yokEPSS %0

    xen · xen28 Tem 2026

  • CVE-2026-42493
    30İzleyin

    x86 shadow paging is deprecated

    YüksekCVSS 7,5İstismar yokEPSS %0

    xen · xen28 Tem 2026

  • CVE-2026-49332
    34İzleyin

    Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams

    YüksekCVSS 8,5İstismar yokEPSS %0

    red hat · red hat openshift container platform 4.1228 Tem 2026

  • CVE-2026-62426
    35İzleyin

    sysctl and platform-op locks open to abuse

    YüksekCVSS 8,8İstismar yokEPSS %0

    xen · xen28 Tem 2026

  • CVE-2026-62427
    35İzleyin

    sysctl and platform-op locks open to abuse

    YüksekCVSS 8,8İstismar yokEPSS %0

    xen · xen28 Tem 2026

  • CVE-2026-62428
    31İzleyin

    grant-table: type confusion in grant-copy

    YüksekCVSS 7,8İstismar yokEPSS %0

    xen · xen28 Tem 2026

  • CVE-2026-62430
    30İzleyin

    x86: Out-of-bounds read in vRTC emulation

    YüksekCVSS 7,5İstismar yokEPSS %0

    xen · xen28 Tem 2026

  • CVE-2026-62431
    30İzleyin

    Viridian STIMER division by zero

    YüksekCVSS 7,5İstismar yokEPSS %0

    xen · xen28 Tem 2026

  • CVE-2026-62432
    29İzleyin

    evtchn: Race between FIFO expand and reset

    YüksekCVSS 7,3İstismar yokEPSS %0

    xen · xen28 Tem 2026

  • CVE-2026-62433
    29İzleyin

    correct buffer checks for DM_OP hypercalls

    YüksekCVSS 7,3İstismar yokEPSS %0

    xen · xen28 Tem 2026

  • CVE-2026-65881
    30İzleyin

    Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1

    YüksekCVSS 7,5İstismar yokEPSS %0

    joomdle.com · joomdle component for joomla28 Tem 2026

  • CVE-2026-66918
    32İzleyin

    DOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons

    YüksekCVSS 8,2İstismar yokEPSS %0

    pivotick · pivotick28 Tem 2026

  • CVE-2026-66920
    32İzleyin

    Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data

    YüksekCVSS 8,2İstismar yokEPSS %0

    pivotick · pivotick28 Tem 2026

  • CVE-2026-7187
    35İzleyin

    Improper Authentication in Universal Sotware's UKBS

    YüksekCVSS 8,8İstismar yokEPSS %0

    universal software inc. · ukbs28 Tem 2026

  • CVE-2026-59878
    30İzleyin

    Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · activemq28 Tem 2026

  • CVE-2026-63727
    34İzleyin

    Anchore Enterprise Privilege Escalation via User Management API

    YüksekCVSS 8,7İstismar yokEPSS %0

    anchore · anchore enterprise28 Tem 2026

  • CVE-2026-66713
    40Planlayın

    Apache Axis2/Java: deserialization of untrusted Data

    KritikCVSS 9,8İstismar yokEPSS %1

    apache · axis2\/java28 Tem 2026

  • CVE-2026-67174
    36İzleyin

    DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick

    KritikCVSS 9,2İstismar yokEPSS %0

    pivotick · pivotick28 Tem 2026

  • CVE-2026-67178
    31İzleyin

    Open Redirect in MISP Installer-Generated Apache Configuration

    YüksekCVSS 7,8İstismar yokEPSS %0

    misp · misp28 Tem 2026

  • CVE-2026-8164
    29İzleyin

    Search Order Hijacking in ArkSigner's ArkSigner Desktop Client

    YüksekCVSS 7,3İstismar yokEPSS %0

    arksigner software and hardware industry and trade inc. · arksigner desktop client28 Tem 2026

  • CVE-2026-43910
    32İzleyin

    Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor

    YüksekCVSS 8,2İstismar yokEPSS %0

    appium · java-client28 Tem 2026

  • CVE-2026-45293
    34İzleyin

    WordPress Coding Standards (WordPressCS) contains an arbitrary code execution vulnerability

    YüksekCVSS 8,6İstismar yokEPSS %0

    wordpress · wordpress-coding-standards28 Tem 2026

  • CVE-2026-47427
    30İzleyin

    GitHub MCP Server: Nil Pointer Dereference DoS in completion/complete Handler

    YüksekCVSS 7,5İstismar yokEPSS %0

    github · mcp server28 Tem 2026

  • CVE-2026-47483
    32İzleyin

    NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled re

    YüksekCVSS 8,2İstismar yokEPSS %0

    nvidia · dcgm28 Tem 2026

  • CVE-2026-54545
    28İzleyin

    @wakaru/cli arbitrary file write during bundle unpack

    YüksekCVSS 7,1İstismar yokEPSS %0

    pionxzh · wakaru28 Tem 2026

  • CVE-2026-54593
    32İzleyin

    Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions

    YüksekCVSS 8,1İstismar yokEPSS %0

    pterodactyl · panel28 Tem 2026

  • CVE-2026-61609
    30İzleyin

    Pterodactyl's shared global rate-limit key on login and 2FA checkpoint enables unauthenticated panel-wide authentication lockout (DoS)

    YüksekCVSS 7,5İstismar yokEPSS %0

    pterodactyl · panel28 Tem 2026

  • CVE-2026-66746
    21İzleyin

    Rouille 0.4.0 - 3.6.2 HTTP Response Splitting via Header Injection

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    tomaka · rouille28 Tem 2026

  • CVE-2026-66748
    34İzleyin

    Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    owen2345 · camaleon-cms28 Tem 2026

  • CVE-2026-66749
    28İzleyin

    Let's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    sdelements · lets-chat28 Tem 2026

  • CVE-2026-66750
    21İzleyin

    Let's Chat 0.3.0 - 0.4.8 Broken Access Control File Disclosure via GET /files route

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    sdelements · lets-chat28 Tem 2026

  • CVE-2026-66751
    21İzleyin

    Let's Chat 0.3.0 - 0.4.8 Improper Authorization via DELETE /rooms/:room

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    sdelements · lets-chat28 Tem 2026

  • CVE-2026-66752
    25İzleyin

    tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    tiny-http · tiny-http28 Tem 2026

  • CVE-2026-66753
    25İzleyin

    tiny-http 0.12.0 HTTP Response Splitting via Header Injection

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    tiny-http · tiny-http28 Tem 2026

  • CVE-2026-66754
    32İzleyin

    Rouille 0.1.6 - 3.6.2 Reachable Assertion DoS via remove_prefix percent-encoding

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    tomaka · rouille28 Tem 2026

  • CVE-2026-67181
    25İzleyin

    Rouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Transfer-Encoding Header

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    tomaka · rouille28 Tem 2026

  • CVE-2026-7868
    35İzleyin

    This Power System update is being released to address incorrect authorization

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · power system s1122 \(9824-22a\) firmware28 Tem 2026

  • CVE-2026-18084
    34İzleyin

    Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM

    YüksekCVSS 8,6İstismar yokEPSS %0

    blackberry · unified endpoint manager28 Tem 2026

  • CVE-2026-54605
    28İzleyin

    OAuth: Cross-origin token-request redirects can expose signed request metadata

    YüksekCVSS 7,2İstismar yokEPSS %0

    ruby-oauth · oauth28 Tem 2026

  • CVE-2026-54609
    34İzleyin

    QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

    YüksekCVSS 8,6İstismar yokEPSS %0

    quiet-terminal-interactive · qtineon28 Tem 2026

  • CVE-2026-67182
    27İzleyin

    Rouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Header Injection

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    tomaka · rouille28 Tem 2026

  • CVE-2026-67183
    34İzleyin

    TinyWeb 0.0.8 Memory Leak DoS via HTTP Request Handling

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    generalsandman · tinyweb28 Tem 2026

  • CVE-2026-67184
    34İzleyin

    TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    generalsandman · tinyweb28 Tem 2026

  • CVE-2026-67185
    34İzleyin

    TinyWeb 0.0.8 Path Traversal via URL Path Component

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    generalsandman · tinyweb28 Tem 2026

  • CVE-2026-48372
    31İzleyin

    Format Plugins | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · format plugins28 Tem 2026

  • CVE-2026-48388
    34İzleyin

    Photoshop Installer | CWE-427: Uncontrolled Search Path Element

    YüksekCVSS 8,6İstismar yokEPSS %0

    adobe · photoshop installer28 Tem 2026

  • CVE-2026-54635
    30İzleyin

    pytonapi has a Webhook Custom Path Authentication Bypass

    YüksekCVSS 7,5İstismar yokEPSS %0

    nessshon · tonapi28 Tem 2026

  • CVE-2026-59931
    30İzleyin

    PhpSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist

    YüksekCVSS 7,7İstismar yokEPSS %0

    phpoffice · phpspreadsheet28 Tem 2026

  • CVE-2026-59933
    30İzleyin

    PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion

    YüksekCVSS 7,5İstismar yokEPSS %0

    phpoffice · phpspreadsheet28 Tem 2026

  • CVE-2026-14869
    34İzleyin

    terraform-mcp-server vulnerable to server side request forgery leading to token exposure

    YüksekCVSS 8,6İstismar yokEPSS %0

    hashicorp · tooling28 Tem 2026

  • CVE-2026-15992
    35İzleyin

    WP Password Policy <= 3.7.1 - Authenticated (Subscriber+) Privilege Escalation

    YüksekCVSS 8,8İstismar yokEPSS %0

    teydeastudio · wp password policy28 Tem 2026

  • CVE-2026-16496
    35İzleyin

    terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user

    YüksekCVSS 8,9İstismar yokEPSS %0

    hashicorp · tooling28 Tem 2026

  • CVE-2026-16498
    40Planlayın

    terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode

    KritikCVSS 10,0İstismar yokEPSS %0

    hashicorp · tooling28 Tem 2026

  • CVE-2026-16771
    35İzleyin

    In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-bin/*.ha ma

    YüksekCVSS 8,8İstismar yokEPSS %0

    at&t · arris bgw210‑70028 Tem 2026

  • CVE-2026-18107
    31İzleyin

    Criu: criu: container escape via rseq critical section hijack during checkpoint/restore

    YüksekCVSS 7,8İstismar yokEPSS %0

    red hat · red hat enterprise linux 1028 Tem 2026

  • CVE-2026-47726
    28İzleyin

    nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator

    YüksekCVSS 7,1İstismar yokEPSS %0

    juev · nebula-mesh28 Tem 2026

  • CVE-2026-48374
    31İzleyin

    Bridge | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · bridge28 Tem 2026

  • CVE-2026-48390
    32İzleyin

    Bridge | Incorrect Authorization (CWE-863)

    YüksekCVSS 8,2İstismar yokEPSS %0

    adobe · bridge28 Tem 2026

  • CVE-2026-48391
    32İzleyin

    Bridge | Untrusted Search Path (CWE-426)

    YüksekCVSS 8,2İstismar yokEPSS %0

    adobe · bridge28 Tem 2026

  • CVE-2026-48392
    31İzleyin

    Bridge | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · bridge28 Tem 2026

  • CVE-2026-48393
    31İzleyin

    Bridge | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · bridge28 Tem 2026

  • CVE-2026-48394
    31İzleyin

    Bridge | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · bridge28 Tem 2026

  • CVE-2026-48395
    34İzleyin

    Bridge | Untrusted Search Path (CWE-426)

    YüksekCVSS 8,6İstismar yokEPSS %0

    adobe · bridge28 Tem 2026

  • CVE-2026-48396
    34İzleyin

    Bridge | Incorrect Authorization (CWE-863)

    YüksekCVSS 8,6İstismar yokEPSS %0

    adobe · bridge28 Tem 2026

  • CVE-2026-49258
    35İzleyin

    Nebula Mesh: Web UI lacks ownership checks, enabling cross-operator access to hosts and networks (read, block, delete)

    YüksekCVSS 8,8İstismar yokEPSS %0

    juev · nebula-mesh28 Tem 2026

  • CVE-2026-50736
    36İzleyin

    The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message

    KritikCVSS 9,0İstismar yokEPSS %0

    enterprisedb · pglogical28 Tem 2026

  • CVE-2026-50737
    36İzleyin

    When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressions

    KritikCVSS 9,0İstismar yokEPSS %0

    enterprisedb · pglogical28 Tem 2026

  • CVE-2026-50738
    30İzleyin

    A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying sl

    YüksekCVSS 7,7İstismar yokEPSS %0

    enterprisedb · pglogical28 Tem 2026

  • CVE-2026-59932
    30İzleyin

    PhpSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion

    YüksekCVSS 7,5İstismar yokEPSS %0

    phpoffice · phpspreadsheet28 Tem 2026

  • CVE-2026-66745
    30İzleyin

    Artica Proxy 4.50 Session Fixation via fw.login.php

    YüksekCVSS 7,5İstismar yokEPSS %0

    articatech · artica proxy28 Tem 2026

  • CVE-2026-7769
    32İzleyin

    SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway

    YüksekCVSS 8,1İstismar yokEPSS %0

    ibm · sterling b2b integrator28 Tem 2026

  • CVE-2026-16184
    39İzleyin

    IBM WebSphere Application Server is affected by an authentication bypass

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · websphere application server28 Tem 2026

  • CVE-2026-16347
    34İzleyin

    Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router

    YüksekCVSS 8,7İstismar yokEPSS %0

    mikrotik · routeros28 Tem 2026

  • CVE-2026-48060
    32İzleyin

    Litestar: HTML Injection Through CSRF Token

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    litestar-org · litestar28 Tem 2026

  • CVE-2026-57510
    34İzleyin

    SuperPlane < 0.27.0 Broken Object Level Authorization via CanvasService gRPC

    YüksekCVSS 8,7İstismar yokEPSS %0

    superplanehq · superplane28 Tem 2026

  • CVE-2026-16313
    30İzleyin

    Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

    YüksekCVSS 7,6İstismar yokEPSS %0

    red hat · red hat enterprise linux 1028 Tem 2026

  • CVE-2026-54603
    34İzleyin

    OAuth2::Client#request: Protocol-relative redirect Location overrides authority, leaking bearer Authorization to attacker host

    YüksekCVSS 8,6İstismar yokEPSS %0

    ruby-oauth · oauth228 Tem 2026

  • CVE-2026-13442
    28İzleyin

    Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    langflow · langflow28 Tem 2026

  • CVE-2026-13463
    30İzleyin

    Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · cloud pak system28 Tem 2026

  • CVE-2026-14446
    39İzleyin

    IBM WebSphere Application Server is affected by a privilege escalation

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · websphere application server28 Tem 2026

  • CVE-2026-14512
    39İzleyin

    IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · websphere application server28 Tem 2026

  • CVE-2026-14528
    30İzleyin

    IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · websphere application server28 Tem 2026

  • CVE-2026-14893
    29İzleyin

    IBM Instana Observability is affected by multiple Prototype Pollution within Instana Agent container image

    YüksekCVSS 7,3İstismar yokEPSS %0

    ibm · observability with instana (agent)28 Tem 2026

  • CVE-2026-14958
    28İzleyin

    OS command injection in IBM Aspera Faspex

    YüksekCVSS 7,2İstismar yokEPSS %0

    ibm · aspera faspex28 Tem 2026

  • CVE-2026-14959
    28İzleyin

    OS Command Injection in IBM Aspera Faspex

    YüksekCVSS 7,2İstismar yokEPSS %1

    ibm · aspera faspex28 Tem 2026

  • CVE-2026-14973
    37İzleyin

    Path Traversal in IBM Desktop App

    KritikCVSS 9,3İstismar yokEPSS %0

    ibm · aspera28 Tem 2026

  • CVE-2026-14974
    39İzleyin

    IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · websphere application server28 Tem 2026

  • CVE-2026-14976
    39İzleyin

    IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · websphere application server28 Tem 2026

  • CVE-2026-14981
    30İzleyin

    IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · websphere application server28 Tem 2026

  • CVE-2026-14996
    32İzleyin

    Multiple vulnerabilities in IBM Aspera Faspex

    YüksekCVSS 8,2İstismar yokEPSS %0

    ibm · aspera faspex28 Tem 2026

  • CVE-2026-15057
    30İzleyin

    IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · websphere application server28 Tem 2026

  • CVE-2026-15064
    34İzleyin

    IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

    YüksekCVSS 8,7İstismar yokEPSS %0

    ibm · websphere application server28 Tem 2026

  • CVE-2026-15280
    30İzleyin

    IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · websphere application server28 Tem 2026

  • CVE-2026-15325
    34İzleyin

    IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

    YüksekCVSS 8,7İstismar yokEPSS %0

    ibm · websphere application server28 Tem 2026