Yayın tarihine göre
Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları
7.294 kayıt · 20 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 12 / 73
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-66060İstismar yok | Home Assistant: Unconfirmed NFC/QR tag scans allow silent automation execution by untrusted callershome-assistant · core · CWE-862 | Yüksek7,1 | — | %0,1 | 7 Ağu 2026 |
28İzleyin | CVE-2026-66061İstismar yok | Home Assistant: iOS Companion app forwards NFC/QR tag scans without confirmation, enabling silent automation executionhome-assistant · core · CWE-862 | Yüksek7,1 | — | %0,1 | 7 Ağu 2026 |
28İzleyin | CVE-2026-45808İstismar yok | OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACLopenbao · openbao · CWE-863 | Yüksek7,1 | — | %0,4 | 7 Ağu 2026 |
36İzleyin | CVE-2026-47243İstismar yok | Kata guest escape: runtime-rs guest-root to host-root escape via virtiofskata-containers · kata-containers · CWE-22 | Kritik9,2 | — | %0,1 | 7 Ağu 2026 |
35İzleyin | CVE-2026-48169İstismar yok | PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform APImervinpraison · praisonai-platform · CWE-639 | Yüksek8,8 | — | %0,4 | 7 Ağu 2026 |
36İzleyin | CVE-2026-48170İstismar yok | scimPatch vulnerable to prototype pollution via unfiltered keys in patchthomaspoignant · scim-patch · CWE-1321 | Kritik9,1 | — | %0,4 | 7 Ağu 2026 |
28İzleyin | CVE-2026-58262İstismar yok | Klever-Go: PubKeysBitmap padding bits bypass the BLS signature quorumklever-io · klever-go · CWE-345 | Yüksek7,1 | — | %0,1 | 7 Ağu 2026 |
38İzleyin | CVE-2026-46409İstismar yok | OpenYak local API: unauthenticated CSRF chain leads to Remote Code Executionopenyak · openyak · CWE-94 | Kritik9,6 | — | %0,2 | 7 Ağu 2026 |
30İzleyin | CVE-2026-47249İstismar yok | Klever-Go KVM: Hash-array amplification in P2P resolver request handlingklever-io · klever-go · CWE-400 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
34İzleyin | CVE-2026-48026İstismar yok | lakeFS vulnerable to stored XSS in rendered markdown previews via raw HTMLtreeverse · lakefs · CWE-79 | Yüksek8,7 | — | %0,3 | 7 Ağu 2026 |
34İzleyin | CVE-2026-48120İstismar yok | Kakoune has a Critical RCE via Autorestore Backup Filename Injectionmawww · kakoune · CWE-74 | Yüksek8,6 | — | %0,1 | 7 Ağu 2026 |
30İzleyin | CVE-2026-52878İstismar yok | Klever-Go: Unauthenticated nil-pointer DoS in P2P transaction validation can halt the chainklever-io · klever-go · CWE-476 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-52879İstismar yok | Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoSklever-io · klever-go · CWE-400 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2026-52880İstismar yok | Klever-Go: REST API slow-header connection exhaustion via Gin Engine.Runklever-io · klever-go · CWE-400 | Yüksek7,5 | — | %0,4 | 7 Ağu 2026 |
30İzleyin | CVE-2025-63235İstismar yok | In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CONNECT packets.CWE-400 | Yüksek7,5 | — | %0,3 | 7 Ağu 2026 |
28İzleyin | CVE-2025-71409İstismar yok | No Authentication for Very High Frequency Data Link messages used in CPDLCatn-b1 · cpdlc · CWE-306 | Yüksek7,1 | — | %0,3 | 7 Ağu 2026 |
28İzleyin | CVE-2025-71412İstismar yok | In CPDLC, False Emergency or Status Messages Will be Accepted as Legitimateatn-b1 · cpdlc · CWE-754 | Yüksek7,1 | — | %0,3 | 7 Ağu 2026 |
34İzleyin | CVE-2026-8798İstismar yok | Native entropy source retries the CPU entropy instructions without limitlegion of the bouncy castle inc. · bc-fja · CWE-835 | Yüksek8,7 | — | %0,4 | 7 Ağu 2026 |
34İzleyin | CVE-2026-13505İstismar yok | Zeroisation of sensitive key material on garbage collection relies on finalizationlegion of the bouncy castle inc. · bc-fja · CWE-772 | Yüksek8,7 | — | %0,2 | 7 Ağu 2026 |
39İzleyin | CVE-2026-14526İstismar yok | AI Copilot – Content Generator <= 1.5.6 - Unauthenticated Privilege Escalation via Custom Workflow Routewupsales · ai copilot – content generator · CWE-269 | Kritik9,8 | — | %0,9 | 8 Ağu 2026 |
32İzleyin | CVE-2026-16267İstismar yok | Newsletters < 4.16 - Unauthenticated PHP Object Injection via Date Form Fieldunknown · newsletters · CWE-502 | Yüksek8,1 | — | %0,4 | 8 Ağu 2026 |
30İzleyin | CVE-2026-16578İstismar yok | Admin Safety Guard < 1.4.0 - Unauthenticated User Data Disclosure via 2fa/app/users REST Routeunknown · admin safety guard — login security, limit logins, 2fa & brute force protection · CWE-200 | Yüksek7,5 | — | %0,4 | 8 Ağu 2026 |
30İzleyin | CVE-2026-16589İstismar yok | WP Directory Kit < 1.5.5 - Subscriber+ SQL Injection via data_fields_list Parameterunknown · wp directory kit · CWE-89 | Yüksek7,7 | — | %0,3 | 8 Ağu 2026 |
30İzleyin | CVE-2026-16594İstismar yok | WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosureunknown · wp directory kit · CWE-200 | Yüksek7,5 | — | %0,4 | 8 Ağu 2026 |
32İzleyin | CVE-2026-16948İstismar yok | Solace Extra < 1.6.1 - Subscriber+ Multiple Missing Authorization via Site-Wide Nonce Exposureunknown · solace extra · CWE-284 | Yüksek8,1 | — | %0,3 | 8 Ağu 2026 |
39İzleyin | CVE-2026-68082İstismar yok | libceph: fix two unsafe bare decodes in decode_lockers()linux · linux | Kritik9,8 | — | %0,3 | 8 Ağu 2026 |
31İzleyin | CVE-2026-42170İstismar yok | Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)redhat · enterprise linux · CWE-131 | Yüksek7,8 | — | %0,1 | 8 Ağu 2026 |
25İzleyin | CVE-2026-67620Kavram kanıtı | Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-Listflowiseai · flowise · CWE-918 | Orta6,3 | — | %0,4 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71944İstismar yok | D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuecteld-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71945İstismar yok | D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocomd-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71946İstismar yok | D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRund-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71947İstismar yok | D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRund-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71948İstismar yok | D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRund-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71949İstismar yok | D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetupd-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71950İstismar yok | D-Link DWR-M961 Command Injection via /boafrm/formSmsManaged-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71951İstismar yok | D-Link DWR-M961 Command Injection via /boafrm/formIMEISetupd-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71952İstismar yok | D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetupd-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71953İstismar yok | D-Link DWR-M961 Command Injection via /boafrm/formNtpd-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71954İstismar yok | D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetupd-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71955İstismar yok | D-Link DWR-M961 Command Injection via /boafrm/formWscd-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71956İstismar yok | D-Link DWR-M961 Command Injection via app.cgid-link corporation · dwr-m961 · CWE-78 | Kritik9,3 | — | %3,1 | 8 Ağu 2026 |
37İzleyin | CVE-2026-71957İstismar yok | D-Link DWR-M961 Buffer Overflow via app.cgid-link corporation · dwr-m961 · CWE-120 | Kritik9,3 | — | %1,0 | 8 Ağu 2026 |
37İzleyin | CVE-2026-71958İstismar yok | D-Link DWR-M961 Buffer Overflow via quicksetup.cgid-link corporation · dwr-m961 · CWE-120 | Kritik9,3 | — | %1,0 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71983İstismar yok | MSI Radix AXE6600 v781521 Command Injection via wps.cgimsi · radix axe6600 · CWE-78 | Kritik9,3 | — | %2,4 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71984İstismar yok | MSI Radix AXE6600 v781521 Command Injection via urlfiltermsi · radix axe6600 · CWE-78 | Kritik9,3 | — | %2,4 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71985İstismar yok | MSI Radix AXE6600 v781521 Command Injection via accesscontrol Functionmsi · radix axe6600 · CWE-78 | Kritik9,3 | — | %2,4 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71986İstismar yok | MSI Radix AXE6600 v781521 Command Injection via dmz Functionmsi · radix axe6600 · CWE-78 | Kritik9,3 | — | %2,4 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71987İstismar yok | MSI Radix AXE6600 v781521 Command Injection via alg functionmsi · radix axe6600 · CWE-78 | Kritik9,3 | — | %2,4 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71988İstismar yok | MSI Radix AXE6600 v781521 Command Injection via portFw functionmsi · radix axe6600 · CWE-78 | Kritik9,3 | — | %2,4 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71989İstismar yok | MSI Radix AXE6600 v781521 Command Injection via porTrigger functionmsi · radix axe6600 · CWE-78 | Kritik9,3 | — | %2,4 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71990İstismar yok | MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Functionmsi · radix axe6600 · CWE-78 | Kritik9,3 | — | %2,4 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71991İstismar yok | MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Functionmsi · radix axe6600 · CWE-78 | Kritik9,3 | — | %2,4 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71992İstismar yok | MSI Radix AXE6600 v781521 Command Injection via macfiltermsi · radix axe6600 · CWE-78 | Kritik9,3 | — | %2,4 | 8 Ağu 2026 |
38İzleyin | CVE-2026-71993İstismar yok | MSI Radix AXE6600 v781521 Command Injection via openvpn functionmsi · radix axe6600 · CWE-78 | Kritik9,3 | — | %2,4 | 8 Ağu 2026 |
30İzleyin | CVE-2026-17510İstismar yok | Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attributejonasbn · crypt::openssl::pkcs12 · CWE-476 | Yüksek7,5 | — | %0,6 | 8 Ağu 2026 |
30İzleyin | CVE-2026-10595İstismar yok | Path Traversal Vulnerability in parisneo/lollmsparisneo · parisneo/lollms · CWE-23 | Yüksek7,5 | — | %0,7 | 9 Ağu 2026 |
39İzleyin | CVE-2026-15038Kavram kanıtı | InfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisiteunknown · infinitewp client · CWE-287 | Kritik9,8 | — | %0,7 | 9 Ağu 2026 |
30İzleyin | CVE-2026-16988İstismar yok | GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpointunknown · geodirectory · CWE-200 | Yüksek7,5 | — | %0,4 | 9 Ağu 2026 |
32İzleyin | CVE-2026-17017İstismar yok | CubeWP Framework < 1.1.31 - Subscriber+ SQL Injection via cubewp_remove_relationunknown · cubewp framework · CWE-89 | Yüksek8,1 | — | %0,3 | 9 Ağu 2026 |
34İzleyin | CVE-2026-17044İstismar yok | WordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadidunknown · iptanus file upload · CWE-89 | Yüksek8,6 | — | %0,4 | 9 Ağu 2026 |
30İzleyin | CVE-2026-18032İstismar yok | WP Data Access < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypassunknown · wp data access · CWE-200 | Yüksek7,5 | — | %0,4 | 9 Ağu 2026 |
30İzleyin | CVE-2026-18357İstismar yok | WPC Order Tip for WooCommerce < 3.3.1 - Unauthenticated Order Data Disclosureunknown · wpc order tip for woocommerce · CWE-200 | Yüksek7,5 | — | %0,4 | 9 Ağu 2026 |
30İzleyin | CVE-2026-18464Kavram kanıtı | WP Maps Pro < 6.1.3 - Unauthenticated Denial of Serviceunknown · wp maps pro · CWE-400 | Yüksek7,5 | — | %0,4 | 9 Ağu 2026 |
36İzleyin | CVE-2026-18473İstismar yok | WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameterunknown · wp directory kit · CWE-89 | Kritik9,1 | — | %0,4 | 9 Ağu 2026 |
29İzleyin | CVE-2026-19341İstismar yok | UTT HiPER 1200GW pptpSrvGlobalConfig strcpy stack-based overflowutt · hiper 1200gw · CWE-119 | Yüksek7,4 | — | %0,5 | 9 Ağu 2026 |
30İzleyin | CVE-2026-19346İstismar yok | Tenda CH22 CertListInfo formCertListInfo command injectiontenda · ch22 · CWE-74 | Yüksek7,4 | — | %2,7 | 9 Ağu 2026 |
36İzleyin | CVE-2026-19348İstismar yok | Shenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injectionshenzhen aitemi · m300 wi-fi repeater · CWE-74 | Yüksek8,9 | — | %3,5 | 9 Ağu 2026 |
28İzleyin | CVE-2026-19381İstismar yok | Kingston FURY CTRL RGB Control Software Driver NTIOLib_KSFX.sys privileges managementkingston · fury ctrl rgb control software · CWE-266 | Yüksek7,1 | — | %0,1 | 9 Ağu 2026 |
30İzleyin | CVE-2026-19387İstismar yok | Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoderred hat · red hat enterprise linux 10 · CWE-787 | Yüksek7,6 | — | %0,3 | 9 Ağu 2026 |
28İzleyin | CVE-2026-19389İstismar yok | Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds readred hat · red hat enterprise linux 10 · CWE-190 | Yüksek7,1 | — | %0,4 | 9 Ağu 2026 |
33İzleyin | CVE-2026-13133İstismar yok | A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative ly corporation · line for windows · CWE-427 | Yüksek8,4 | — | %0,1 | 10 Ağu 2026 |
28İzleyin | CVE-2026-13170İstismar yok | Eventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template Settingunknown · eventin · CWE-22 | Yüksek7,2 | — | %0,5 | 10 Ağu 2026 |
32İzleyin | CVE-2026-13600İstismar yok | AutoNetTV Relay < 3.0.14 - Unauthenticated Privilege Escalation via Scheduled Sync Cronunknown · autonettv relay · CWE-287 | Yüksek8,1 | — | %0,4 | 10 Ağu 2026 |
30İzleyin | CVE-2026-14206İstismar yok | HT Contact Form < 2.9.3 - Unauthenticated Saved Form Draft Data Disclosureunknown · ht contact form · CWE-200 | Yüksek7,5 | — | %0,4 | 10 Ağu 2026 |
28İzleyin | CVE-2026-14237İstismar yok | Vitepos < 3.6.0 - Outlet Manager+ Privilege Escalationunknown · vitepos · CWE-269 | Yüksek7,2 | — | %0,4 | 10 Ağu 2026 |
35İzleyin | CVE-2026-14293İstismar yok | Autopay / Blue Media for WooCommerce < 5.0.1 - Unauthenticated Stored XSS via CSS Editorunknown · autopay · CWE-79 | Yüksek8,8 | — | %0,5 | 10 Ağu 2026 |
32İzleyin | CVE-2026-16257İstismar yok | Arvow AI SEO Writer < 1.5.4 - Unauthenticated Arbitrary Post Creation via Webhook Secret Type-Jugglingunknown · arvow ai seo writer · CWE-287 | Yüksek8,2 | — | %0,3 | 10 Ağu 2026 |
39İzleyin | CVE-2026-16298İstismar yok | FoodBoxBooker < 1.0.7 - Unauthenticated Arbitrary Password Resetunknown · foodboxbooker · CWE-269 | Kritik9,8 | — | %0,4 | 10 Ağu 2026 |
39İzleyin | CVE-2026-16299İstismar yok | Single Sign On For TNG < 2.2.0 - Unauthenticated Arbitrary Password Resetunknown · single sign on for tng · CWE-287 | Kritik9,8 | — | %0,4 | 10 Ağu 2026 |
35İzleyin | CVE-2026-16985İstismar yok | Squeeze < 1.7.12 - Author+ Arbitrary File Uploadunknown · squeeze · CWE-434 | Yüksek8,8 | — | %0,7 | 10 Ağu 2026 |
30İzleyin | CVE-2026-17022İstismar yok | Salon Booking System – Free Version < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking Wizardunknown · salon booking system · CWE-200 | Yüksek7,5 | — | %0,4 | 10 Ağu 2026 |
35İzleyin | CVE-2026-17540İstismar yok | Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatchunknown · file manager · CWE-284 | Yüksek8,8 | — | %0,4 | 10 Ağu 2026 |
30İzleyin | CVE-2026-17541İstismar yok | Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosureunknown · file manager · CWE-200 | Yüksek7,5 | — | %0,4 | 10 Ağu 2026 |
30İzleyin | CVE-2026-17542İstismar yok | Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connectorunknown · file manager · CWE-200 | Yüksek7,5 | — | %0,4 | 10 Ağu 2026 |
32İzleyin | CVE-2026-18030İstismar yok | Bricksforge < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Formsunknown · bricksforge · CWE-862 | Yüksek8,1 | — | %0,3 | 10 Ağu 2026 |
32İzleyin | CVE-2026-18468İstismar yok | Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Headerunknown · login & register forms · CWE-287 | Yüksek8,1 | — | %0,3 | 10 Ağu 2026 |
32İzleyin | CVE-2026-18469İstismar yok | Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Code Brute Forceunknown · login & register forms · CWE-287 | Yüksek8,1 | — | %0,3 | 10 Ağu 2026 |
30İzleyin | CVE-2026-18470İstismar yok | Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Responseunknown · login & register forms · CWE-200 | Yüksek7,5 | — | %0,4 | 10 Ağu 2026 |
35İzleyin | CVE-2026-18786İstismar yok | CheckView < 2.3.2 - Administrator Account Creation via REST API Authentication Bypassunknown · checkview · CWE-287 | Yüksek8,8 | — | %0,5 | 10 Ağu 2026 |
30İzleyin | CVE-2026-18946İstismar yok | Contact Form to Any API < 3.0.7 - Unauthenticated Sensitive File Disclosure via Predictable Filenameunknown · contact form to any api · CWE-200 | Yüksek7,5 | — | %0,4 | 10 Ağu 2026 |
34İzleyin | CVE-2026-19049İstismar yok | ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookieunknown · prosolution wp client · CWE-89 | Yüksek8,6 | — | %0,5 | 10 Ağu 2026 |
36İzleyin | CVE-2026-19053İstismar yok | ProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameterunknown · prosolution wp client · CWE-89 | Kritik9,1 | — | %0,4 | 10 Ağu 2026 |
39İzleyin | CVE-2026-19089Kavram kanıtı | Product Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File Uploadunknown · product input fields for woocommerce · CWE-434 | Kritik9,8 | — | %0,8 | 10 Ağu 2026 |
35İzleyin | CVE-2026-64940İstismar yok | Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may anishishi factory · tegalog -fumy otegaru memo logger- · CWE-625 | Yüksek8,8 | — | %0,3 | 10 Ağu 2026 |
28İzleyin | CVE-2026-21064İstismar yok | Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.samsung · android · CWE-284 | Yüksek7,0 | — | %0,1 | 10 Ağu 2026 |
33İzleyin | CVE-2026-21068İstismar yok | Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.samsung · android · CWE-121 | Yüksek8,4 | — | %0,1 | 10 Ağu 2026 |
28İzleyin | CVE-2026-21074İstismar yok | Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege.samsung mobile · bixby · CWE-276 | Yüksek7,2 | — | %0,1 | 10 Ağu 2026 |
28İzleyin | CVE-2026-21079İstismar yok | Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.samsung · smart switch · CWE-311 | Yüksek7,0 | — | %0,0 | 10 Ağu 2026 |
34İzleyin | CVE-2026-66403İstismar yok | DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled.ecovacs robotics · deebot pro m1 · CWE-489 | Yüksek8,7 | — | %0,4 | 10 Ağu 2026 |
34İzleyin | CVE-2026-66405İstismar yok | DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled.ecovacs robotics · deebot pro m1 · CWE-489 | Yüksek8,7 | — | %0,5 | 10 Ağu 2026 |
- CVE-2026-6606028İzleyin
Home Assistant: Unconfirmed NFC/QR tag scans allow silent automation execution by untrusted callers
YüksekCVSS 7,1İstismar yokEPSS %0home-assistant · core7 Ağu 2026
- CVE-2026-6606128İzleyin
Home Assistant: iOS Companion app forwards NFC/QR tag scans without confirmation, enabling silent automation execution
YüksekCVSS 7,1İstismar yokEPSS %0home-assistant · core7 Ağu 2026
- CVE-2026-4580828İzleyin
OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL
YüksekCVSS 7,1İstismar yokEPSS %0openbao · openbao7 Ağu 2026
- CVE-2026-4724336İzleyin
Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs
KritikCVSS 9,2İstismar yokEPSS %0kata-containers · kata-containers7 Ağu 2026
- CVE-2026-4816935İzleyin
PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API
YüksekCVSS 8,8İstismar yokEPSS %0mervinpraison · praisonai-platform7 Ağu 2026
- CVE-2026-4817036İzleyin
scimPatch vulnerable to prototype pollution via unfiltered keys in patch
KritikCVSS 9,1İstismar yokEPSS %0thomaspoignant · scim-patch7 Ağu 2026
- CVE-2026-5826228İzleyin
Klever-Go: PubKeysBitmap padding bits bypass the BLS signature quorum
YüksekCVSS 7,1İstismar yokEPSS %0klever-io · klever-go7 Ağu 2026
- CVE-2026-4640938İzleyin
OpenYak local API: unauthenticated CSRF chain leads to Remote Code Execution
KritikCVSS 9,6İstismar yokEPSS %0openyak · openyak7 Ağu 2026
- CVE-2026-4724930İzleyin
Klever-Go KVM: Hash-array amplification in P2P resolver request handling
YüksekCVSS 7,5İstismar yokEPSS %0klever-io · klever-go7 Ağu 2026
- CVE-2026-4802634İzleyin
lakeFS vulnerable to stored XSS in rendered markdown previews via raw HTML
YüksekCVSS 8,7İstismar yokEPSS %0treeverse · lakefs7 Ağu 2026
- CVE-2026-4812034İzleyin
Kakoune has a Critical RCE via Autorestore Backup Filename Injection
YüksekCVSS 8,6İstismar yokEPSS %0mawww · kakoune7 Ağu 2026
- CVE-2026-5287830İzleyin
Klever-Go: Unauthenticated nil-pointer DoS in P2P transaction validation can halt the chain
YüksekCVSS 7,5İstismar yokEPSS %0klever-io · klever-go7 Ağu 2026
- CVE-2026-5287930İzleyin
Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS
YüksekCVSS 7,5İstismar yokEPSS %0klever-io · klever-go7 Ağu 2026
- CVE-2026-5288030İzleyin
Klever-Go: REST API slow-header connection exhaustion via Gin Engine.Run
YüksekCVSS 7,5İstismar yokEPSS %0klever-io · klever-go7 Ağu 2026
- CVE-2025-6323530İzleyin
In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CONNECT packets.
YüksekCVSS 7,5İstismar yokEPSS %07 Ağu 2026
- CVE-2025-7140928İzleyin
No Authentication for Very High Frequency Data Link messages used in CPDLC
YüksekCVSS 7,1İstismar yokEPSS %0atn-b1 · cpdlc7 Ağu 2026
- CVE-2025-7141228İzleyin
In CPDLC, False Emergency or Status Messages Will be Accepted as Legitimate
YüksekCVSS 7,1İstismar yokEPSS %0atn-b1 · cpdlc7 Ağu 2026
- CVE-2026-879834İzleyin
Native entropy source retries the CPU entropy instructions without limit
YüksekCVSS 8,7İstismar yokEPSS %0legion of the bouncy castle inc. · bc-fja7 Ağu 2026
- CVE-2026-1350534İzleyin
Zeroisation of sensitive key material on garbage collection relies on finalization
YüksekCVSS 8,7İstismar yokEPSS %0legion of the bouncy castle inc. · bc-fja7 Ağu 2026
- CVE-2026-1452639İzleyin
AI Copilot – Content Generator <= 1.5.6 - Unauthenticated Privilege Escalation via Custom Workflow Route
KritikCVSS 9,8İstismar yokEPSS %0wupsales · ai copilot – content generator8 Ağu 2026
- CVE-2026-1626732İzleyin
Newsletters < 4.16 - Unauthenticated PHP Object Injection via Date Form Field
YüksekCVSS 8,1İstismar yokEPSS %0unknown · newsletters8 Ağu 2026
- CVE-2026-1657830İzleyin
Admin Safety Guard < 1.4.0 - Unauthenticated User Data Disclosure via 2fa/app/users REST Route
YüksekCVSS 7,5İstismar yokEPSS %0unknown · admin safety guard — login security, limit logins, 2fa & brute force protection8 Ağu 2026
- CVE-2026-1658930İzleyin
WP Directory Kit < 1.5.5 - Subscriber+ SQL Injection via data_fields_list Parameter
YüksekCVSS 7,7İstismar yokEPSS %0unknown · wp directory kit8 Ağu 2026
- CVE-2026-1659430İzleyin
WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosure
YüksekCVSS 7,5İstismar yokEPSS %0unknown · wp directory kit8 Ağu 2026
- CVE-2026-1694832İzleyin
Solace Extra < 1.6.1 - Subscriber+ Multiple Missing Authorization via Site-Wide Nonce Exposure
YüksekCVSS 8,1İstismar yokEPSS %0unknown · solace extra8 Ağu 2026
- CVE-2026-6808239İzleyin
libceph: fix two unsafe bare decodes in decode_lockers()
KritikCVSS 9,8İstismar yokEPSS %0linux · linux8 Ağu 2026
- CVE-2026-4217031İzleyin
Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)
YüksekCVSS 7,8İstismar yokEPSS %0redhat · enterprise linux8 Ağu 2026
- CVE-2026-6762025İzleyin
Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List
OrtaCVSS 6,3Kavram kanıtıEPSS %0flowiseai · flowise8 Ağu 2026
- CVE-2026-7194438İzleyin
D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectel
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7194538İzleyin
D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocom
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7194638İzleyin
D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRun
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7194738İzleyin
D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRun
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7194838İzleyin
D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRun
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7194938İzleyin
D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetup
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7195038İzleyin
D-Link DWR-M961 Command Injection via /boafrm/formSmsManage
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7195138İzleyin
D-Link DWR-M961 Command Injection via /boafrm/formIMEISetup
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7195238İzleyin
D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetup
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7195338İzleyin
D-Link DWR-M961 Command Injection via /boafrm/formNtp
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7195438İzleyin
D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetup
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7195538İzleyin
D-Link DWR-M961 Command Injection via /boafrm/formWsc
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7195638İzleyin
D-Link DWR-M961 Command Injection via app.cgi
KritikCVSS 9,3İstismar yokEPSS %3d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7195737İzleyin
D-Link DWR-M961 Buffer Overflow via app.cgi
KritikCVSS 9,3İstismar yokEPSS %1d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7195837İzleyin
D-Link DWR-M961 Buffer Overflow via quicksetup.cgi
KritikCVSS 9,3İstismar yokEPSS %1d-link corporation · dwr-m9618 Ağu 2026
- CVE-2026-7198338İzleyin
MSI Radix AXE6600 v781521 Command Injection via wps.cgi
KritikCVSS 9,3İstismar yokEPSS %2msi · radix axe66008 Ağu 2026
- CVE-2026-7198438İzleyin
MSI Radix AXE6600 v781521 Command Injection via urlfilter
KritikCVSS 9,3İstismar yokEPSS %2msi · radix axe66008 Ağu 2026
- CVE-2026-7198538İzleyin
MSI Radix AXE6600 v781521 Command Injection via accesscontrol Function
KritikCVSS 9,3İstismar yokEPSS %2msi · radix axe66008 Ağu 2026
- CVE-2026-7198638İzleyin
MSI Radix AXE6600 v781521 Command Injection via dmz Function
KritikCVSS 9,3İstismar yokEPSS %2msi · radix axe66008 Ağu 2026
- CVE-2026-7198738İzleyin
MSI Radix AXE6600 v781521 Command Injection via alg function
KritikCVSS 9,3İstismar yokEPSS %2msi · radix axe66008 Ağu 2026
- CVE-2026-7198838İzleyin
MSI Radix AXE6600 v781521 Command Injection via portFw function
KritikCVSS 9,3İstismar yokEPSS %2msi · radix axe66008 Ağu 2026
- CVE-2026-7198938İzleyin
MSI Radix AXE6600 v781521 Command Injection via porTrigger function
KritikCVSS 9,3İstismar yokEPSS %2msi · radix axe66008 Ağu 2026
- CVE-2026-7199038İzleyin
MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function
KritikCVSS 9,3İstismar yokEPSS %2msi · radix axe66008 Ağu 2026
- CVE-2026-7199138İzleyin
MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function
KritikCVSS 9,3İstismar yokEPSS %2msi · radix axe66008 Ağu 2026
- CVE-2026-7199238İzleyin
MSI Radix AXE6600 v781521 Command Injection via macfilter
KritikCVSS 9,3İstismar yokEPSS %2msi · radix axe66008 Ağu 2026
- CVE-2026-7199338İzleyin
MSI Radix AXE6600 v781521 Command Injection via openvpn function
KritikCVSS 9,3İstismar yokEPSS %2msi · radix axe66008 Ağu 2026
- CVE-2026-1751030İzleyin
Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute
YüksekCVSS 7,5İstismar yokEPSS %0jonasbn · crypt::openssl::pkcs128 Ağu 2026
- CVE-2026-1059530İzleyin
Path Traversal Vulnerability in parisneo/lollms
YüksekCVSS 7,5İstismar yokEPSS %0parisneo · parisneo/lollms9 Ağu 2026
- CVE-2026-1503839İzleyin
InfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisite
KritikCVSS 9,8Kavram kanıtıEPSS %0unknown · infinitewp client9 Ağu 2026
- CVE-2026-1698830İzleyin
GeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST Endpoint
YüksekCVSS 7,5İstismar yokEPSS %0unknown · geodirectory9 Ağu 2026
- CVE-2026-1701732İzleyin
CubeWP Framework < 1.1.31 - Subscriber+ SQL Injection via cubewp_remove_relation
YüksekCVSS 8,1İstismar yokEPSS %0unknown · cubewp framework9 Ağu 2026
- CVE-2026-1704434İzleyin
WordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadid
YüksekCVSS 8,6İstismar yokEPSS %0unknown · iptanus file upload9 Ağu 2026
- CVE-2026-1803230İzleyin
WP Data Access < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass
YüksekCVSS 7,5İstismar yokEPSS %0unknown · wp data access9 Ağu 2026
- CVE-2026-1835730İzleyin
WPC Order Tip for WooCommerce < 3.3.1 - Unauthenticated Order Data Disclosure
YüksekCVSS 7,5İstismar yokEPSS %0unknown · wpc order tip for woocommerce9 Ağu 2026
- CVE-2026-1846430İzleyin
WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service
YüksekCVSS 7,5Kavram kanıtıEPSS %0unknown · wp maps pro9 Ağu 2026
- CVE-2026-1847336İzleyin
WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameter
KritikCVSS 9,1İstismar yokEPSS %0unknown · wp directory kit9 Ağu 2026
- CVE-2026-1934129İzleyin
UTT HiPER 1200GW pptpSrvGlobalConfig strcpy stack-based overflow
YüksekCVSS 7,4İstismar yokEPSS %0utt · hiper 1200gw9 Ağu 2026
- CVE-2026-1934630İzleyin
Tenda CH22 CertListInfo formCertListInfo command injection
YüksekCVSS 7,4İstismar yokEPSS %2tenda · ch229 Ağu 2026
- CVE-2026-1934836İzleyin
Shenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injection
YüksekCVSS 8,9İstismar yokEPSS %3shenzhen aitemi · m300 wi-fi repeater9 Ağu 2026
- CVE-2026-1938128İzleyin
Kingston FURY CTRL RGB Control Software Driver NTIOLib_KSFX.sys privileges management
YüksekCVSS 7,1İstismar yokEPSS %0kingston · fury ctrl rgb control software9 Ağu 2026
- CVE-2026-1938730İzleyin
Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder
YüksekCVSS 7,6İstismar yokEPSS %0red hat · red hat enterprise linux 109 Ağu 2026
- CVE-2026-1938928İzleyin
Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read
YüksekCVSS 7,1İstismar yokEPSS %0red hat · red hat enterprise linux 109 Ağu 2026
- CVE-2026-1313333İzleyin
A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative
YüksekCVSS 8,4İstismar yokEPSS %0ly corporation · line for windows10 Ağu 2026
- CVE-2026-1317028İzleyin
Eventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template Setting
YüksekCVSS 7,2İstismar yokEPSS %0unknown · eventin10 Ağu 2026
- CVE-2026-1360032İzleyin
AutoNetTV Relay < 3.0.14 - Unauthenticated Privilege Escalation via Scheduled Sync Cron
YüksekCVSS 8,1İstismar yokEPSS %0unknown · autonettv relay10 Ağu 2026
- CVE-2026-1420630İzleyin
HT Contact Form < 2.9.3 - Unauthenticated Saved Form Draft Data Disclosure
YüksekCVSS 7,5İstismar yokEPSS %0unknown · ht contact form10 Ağu 2026
- CVE-2026-1423728İzleyin
Vitepos < 3.6.0 - Outlet Manager+ Privilege Escalation
YüksekCVSS 7,2İstismar yokEPSS %0unknown · vitepos10 Ağu 2026
- CVE-2026-1429335İzleyin
Autopay / Blue Media for WooCommerce < 5.0.1 - Unauthenticated Stored XSS via CSS Editor
YüksekCVSS 8,8İstismar yokEPSS %0unknown · autopay10 Ağu 2026
- CVE-2026-1625732İzleyin
Arvow AI SEO Writer < 1.5.4 - Unauthenticated Arbitrary Post Creation via Webhook Secret Type-Juggling
YüksekCVSS 8,2İstismar yokEPSS %0unknown · arvow ai seo writer10 Ağu 2026
- CVE-2026-1629839İzleyin
FoodBoxBooker < 1.0.7 - Unauthenticated Arbitrary Password Reset
KritikCVSS 9,8İstismar yokEPSS %0unknown · foodboxbooker10 Ağu 2026
- CVE-2026-1629939İzleyin
Single Sign On For TNG < 2.2.0 - Unauthenticated Arbitrary Password Reset
KritikCVSS 9,8İstismar yokEPSS %0unknown · single sign on for tng10 Ağu 2026
- CVE-2026-1698535İzleyin
Squeeze < 1.7.12 - Author+ Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %0unknown · squeeze10 Ağu 2026
- CVE-2026-1702230İzleyin
Salon Booking System – Free Version < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking Wizard
YüksekCVSS 7,5İstismar yokEPSS %0unknown · salon booking system10 Ağu 2026
- CVE-2026-1754035İzleyin
Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch
YüksekCVSS 8,8İstismar yokEPSS %0unknown · file manager10 Ağu 2026
- CVE-2026-1754130İzleyin
Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure
YüksekCVSS 7,5İstismar yokEPSS %0unknown · file manager10 Ağu 2026
- CVE-2026-1754230İzleyin
Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector
YüksekCVSS 7,5İstismar yokEPSS %0unknown · file manager10 Ağu 2026
- CVE-2026-1803032İzleyin
Bricksforge < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Forms
YüksekCVSS 8,1İstismar yokEPSS %0unknown · bricksforge10 Ağu 2026
- CVE-2026-1846832İzleyin
Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header
YüksekCVSS 8,1İstismar yokEPSS %0unknown · login & register forms10 Ağu 2026
- CVE-2026-1846932İzleyin
Login & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Code Brute Force
YüksekCVSS 8,1İstismar yokEPSS %0unknown · login & register forms10 Ağu 2026
- CVE-2026-1847030İzleyin
Login & Register Forms < 4.0.2 - Unauthenticated Registered User Email Address Disclosure via Lost Password Response
YüksekCVSS 7,5İstismar yokEPSS %0unknown · login & register forms10 Ağu 2026
- CVE-2026-1878635İzleyin
CheckView < 2.3.2 - Administrator Account Creation via REST API Authentication Bypass
YüksekCVSS 8,8İstismar yokEPSS %0unknown · checkview10 Ağu 2026
- CVE-2026-1894630İzleyin
Contact Form to Any API < 3.0.7 - Unauthenticated Sensitive File Disclosure via Predictable Filename
YüksekCVSS 7,5İstismar yokEPSS %0unknown · contact form to any api10 Ağu 2026
- CVE-2026-1904934İzleyin
ProSolution WP Client < 2.0.9 - Unauthenticated SQLi and Plugin Data Deletion via 'removesite' Cookie
YüksekCVSS 8,6İstismar yokEPSS %0unknown · prosolution wp client10 Ağu 2026
- CVE-2026-1905336İzleyin
ProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter
KritikCVSS 9,1İstismar yokEPSS %0unknown · prosolution wp client10 Ağu 2026
- CVE-2026-1908939İzleyin
Product Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8Kavram kanıtıEPSS %0unknown · product input fields for woocommerce10 Ağu 2026
- CVE-2026-6494035İzleyin
Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may a
YüksekCVSS 8,8İstismar yokEPSS %0nishishi factory · tegalog -fumy otegaru memo logger-10 Ağu 2026
- CVE-2026-2106428İzleyin
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
YüksekCVSS 7,0İstismar yokEPSS %0samsung · android10 Ağu 2026
- CVE-2026-2106833İzleyin
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.
YüksekCVSS 8,4İstismar yokEPSS %0samsung · android10 Ağu 2026
- CVE-2026-2107428İzleyin
Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege.
YüksekCVSS 7,2İstismar yokEPSS %0samsung mobile · bixby10 Ağu 2026
- CVE-2026-2107928İzleyin
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
YüksekCVSS 7,0İstismar yokEPSS %0samsung · smart switch10 Ağu 2026
- CVE-2026-6640334İzleyin
DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled.
YüksekCVSS 8,7İstismar yokEPSS %0ecovacs robotics · deebot pro m110 Ağu 2026
- CVE-2026-6640534İzleyin
DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled.
YüksekCVSS 8,7İstismar yokEPSS %0ecovacs robotics · deebot pro m110 Ağu 2026