Yayın tarihine göre
Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları
7.294 kayıt · 20 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 11 / 73
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2026-68823İstismar yok | Azure Confidential Ledger Remote Code Execution Vulnerabilitymicrosoft · azure confidential ledger · CWE-749 | Kritik9,1 | — | %0,9 | 6 Ağu 2026 |
38İzleyin | CVE-2026-70332İstismar yok | Microsoft Office SharePoint Spoofing Vulnerabilitymicrosoft · sharepoint online · CWE-79 | Kritik9,6 | — | %0,8 | 6 Ağu 2026 |
30İzleyin | GHSA-5p4m-2wfm-xmqjİstismar yok | JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backportednpm · js-yaml · CWE-407 | Yüksek7,5 | — | — | 6 Ağu 2026 |
30İzleyin | GHSA-g2gp-3wwq-f4phİstismar yok | league/commonmark: Denial of service via adjacent inline attribute blocksPackagist · league/commonmark · CWE-407 | Yüksek7,5 | — | — | 6 Ağu 2026 |
30İzleyin | GHSA-jfm3-95jq-q3rfİstismar yok | league/commonmark: Denial of service via duplicate footnote definitionsPackagist · league/commonmark · CWE-407 | Yüksek7,5 | — | — | 6 Ağu 2026 |
30İzleyin | GHSA-mh25-x5hq-wrqpİstismar yok | league/commonmark: Denial of service via colliding heading slugsPackagist · league/commonmark · CWE-407 | Yüksek7,5 | — | — | 6 Ağu 2026 |
32İzleyin | GHSA-w9hm-4m3m-fxmmİstismar yok | ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633npm · ngx-extended-pdf-viewer · CWE-1103 | Yüksek8,0 | — | — | 6 Ağu 2026 |
36İzleyin | CVE-2025-14561İstismar yok | Access Control Bypass via Publisher REST APIs in Multiple WSO2 Products Allows Cross-Tenant Operationswso2 · wso2 api manager · CWE-284 | Kritik9,0 | — | %0,4 | 6 Ağu 2026 |
31İzleyin | CVE-2026-11803İstismar yok | PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Productsautodesk · revit · CWE-125 | Yüksek7,8 | — | %0,1 | 6 Ağu 2026 |
31İzleyin | CVE-2026-1289İstismar yok | PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Productsautodesk · revit · CWE-416 | Yüksek7,8 | — | %0,1 | 6 Ağu 2026 |
31İzleyin | CVE-2026-8325İstismar yok | PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Productsautodesk · revit · CWE-787 | Yüksek7,8 | — | %0,1 | 6 Ağu 2026 |
28İzleyin | CVE-2026-19189İstismar yok | Power Sofware PowerISO Kernel Driver scdemu.sys privileges managementpower sofware · poweriso · CWE-266 | Yüksek7,1 | — | %0,1 | 6 Ağu 2026 |
31İzleyin | CVE-2026-45198İstismar yok | GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrustedimagination technologies · graphics ddk · CWE-822 | Yüksek7,8 | — | %0,1 | 6 Ağu 2026 |
28İzleyin | CVE-2026-49746İstismar yok | GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMemimagination technologies · graphics ddk · CWE-823 | Yüksek7,1 | — | %0,1 | 6 Ağu 2026 |
28İzleyin | CVE-2026-19190İstismar yok | StableBit Scanner ScannerService Scanner.Service.exe permissionstablebit · scanner · CWE-266 | Yüksek7,1 | — | %0,1 | 7 Ağu 2026 |
39İzleyin | CVE-2026-14364İstismar yok | TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'themetechmount · truebooker – appointment booking and scheduler system · CWE-640 | Kritik9,8 | — | %0,5 | 7 Ağu 2026 |
39İzleyin | CVE-2026-14365İstismar yok | TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'themetechmount · truebooker – appointment booking and scheduler system · CWE-862 | Kritik9,8 | — | %0,5 | 7 Ağu 2026 |
28İzleyin | CVE-2026-19191İstismar yok | StableBit DrivePool DrivePoolService DrivePool.Service.exe permissionstablebit · drivepool · CWE-266 | Yüksek7,1 | — | %0,1 | 7 Ağu 2026 |
28İzleyin | CVE-2026-19192İstismar yok | DeepCool DisplayService DeepCoolDisplayService.exe access controldeepcool · displayservice · CWE-266 | Yüksek7,1 | — | %0,1 | 7 Ağu 2026 |
28İzleyin | CVE-2026-19193Kavram kanıtı | Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access controljiangmin · antivirus · CWE-266 | Yüksek7,1 | — | %0,1 | 7 Ağu 2026 |
28İzleyin | CVE-2026-19195Kavram kanıtı | V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access controlv-secure · jingyun antivirus · CWE-266 | Yüksek7,1 | — | %0,1 | 7 Ağu 2026 |
39İzleyin | CVE-2026-14205İstismar yok | WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameterunknown · wp events manager · CWE-287 | Kritik9,8 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-14943İstismar yok | Password Protected < 2.8.4 - Unauthenticated Sensitive Information Exposure via REST APIunknown · password protected — lock entire site, pages, posts, categories, and partial content · CWE-200 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
35İzleyin | CVE-2026-15215İstismar yok | Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installationunknown · subscriptions for woocommerce · CWE-269 | Yüksek8,8 | — | %0,6 | 7 Ağu 2026 |
32İzleyin | CVE-2026-15361İstismar yok | Content Views < 4.5 - Subscriber+ SQL Injection via preview_requestunknown · content views · CWE-89 | Yüksek8,1 | — | %0,3 | 7 Ağu 2026 |
32İzleyin | CVE-2026-16030İstismar yok | MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Authenticationunknown · mstore api · CWE-287 | Yüksek8,1 | — | %0,3 | 7 Ağu 2026 |
36İzleyin | CVE-2026-16038İstismar yok | MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gatewaysunknown · mstore api · CWE-862 | Kritik9,1 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-16041İstismar yok | MStore API < 4.21.0 - Unauthenticated Product Review Creationunknown · mstore api · CWE-862 | Yüksek7,5 | — | %0,3 | 7 Ağu 2026 |
39İzleyin | CVE-2026-16258İstismar yok | Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpointunknown · ajax search lite · CWE-502 | Kritik9,8 | — | %0,8 | 7 Ağu 2026 |
30İzleyin | CVE-2026-16262İstismar yok | Estatik < 4.3.3 - Login CSRFunknown · estatik real estate plugin · CWE-352 | Yüksek7,5 | — | %0,2 | 7 Ağu 2026 |
35İzleyin | CVE-2026-16263İstismar yok | WP Maps < 4.9.7 - Subscriber+ Local File Inclusionunknown · wp maps · CWE-22 | Yüksek8,8 | — | %0,5 | 7 Ağu 2026 |
26İzleyin | CVE-2026-16265Kavram kanıtı | WP Maps < 4.9.7 - Subscriber+ Denial of Serviceunknown · wp maps · CWE-400 | Orta6,5 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-49007İstismar yok | Information leakage vulnerability in ZTE F689 productzte · f689 · CWE-798 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
32İzleyin | CVE-2026-66491Kavram kanıtı | Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3phoca.cz · phoca commander extension for joomla · CWE-22 | Yüksek8,2 | — | %0,4 | 7 Ağu 2026 |
24İzleyin | CVE-2026-66492Kavram kanıtı | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3phoca.cz · phoca commander extension for joomla · CWE-22 | Orta6,1 | — | %0,5 | 7 Ağu 2026 |
25İzleyin | CVE-2026-66493Kavram kanıtı | Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3phoca.cz · phoca commander extension for joomla · CWE-22 | Orta6,4 | — | %0,4 | 7 Ağu 2026 |
35İzleyin | CVE-2026-9169İstismar yok | LUCID Vision Labs: DLL Search Order Hijacking in Arena SDK 1.0.80.49 on Windowslucid vision labs · arena sdk · CWE-427 | Yüksek8,8 | — | %0,1 | 7 Ağu 2026 |
33İzleyin | CVE-2026-12070İstismar yok | TeamDavid: Arbitrary File Deletion via form field 'scjob'tobit laboratories ag · teamdavid · CWE-73 | Yüksek8,4 | — | %0,3 | 7 Ağu 2026 |
33İzleyin | CVE-2026-54200İstismar yok | TeamDavid: Local File Inclusion via the form field 'scjob'tobit laboratories ag · teamdavid · CWE-73 | Yüksek8,4 | — | %0,4 | 7 Ağu 2026 |
34İzleyin | CVE-2026-54202İstismar yok | TeamDavid: Path Traversal in the archive creation functionalitytobit laboratories ag · teamdavid · CWE-36 | Yüksek8,5 | — | %0,4 | 7 Ağu 2026 |
36İzleyin | CVE-2026-54203İstismar yok | TeamDavid: Memory Leak leaking sensitive informationtobit laboratories ag · teamdavid · CWE-200 | Kritik9,2 | — | %0,5 | 7 Ağu 2026 |
30İzleyin | CVE-2026-54204İstismar yok | TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionalitytobit laboratories ag · teamdavid · CWE-20 | Yüksek7,7 | — | %0,5 | 7 Ağu 2026 |
34İzleyin | CVE-2026-54208İstismar yok | TeamDavid: Arbitrary File Write leading to Stored XSStobit laboratories ag · teamdavid · CWE-20 | Yüksek8,5 | — | %0,5 | 7 Ağu 2026 |
35İzleyin | CVE-2026-54209İstismar yok | TeamDavid: Buffer Overflow in 'editini' functiontobit laboratories ag · teamdavid · CWE-125 | Yüksek8,9 | — | %0,4 | 7 Ağu 2026 |
38İzleyin | CVE-2026-54210İstismar yok | TeamDavid: Buffer Overflow in file names of file upload functionalitiestobit laboratories ag · teamdavid · CWE-787 | Kritik9,5 | — | %0,6 | 7 Ağu 2026 |
38İzleyin | CVE-2026-54211İstismar yok | TeamDavid: Buffer Overflow in multiple form data parameterstobit laboratories ag · teamdavid · CWE-787 | Kritik9,5 | — | %0,6 | 7 Ağu 2026 |
38İzleyin | CVE-2026-54212İstismar yok | TeamDavid: Buffer Overflow in JSON-parsingtobit laboratories ag · teamdavid · CWE-787 | Kritik9,5 | — | %0,6 | 7 Ağu 2026 |
36İzleyin | CVE-2026-54213İstismar yok | TeamDavid: Denial of Service via endpoint 'internalRestart'tobit laboratories ag · teamdavid · CWE-284 | Kritik9,2 | — | %0,7 | 7 Ağu 2026 |
35İzleyin | CVE-2026-54218İstismar yok | TeamDavid: Weak Cryptography and Insecure Password Storagetobit laboratories ag · teamdavid · CWE-321 | Yüksek8,8 | — | %0,4 | 7 Ağu 2026 |
39İzleyin | CVE-2026-71558İstismar yok | Apache Fory: Heap type confusion in C++ polymorphic smart-pointer deserializationapache · fory · CWE-502 | Kritik9,8 | — | %0,9 | 7 Ağu 2026 |
30İzleyin | CVE-2026-71559İstismar yok | Apache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadataapache · fory · CWE-502 | Yüksek7,5 | — | %0,7 | 7 Ağu 2026 |
36İzleyin | CVE-2026-71560İstismar yok | Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-pathapache · fory · CWE-502 | Kritik9,1 | — | %0,7 | 7 Ağu 2026 |
39İzleyin | CVE-2026-56793İstismar yok | Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability.dell · openmanage server administrator · CWE-287 | Kritik9,8 | — | %0,5 | 7 Ağu 2026 |
34İzleyin | CVE-2026-66494İstismar yok | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0joomshaper.com · sp page builder extension for joomla · CWE-79 | Yüksek8,7 | — | %0,4 | 7 Ağu 2026 |
28İzleyin | CVE-2026-15570İstismar yok | Improper URL Scheme and Destination Validation in SmartCenter browserseturl Commandvestel · telefunken te24553b45v2dz smart tv · CWE-918 | Yüksek7,1 | — | %0,2 | 7 Ağu 2026 |
36İzleyin | CVE-2026-66914İstismar yok | Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1seblod.com · seblod extension for joomla · CWE-22 | Kritik9,2 | — | %0,5 | 7 Ağu 2026 |
37İzleyin | CVE-2022-4995İstismar yok | Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jspweaver network co., ltd. · e-cology 9.0 · CWE-434 | Kritik9,3 | — | %1,1 | 7 Ağu 2026 |
28İzleyin | CVE-2026-18497İstismar yok | The nothings stb TrueType library contains a heap buffer overflow vulnerabilitysean barrett (nothings) · nothings stb · CWE-122 | Yüksek7,1 | — | %0,1 | 7 Ağu 2026 |
37İzleyin | CVE-2026-19264Kavram kanıtı | Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeovergitroomhq · postiz-app · CWE-22 | Kritik9,3 | — | %1,0 | 7 Ağu 2026 |
30İzleyin | CVE-2026-15816İstismar yok | Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()red hat · red hat enterprise linux 10 · CWE-78 | Yüksek7,5 | — | %0,3 | 7 Ağu 2026 |
34İzleyin | CVE-2026-14644İstismar yok | Nexus Repository 3 - Privilege Escalationsonatype · nexus repository manager · CWE-843 | Yüksek8,6 | — | %0,3 | 7 Ağu 2026 |
28İzleyin | CVE-2026-17593İstismar yok | Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configurationsonatype · nexus repository manager · CWE-470 | Yüksek7,2 | — | %0,7 | 7 Ağu 2026 |
32İzleyin | CVE-2026-17594Kavram kanıtı | Nexus Repository 3 - Authorization Bypass in Repository Creationsonatype · nexus repository manager · CWE-863 | Yüksek8,2 | — | %0,7 | 7 Ağu 2026 |
34İzleyin | CVE-2026-17600İstismar yok | Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivationsonatype · nexus repository manager · CWE-613 | Yüksek8,7 | — | %0,2 | 7 Ağu 2026 |
35İzleyin | CVE-2026-17601İstismar yok | Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administratorsonatype · nexus repository manager · CWE-862 | Yüksek8,9 | — | %0,2 | 7 Ağu 2026 |
34İzleyin | CVE-2026-17603İstismar yok | Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration APIsonatype · nexus repository manager · CWE-94 | Yüksek8,7 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-20337İstismar yok | ClamAV ZIP File Format Processing Memory Corruption Vulnerabilitycisco · cisco secure endpoint · CWE-120 | Yüksek7,5 | — | %0,5 | 7 Ağu 2026 |
30İzleyin | CVE-2026-20338İstismar yok | ClamAV ZIP File Format Processing Memory Corruption Vulnerabilitycisco · cisco secure endpoint · CWE-415 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-20339İstismar yok | ClamAV PESpin File Format Processing Integer Overflow Vulnerabilitycisco · cisco secure endpoint · CWE-190 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-20345İstismar yok | ClamAV GPT File Format Processing Memory Corruption Vulnerabilitycisco · cisco secure endpoint · CWE-121 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-20346İstismar yok | ClamAV PDF File Format Processing Memory Corruption Vulnerabilitycisco · cisco secure endpoint · CWE-125 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-20347İstismar yok | ClamAV Mach-O File Format Processing Memory Corruption Vulnerabilitycisco · cisco secure endpoint · CWE-125 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-20348İstismar yok | ClamAV XAR File Format Processing Memory Corruption Vulnerabilitycisco · secure endpoint · CWE-120 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
34İzleyin | CVE-2026-67585İstismar yok | Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federationdivvypayhq · absinthe_federation · CWE-770 | Yüksek8,7 | — | %0,7 | 7 Ağu 2026 |
34İzleyin | CVE-2026-68772İstismar yok | ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializerzenml · zenml · CWE-502 | Yüksek8,5 | — | %0,7 | 7 Ağu 2026 |
28İzleyin | CVE-2026-71556İstismar yok | go-git: Worktree operations may follow symlinksgo-git · go-git · CWE-59 | Yüksek7,1 | — | %0,3 | 7 Ağu 2026 |
25İzleyin | CVE-2026-71557Kavram kanıtı | go-git: Malicious reference names may modify files outside the reference storagego-git · go-git · CWE-22 | Orta6,3 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-19082İstismar yok | Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tagstonyc · imager · CWE-125 | Yüksek7,5 | — | %0,5 | 7 Ağu 2026 |
30İzleyin | CVE-2026-64636İstismar yok | An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data frowebpros · plesk · CWE-89 | Yüksek7,7 | — | %0,4 | 7 Ağu 2026 |
39İzleyin | CVE-2026-64637İstismar yok | Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative sessiwebpros · plesk · CWE-269 | Kritik9,9 | — | %0,4 | 7 Ağu 2026 |
35İzleyin | CVE-2026-64638Kavram kanıtı | WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.wordpress · wordpress · CWE-79 | Yüksek8,9 | — | %0,8 | 7 Ağu 2026 |
31İzleyin | CVE-2026-48097İstismar yok | NexTOR_IP_CHANGER has PATH Injection Leading to Arbitrary Command Execution0x5t4l1n · nextor_ip_changer · CWE-78 | Yüksek7,8 | — | %0,2 | 7 Ağu 2026 |
29İzleyin | CVE-2026-48098İstismar yok | NexTOR IP Changer Unsafely Uses sudo and shell=True0x5t4l1n · nextor_ip_changer · CWE-78 | Yüksek7,3 | — | %0,1 | 7 Ağu 2026 |
28İzleyin | CVE-2026-70561İstismar yok | TestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.phptestlinkopensourcetrms · testlink · CWE-639 | Yüksek7,1 | — | %0,3 | 7 Ağu 2026 |
34İzleyin | CVE-2026-71847İstismar yok | Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streamsruby · json · CWE-416 | Yüksek8,7 | — | %0,4 | 7 Ağu 2026 |
36İzleyin | CVE-2026-71851Kavram kanıtı | crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chainbrix · crypto-js · CWE-331 | Kritik9,0 | — | %0,5 | 7 Ağu 2026 |
30İzleyin | CVE-2026-15972İstismar yok | Unauthenticated denial of service via unbounded external gRPC connection acceptancehashicorp · consul · CWE-770 | Yüksek7,5 | — | %0,5 | 7 Ağu 2026 |
34İzleyin | CVE-2026-47659İstismar yok | Pathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename}aehrc · pathling · CWE-22 | Yüksek8,7 | — | %0,6 | 7 Ağu 2026 |
34İzleyin | CVE-2026-47660İstismar yok | Pathling: Explicit oauthMetadataUrl in bulk-submit allows OAuth client credential exfiltrationaehrc · pathling · CWE-522 | Yüksek8,7 | — | %0,5 | 7 Ağu 2026 |
34İzleyin | CVE-2026-47661İstismar yok | Pathling has path traversal in $result endpoint that allows arbitrary warehouse file readaehrc · pathling · CWE-22 | Yüksek8,7 | — | %0,6 | 7 Ağu 2026 |
34İzleyin | CVE-2026-48007İstismar yok | Element Call reports full URLs of visited pages to analytics serverelement-hq · element-call · CWE-200 | Yüksek8,6 | — | %0,2 | 7 Ağu 2026 |
36İzleyin | CVE-2026-48039İstismar yok | Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Tokenpipeboard-co · meta-ads-mcp · CWE-287 | Kritik9,1 | — | %0,5 | 7 Ağu 2026 |
40Planlayın | CVE-2026-61808Kavram kanıtı | LightRAG: Missing Authentication for Critical API Functions in Default Configurationhkuds · lightrag · CWE-306 | Kritik9,8 | — | %2,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-62295İstismar yok | HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of servicehapifhir · org.hl7.fhir.core · CWE-20 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-62296İstismar yok | HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow denial of servicehapifhir · org.hl7.fhir.core · CWE-20 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-65819İstismar yok | gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParsergopacket · gopacket · CWE-125 | Yüksek7,5 | — | %0,6 | 7 Ağu 2026 |
34İzleyin | CVE-2026-47662İstismar yok | Pathling $bulk-submit allows bearer-token exfiltration and persistent warehouse poisoning via unvalidated manifest output URLsaehrc · pathling · CWE-20 | Yüksek8,7 | — | %0,4 | 7 Ağu 2026 |
34İzleyin | CVE-2026-47663İstismar yok | Pathling: Typed CRUD/search/batch providers can lead to server-wide PHI exfiltration and cross-resource mutationaehrc · pathling · CWE-285 | Yüksek8,7 | — | %0,4 | 7 Ağu 2026 |
34İzleyin | CVE-2026-47664İstismar yok | Pathling: $import-pnp operation enables authenticated SSRF, credential leakage, and warehouse data poisoningaehrc · pathling · CWE-20 | Yüksek8,6 | — | %0,2 | 7 Ağu 2026 |
38İzleyin | CVE-2026-50540İstismar yok | Kata Containers: Config Path Annotation Arbitrary File Loadingkata-containers · kata-containers · CWE-20 | Kritik9,6 | — | %0,6 | 7 Ağu 2026 |
- CVE-2026-6882336İzleyin
Azure Confidential Ledger Remote Code Execution Vulnerability
KritikCVSS 9,1İstismar yokEPSS %0microsoft · azure confidential ledger6 Ağu 2026
- CVE-2026-7033238İzleyin
Microsoft Office SharePoint Spoofing Vulnerability
KritikCVSS 9,6İstismar yokEPSS %0microsoft · sharepoint online6 Ağu 2026
- GHSA-5p4m-2wfm-xmqj30İzleyin
JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported
YüksekCVSS 7,5İstismar yoknpm · js-yaml6 Ağu 2026
- GHSA-g2gp-3wwq-f4ph30İzleyin
league/commonmark: Denial of service via adjacent inline attribute blocks
YüksekCVSS 7,5İstismar yokPackagist · league/commonmark6 Ağu 2026
- GHSA-jfm3-95jq-q3rf30İzleyin
league/commonmark: Denial of service via duplicate footnote definitions
YüksekCVSS 7,5İstismar yokPackagist · league/commonmark6 Ağu 2026
- GHSA-mh25-x5hq-wrqp30İzleyin
league/commonmark: Denial of service via colliding heading slugs
YüksekCVSS 7,5İstismar yokPackagist · league/commonmark6 Ağu 2026
- GHSA-w9hm-4m3m-fxmm32İzleyin
ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633
YüksekCVSS 8,0İstismar yoknpm · ngx-extended-pdf-viewer6 Ağu 2026
- CVE-2025-1456136İzleyin
Access Control Bypass via Publisher REST APIs in Multiple WSO2 Products Allows Cross-Tenant Operations
KritikCVSS 9,0İstismar yokEPSS %0wso2 · wso2 api manager6 Ağu 2026
- CVE-2026-1180331İzleyin
PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products
YüksekCVSS 7,8İstismar yokEPSS %0autodesk · revit6 Ağu 2026
- CVE-2026-128931İzleyin
PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products
YüksekCVSS 7,8İstismar yokEPSS %0autodesk · revit6 Ağu 2026
- CVE-2026-832531İzleyin
PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products
YüksekCVSS 7,8İstismar yokEPSS %0autodesk · revit6 Ağu 2026
- CVE-2026-1918928İzleyin
Power Sofware PowerISO Kernel Driver scdemu.sys privileges management
YüksekCVSS 7,1İstismar yokEPSS %0power sofware · poweriso6 Ağu 2026
- CVE-2026-4519831İzleyin
GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted
YüksekCVSS 7,8İstismar yokEPSS %0imagination technologies · graphics ddk6 Ağu 2026
- CVE-2026-4974628İzleyin
GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem
YüksekCVSS 7,1İstismar yokEPSS %0imagination technologies · graphics ddk6 Ağu 2026
- CVE-2026-1919028İzleyin
StableBit Scanner ScannerService Scanner.Service.exe permission
YüksekCVSS 7,1İstismar yokEPSS %0stablebit · scanner7 Ağu 2026
- CVE-2026-1436439İzleyin
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'
KritikCVSS 9,8İstismar yokEPSS %0themetechmount · truebooker – appointment booking and scheduler system7 Ağu 2026
- CVE-2026-1436539İzleyin
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'
KritikCVSS 9,8İstismar yokEPSS %0themetechmount · truebooker – appointment booking and scheduler system7 Ağu 2026
- CVE-2026-1919128İzleyin
StableBit DrivePool DrivePoolService DrivePool.Service.exe permission
YüksekCVSS 7,1İstismar yokEPSS %0stablebit · drivepool7 Ağu 2026
- CVE-2026-1919228İzleyin
DeepCool DisplayService DeepCoolDisplayService.exe access control
YüksekCVSS 7,1İstismar yokEPSS %0deepcool · displayservice7 Ağu 2026
- CVE-2026-1919328İzleyin
Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access control
YüksekCVSS 7,1Kavram kanıtıEPSS %0jiangmin · antivirus7 Ağu 2026
- CVE-2026-1919528İzleyin
V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control
YüksekCVSS 7,1Kavram kanıtıEPSS %0v-secure · jingyun antivirus7 Ağu 2026
- CVE-2026-1420539İzleyin
WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter
KritikCVSS 9,8İstismar yokEPSS %0unknown · wp events manager7 Ağu 2026
- CVE-2026-1494330İzleyin
Password Protected < 2.8.4 - Unauthenticated Sensitive Information Exposure via REST API
YüksekCVSS 7,5İstismar yokEPSS %0unknown · password protected — lock entire site, pages, posts, categories, and partial content7 Ağu 2026
- CVE-2026-1521535İzleyin
Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation
YüksekCVSS 8,8İstismar yokEPSS %0unknown · subscriptions for woocommerce7 Ağu 2026
- CVE-2026-1536132İzleyin
Content Views < 4.5 - Subscriber+ SQL Injection via preview_request
YüksekCVSS 8,1İstismar yokEPSS %0unknown · content views7 Ağu 2026
- CVE-2026-1603032İzleyin
MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Authentication
YüksekCVSS 8,1İstismar yokEPSS %0unknown · mstore api7 Ağu 2026
- CVE-2026-1603836İzleyin
MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gateways
KritikCVSS 9,1İstismar yokEPSS %0unknown · mstore api7 Ağu 2026
- CVE-2026-1604130İzleyin
MStore API < 4.21.0 - Unauthenticated Product Review Creation
YüksekCVSS 7,5İstismar yokEPSS %0unknown · mstore api7 Ağu 2026
- CVE-2026-1625839İzleyin
Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint
KritikCVSS 9,8İstismar yokEPSS %0unknown · ajax search lite7 Ağu 2026
- CVE-2026-1626230İzleyin
Estatik < 4.3.3 - Login CSRF
YüksekCVSS 7,5İstismar yokEPSS %0unknown · estatik real estate plugin7 Ağu 2026
- CVE-2026-1626335İzleyin
WP Maps < 4.9.7 - Subscriber+ Local File Inclusion
YüksekCVSS 8,8İstismar yokEPSS %0unknown · wp maps7 Ağu 2026
- CVE-2026-1626526İzleyin
WP Maps < 4.9.7 - Subscriber+ Denial of Service
OrtaCVSS 6,5Kavram kanıtıEPSS %0unknown · wp maps7 Ağu 2026
- CVE-2026-4900730İzleyin
Information leakage vulnerability in ZTE F689 product
YüksekCVSS 7,5İstismar yokEPSS %0zte · f6897 Ağu 2026
- CVE-2026-6649132İzleyin
Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3
YüksekCVSS 8,2Kavram kanıtıEPSS %0phoca.cz · phoca commander extension for joomla7 Ağu 2026
- CVE-2026-6649224İzleyin
Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3
OrtaCVSS 6,1Kavram kanıtıEPSS %0phoca.cz · phoca commander extension for joomla7 Ağu 2026
- CVE-2026-6649325İzleyin
Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3
OrtaCVSS 6,4Kavram kanıtıEPSS %0phoca.cz · phoca commander extension for joomla7 Ağu 2026
- CVE-2026-916935İzleyin
LUCID Vision Labs: DLL Search Order Hijacking in Arena SDK 1.0.80.49 on Windows
YüksekCVSS 8,8İstismar yokEPSS %0lucid vision labs · arena sdk7 Ağu 2026
- CVE-2026-1207033İzleyin
TeamDavid: Arbitrary File Deletion via form field 'scjob'
YüksekCVSS 8,4İstismar yokEPSS %0tobit laboratories ag · teamdavid7 Ağu 2026
- CVE-2026-5420033İzleyin
TeamDavid: Local File Inclusion via the form field 'scjob'
YüksekCVSS 8,4İstismar yokEPSS %0tobit laboratories ag · teamdavid7 Ağu 2026
- CVE-2026-5420234İzleyin
TeamDavid: Path Traversal in the archive creation functionality
YüksekCVSS 8,5İstismar yokEPSS %0tobit laboratories ag · teamdavid7 Ağu 2026
- CVE-2026-5420336İzleyin
TeamDavid: Memory Leak leaking sensitive information
KritikCVSS 9,2İstismar yokEPSS %0tobit laboratories ag · teamdavid7 Ağu 2026
- CVE-2026-5420430İzleyin
TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionality
YüksekCVSS 7,7İstismar yokEPSS %0tobit laboratories ag · teamdavid7 Ağu 2026
- CVE-2026-5420834İzleyin
TeamDavid: Arbitrary File Write leading to Stored XSS
YüksekCVSS 8,5İstismar yokEPSS %0tobit laboratories ag · teamdavid7 Ağu 2026
- CVE-2026-5420935İzleyin
TeamDavid: Buffer Overflow in 'editini' function
YüksekCVSS 8,9İstismar yokEPSS %0tobit laboratories ag · teamdavid7 Ağu 2026
- CVE-2026-5421038İzleyin
TeamDavid: Buffer Overflow in file names of file upload functionalities
KritikCVSS 9,5İstismar yokEPSS %0tobit laboratories ag · teamdavid7 Ağu 2026
- CVE-2026-5421138İzleyin
TeamDavid: Buffer Overflow in multiple form data parameters
KritikCVSS 9,5İstismar yokEPSS %0tobit laboratories ag · teamdavid7 Ağu 2026
- CVE-2026-5421238İzleyin
TeamDavid: Buffer Overflow in JSON-parsing
KritikCVSS 9,5İstismar yokEPSS %0tobit laboratories ag · teamdavid7 Ağu 2026
- CVE-2026-5421336İzleyin
TeamDavid: Denial of Service via endpoint 'internalRestart'
KritikCVSS 9,2İstismar yokEPSS %0tobit laboratories ag · teamdavid7 Ağu 2026
- CVE-2026-5421835İzleyin
TeamDavid: Weak Cryptography and Insecure Password Storage
YüksekCVSS 8,8İstismar yokEPSS %0tobit laboratories ag · teamdavid7 Ağu 2026
- CVE-2026-7155839İzleyin
Apache Fory: Heap type confusion in C++ polymorphic smart-pointer deserialization
KritikCVSS 9,8İstismar yokEPSS %0apache · fory7 Ağu 2026
- CVE-2026-7155930İzleyin
Apache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadata
YüksekCVSS 7,5İstismar yokEPSS %0apache · fory7 Ağu 2026
- CVE-2026-7156036İzleyin
Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path
KritikCVSS 9,1İstismar yokEPSS %0apache · fory7 Ağu 2026
- CVE-2026-5679339İzleyin
Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability.
KritikCVSS 9,8İstismar yokEPSS %0dell · openmanage server administrator7 Ağu 2026
- CVE-2026-6649434İzleyin
Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0
YüksekCVSS 8,7İstismar yokEPSS %0joomshaper.com · sp page builder extension for joomla7 Ağu 2026
- CVE-2026-1557028İzleyin
Improper URL Scheme and Destination Validation in SmartCenter browserseturl Command
YüksekCVSS 7,1İstismar yokEPSS %0vestel · telefunken te24553b45v2dz smart tv7 Ağu 2026
- CVE-2026-6691436İzleyin
Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1
KritikCVSS 9,2İstismar yokEPSS %0seblod.com · seblod extension for joomla7 Ağu 2026
- CVE-2022-499537İzleyin
Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp
KritikCVSS 9,3İstismar yokEPSS %1weaver network co., ltd. · e-cology 9.07 Ağu 2026
- CVE-2026-1849728İzleyin
The nothings stb TrueType library contains a heap buffer overflow vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0sean barrett (nothings) · nothings stb7 Ağu 2026
- CVE-2026-1926437İzleyin
Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover
KritikCVSS 9,3Kavram kanıtıEPSS %1gitroomhq · postiz-app7 Ağu 2026
- CVE-2026-1581630İzleyin
Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat enterprise linux 107 Ağu 2026
- CVE-2026-1464434İzleyin
Nexus Repository 3 - Privilege Escalation
YüksekCVSS 8,6İstismar yokEPSS %0sonatype · nexus repository manager7 Ağu 2026
- CVE-2026-1759328İzleyin
Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration
YüksekCVSS 7,2İstismar yokEPSS %0sonatype · nexus repository manager7 Ağu 2026
- CVE-2026-1759432İzleyin
Nexus Repository 3 - Authorization Bypass in Repository Creation
YüksekCVSS 8,2Kavram kanıtıEPSS %0sonatype · nexus repository manager7 Ağu 2026
- CVE-2026-1760034İzleyin
Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivation
YüksekCVSS 8,7İstismar yokEPSS %0sonatype · nexus repository manager7 Ağu 2026
- CVE-2026-1760135İzleyin
Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator
YüksekCVSS 8,9İstismar yokEPSS %0sonatype · nexus repository manager7 Ağu 2026
- CVE-2026-1760334İzleyin
Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API
YüksekCVSS 8,7İstismar yokEPSS %0sonatype · nexus repository manager7 Ağu 2026
- CVE-2026-2033730İzleyin
ClamAV ZIP File Format Processing Memory Corruption Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0cisco · cisco secure endpoint7 Ağu 2026
- CVE-2026-2033830İzleyin
ClamAV ZIP File Format Processing Memory Corruption Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0cisco · cisco secure endpoint7 Ağu 2026
- CVE-2026-2033930İzleyin
ClamAV PESpin File Format Processing Integer Overflow Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0cisco · cisco secure endpoint7 Ağu 2026
- CVE-2026-2034530İzleyin
ClamAV GPT File Format Processing Memory Corruption Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0cisco · cisco secure endpoint7 Ağu 2026
- CVE-2026-2034630İzleyin
ClamAV PDF File Format Processing Memory Corruption Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0cisco · cisco secure endpoint7 Ağu 2026
- CVE-2026-2034730İzleyin
ClamAV Mach-O File Format Processing Memory Corruption Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0cisco · cisco secure endpoint7 Ağu 2026
- CVE-2026-2034830İzleyin
ClamAV XAR File Format Processing Memory Corruption Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0cisco · secure endpoint7 Ağu 2026
- CVE-2026-6758534İzleyin
Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federation
YüksekCVSS 8,7İstismar yokEPSS %0divvypayhq · absinthe_federation7 Ağu 2026
- CVE-2026-6877234İzleyin
ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializer
YüksekCVSS 8,5İstismar yokEPSS %0zenml · zenml7 Ağu 2026
- CVE-2026-7155628İzleyin
go-git: Worktree operations may follow symlinks
YüksekCVSS 7,1İstismar yokEPSS %0go-git · go-git7 Ağu 2026
- CVE-2026-7155725İzleyin
go-git: Malicious reference names may modify files outside the reference storage
OrtaCVSS 6,3Kavram kanıtıEPSS %0go-git · go-git7 Ağu 2026
- CVE-2026-1908230İzleyin
Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags
YüksekCVSS 7,5İstismar yokEPSS %0tonyc · imager7 Ağu 2026
- CVE-2026-6463630İzleyin
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data fro
YüksekCVSS 7,7İstismar yokEPSS %0webpros · plesk7 Ağu 2026
- CVE-2026-6463739İzleyin
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative sessi
KritikCVSS 9,9İstismar yokEPSS %0webpros · plesk7 Ağu 2026
- CVE-2026-6463835İzleyin
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
YüksekCVSS 8,9Kavram kanıtıEPSS %0wordpress · wordpress7 Ağu 2026
- CVE-2026-4809731İzleyin
NexTOR_IP_CHANGER has PATH Injection Leading to Arbitrary Command Execution
YüksekCVSS 7,8İstismar yokEPSS %00x5t4l1n · nextor_ip_changer7 Ağu 2026
- CVE-2026-4809829İzleyin
NexTOR IP Changer Unsafely Uses sudo and shell=True
YüksekCVSS 7,3İstismar yokEPSS %00x5t4l1n · nextor_ip_changer7 Ağu 2026
- CVE-2026-7056128İzleyin
TestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.php
YüksekCVSS 7,1İstismar yokEPSS %0testlinkopensourcetrms · testlink7 Ağu 2026
- CVE-2026-7184734İzleyin
Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams
YüksekCVSS 8,7İstismar yokEPSS %0ruby · json7 Ağu 2026
- CVE-2026-7185136İzleyin
crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
KritikCVSS 9,0Kavram kanıtıEPSS %0brix · crypto-js7 Ağu 2026
- CVE-2026-1597230İzleyin
Unauthenticated denial of service via unbounded external gRPC connection acceptance
YüksekCVSS 7,5İstismar yokEPSS %0hashicorp · consul7 Ağu 2026
- CVE-2026-4765934İzleyin
Pathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename}
YüksekCVSS 8,7İstismar yokEPSS %0aehrc · pathling7 Ağu 2026
- CVE-2026-4766034İzleyin
Pathling: Explicit oauthMetadataUrl in bulk-submit allows OAuth client credential exfiltration
YüksekCVSS 8,7İstismar yokEPSS %0aehrc · pathling7 Ağu 2026
- CVE-2026-4766134İzleyin
Pathling has path traversal in $result endpoint that allows arbitrary warehouse file read
YüksekCVSS 8,7İstismar yokEPSS %0aehrc · pathling7 Ağu 2026
- CVE-2026-4800734İzleyin
Element Call reports full URLs of visited pages to analytics server
YüksekCVSS 8,6İstismar yokEPSS %0element-hq · element-call7 Ağu 2026
- CVE-2026-4803936İzleyin
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
KritikCVSS 9,1İstismar yokEPSS %0pipeboard-co · meta-ads-mcp7 Ağu 2026
- CVE-2026-6180840Planlayın
LightRAG: Missing Authentication for Critical API Functions in Default Configuration
KritikCVSS 9,8Kavram kanıtıEPSS %2hkuds · lightrag7 Ağu 2026
- CVE-2026-6229530İzleyin
HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of service
YüksekCVSS 7,5İstismar yokEPSS %0hapifhir · org.hl7.fhir.core7 Ağu 2026
- CVE-2026-6229630İzleyin
HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow denial of service
YüksekCVSS 7,5İstismar yokEPSS %0hapifhir · org.hl7.fhir.core7 Ağu 2026
- CVE-2026-6581930İzleyin
gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParser
YüksekCVSS 7,5İstismar yokEPSS %0gopacket · gopacket7 Ağu 2026
- CVE-2026-4766234İzleyin
Pathling $bulk-submit allows bearer-token exfiltration and persistent warehouse poisoning via unvalidated manifest output URLs
YüksekCVSS 8,7İstismar yokEPSS %0aehrc · pathling7 Ağu 2026
- CVE-2026-4766334İzleyin
Pathling: Typed CRUD/search/batch providers can lead to server-wide PHI exfiltration and cross-resource mutation
YüksekCVSS 8,7İstismar yokEPSS %0aehrc · pathling7 Ağu 2026
- CVE-2026-4766434İzleyin
Pathling: $import-pnp operation enables authenticated SSRF, credential leakage, and warehouse data poisoning
YüksekCVSS 8,6İstismar yokEPSS %0aehrc · pathling7 Ağu 2026
- CVE-2026-5054038İzleyin
Kata Containers: Config Path Annotation Arbitrary File Loading
KritikCVSS 9,6İstismar yokEPSS %0kata-containers · kata-containers7 Ağu 2026