İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.295 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 13 / 73

  • CVE-2026-66407
    30İzleyin

    DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication.

    YüksekCVSS 7,7İstismar yokEPSS %0

    ecovacs robotics · deebot pro m110 Ağu 2026

  • CVE-2026-44630
    30İzleyin

    Apache IoTDB: RPC service denial of service via unchecked Thrift string length

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache software foundation · apache iotdb10 Ağu 2026

  • CVE-2026-66915
    40Planlayın

    Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.2

    KritikCVSS 10,0İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla10 Ağu 2026

  • CVE-2026-28672
    40Planlayın

    Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    apache · ranger10 Ağu 2026

  • CVE-2026-32227
    39İzleyin

    Apache Ranger: SQL Injection vulnerability in lookup functionality

    KritikCVSS 9,8İstismar yokEPSS %0

    apache · ranger10 Ağu 2026

  • CVE-2026-40920
    39İzleyin

    Apache Ranger: Privilege Escalation via URL Parameter

    KritikCVSS 9,8İstismar yokEPSS %0

    apache · ranger10 Ağu 2026

  • CVE-2026-42537
    39İzleyin

    Apache Ranger: Remote Code Execution via JDBC URL Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    apache · ranger10 Ağu 2026

  • CVE-2026-44416
    39İzleyin

    Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation

    KritikCVSS 9,8İstismar yokEPSS %1

    apache · ranger10 Ağu 2026

  • CVE-2026-55799
    39İzleyin

    Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator

    KritikCVSS 9,8İstismar yokEPSS %1

    apache · ranger10 Ağu 2026

  • CVE-2026-55814
    30İzleyin

    Apache Ranger: Download APIs expose plugin data without authentication

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · ranger10 Ağu 2026

  • CVE-2026-59087
    31İzleyin

    Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation

    YüksekCVSS 7,8İstismar yokEPSS %0

    gimp · gimp10 Ağu 2026

  • CVE-2026-61899
    30İzleyin

    Apache Tapestry: Possible classpath file download through URL manipulation

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · tapestry10 Ağu 2026

  • CVE-2026-65942
    30İzleyin

    Apache Ranger: Clients accept TLS certificates issued for other hostnames

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · ranger10 Ağu 2026

  • CVE-2026-65948
    29İzleyin

    Apache Ranger: UnixAuth lacks brute-force protection

    YüksekCVSS 7,3İstismar yokEPSS %0

    apache · ranger10 Ağu 2026

  • CVE-2026-72564
    38İzleyin

    fosrl Pangolin - Access Token Scope Bypass Allows Cross-Resource Authentication

    KritikCVSS 9,6İstismar yokEPSS %0

    fosrl · pangolin10 Ağu 2026

  • CVE-2026-72565
    39İzleyin

    Tencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass

    KritikCVSS 9,8İstismar yokEPSS %0

    tencent · apijson10 Ağu 2026

  • CVE-2026-72566
    30İzleyin

    automatisch - Server-Side Request Forgery via HTTP Request Custom Action

    YüksekCVSS 7,7İstismar yokEPSS %0

    automatisch · automatisch10 Ağu 2026

  • CVE-2026-72567
    39İzleyin

    deepwiki-open - Unauthenticated Path Traversal Leading to Arbitrary File Write and Delete

    KritikCVSS 9,8İstismar yokEPSS %0

    asyncfuncai · deepwiki-open10 Ağu 2026

  • CVE-2026-72569
    36İzleyin

    cube-root directory-serve - Unauthenticated Path Traversal Arbitrary File Deletion

    KritikCVSS 9,1İstismar yokEPSS %0

    cube-root · directory-serve10 Ağu 2026

  • CVE-2026-72571
    30İzleyin

    mustafaakin cast-localvideo - Unauthenticated Path Traversal via dir Parameter

    YüksekCVSS 7,5İstismar yokEPSS %1

    mustafaakin · cast-localvideo10 Ağu 2026

  • CVE-2026-72572
    30İzleyin

    o1lab xmysql - Unauthenticated Path Traversal via name Query Parameter

    YüksekCVSS 7,5İstismar yokEPSS %1

    o1lab · xmysql10 Ağu 2026

  • CVE-2026-72573
    35İzleyin

    4xmen pm2panel - Authenticated OS Command Injection via id Query Parameter

    YüksekCVSS 8,8İstismar yokEPSS %1

    4xmen · pm2panel10 Ağu 2026

  • CVE-2026-72575
    36İzleyin

    daptin - Authentication Bypass via Null Owner Permission Check on usergroup Objects

    KritikCVSS 9,1İstismar yokEPSS %0

    daptin · daptin10 Ağu 2026

  • CVE-2026-72577
    39İzleyin

    NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    nasa · fprime-gds10 Ağu 2026

  • CVE-2026-72578
    35İzleyin

    FreePBX Framework - Missing CSRF Protection in Admin Panel Ajax Dispatcher

    YüksekCVSS 8,8İstismar yokEPSS %0

    freepbx · freepbx framework10 Ağu 2026

  • CVE-2026-72579
    30İzleyin

    NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server

    YüksekCVSS 7,5İstismar yokEPSS %1

    nasa · hypercp10 Ağu 2026

  • CVE-2026-72580
    39İzleyin

    duhow xiaoai-patch - OS Command Injection in /mute and /unmute Endpoints

    KritikCVSS 9,8İstismar yokEPSS %1

    duhow · xiaoai-patch10 Ağu 2026

  • CVE-2026-72581
    34İzleyin

    duhow xiaoai-patch - Server-Side Request Forgery in /auth Endpoint

    YüksekCVSS 8,6İstismar yokEPSS %0

    duhow · xiaoai-patch10 Ağu 2026

  • CVE-2026-72582
    30İzleyin

    fastschema - Unauthenticated NULL Pointer Dereference DoS in Account Recovery Endpoint

    YüksekCVSS 7,5İstismar yokEPSS %0

    fastschema · fastschema10 Ağu 2026

  • CVE-2026-72584
    29İzleyin

    fastschema - TOCTOU Race Condition Bypasses OTP Attempt Limit in Account Recovery

    YüksekCVSS 7,4İstismar yokEPSS %0

    fastschema · fastschema10 Ağu 2026

  • CVE-2026-72586
    30İzleyin

    frangoteam FUXA - Missing Authentication on DAQ_QUERY Socket.IO Event Handler

    YüksekCVSS 7,5İstismar yokEPSS %0

    frangoteam · fuxa10 Ağu 2026

  • CVE-2026-72589
    40Planlayın

    alseambusher crontab-ui - Unauthenticated RCE via Shell Injection in Imported Database hook Field

    KritikCVSS 9,8İstismar yokEPSS %1

    alseambusher · crontab-ui10 Ağu 2026

  • CVE-2026-72590
    40Planlayın

    alseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter

    KritikCVSS 9,8İstismar yokEPSS %2

    alseambusher · crontab-ui10 Ağu 2026

  • CVE-2026-72591
    30İzleyin

    Koito - Authenticated Server-Side Request Forgery via Album Image URL Parameter

    YüksekCVSS 7,7İstismar yokEPSS %0

    gabehf · koito10 Ağu 2026

  • CVE-2026-72592
    39İzleyin

    dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload

    KritikCVSS 9,8İstismar yokEPSS %0

    dulldusk · phpfm10 Ağu 2026

  • CVE-2026-72593
    39İzleyin

    dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access

    KritikCVSS 9,8İstismar yokEPSS %0

    dulldusk · phpfm10 Ağu 2026

  • CVE-2026-72594
    30İzleyin

    lobehub lobe-chat - Stored Cross-Site Scripting via Unrestricted SVG Avatar Upload

    YüksekCVSS 7,6İstismar yokEPSS %0

    lobehub · lobe-chat10 Ağu 2026

  • CVE-2026-68083
    36İzleyin

    ksmbd: fix path resolution in ksmbd_vfs_kern_path_create

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-12984
    32İzleyin

    Exposure of Sensitive Information to an Unauthorized Actor in Zyxel's WAH7601

    YüksekCVSS 8,2İstismar yokEPSS %0

    zyxel networks · wah760110 Ağu 2026

  • CVE-2026-13206
    40Planlayın

    Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    zyxel networks · wah760110 Ağu 2026

  • CVE-2026-59233
    34İzleyin

    Missing Authorization in Prospero Flow CRM permission save endpoint allows privilege escalation

    YüksekCVSS 8,7İstismar yokEPSS %0

    roskus · prospero flow crm10 Ağu 2026

  • CVE-2026-68119
    30İzleyin

    tcp: initialize standalone TCP-AO response padding

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68120
    30İzleyin

    rtase: Workaround for TX hang caused by hardware packet parsing

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68124
    38İzleyin

    mctp: serial: handle zero-length frames to prevent rx buffer overflow

    KritikCVSS 9,6İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68134
    29İzleyin

    ptp: ptp_s390: Add missing facility check

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68137
    39İzleyin

    net/x25: fix use-after-free in x25_kill_by_neigh()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68147
    31İzleyin

    fscrypt: Avoid dynamic allocation in fscrypt_get_devices()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68152
    31İzleyin

    amt: fix use-after-free in AMT delayed works

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68163
    31İzleyin

    mm/page_vma_mapped: fix device-private PMD handling

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68170
    39İzleyin

    mptcp: fix stale skb->sk reference on subflow close

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68172
    28İzleyin

    arm64: make huge_ptep_get handled unaligned addresses

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68173
    28İzleyin

    ublk: wait on ublk_dev_ready() instead of ub->completion

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68177
    31İzleyin

    tracing: Delay module ref count for "enable_event" trigger

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68196
    33İzleyin

    wifi: wilc1000: validate assoc response length before subtracting header

    YüksekCVSS 8,3İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68204
    31İzleyin

    media: vivid: check for vb2_is_busy() when toggling caps

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68209
    31İzleyin

    media: sun4i-csi: Return queued buffers on start_streaming() failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68210
    31İzleyin

    media: stm32: dcmi: unregister notifier on probe failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68219
    31İzleyin

    media: nxp: imx8-isi: Fix potential out-of-bounds issues

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68222
    31İzleyin

    media: msi2500: Return queued buffers on start_streaming() failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68228
    31İzleyin

    media: chips-media: wave5: Move src_buf Removal to finish_encode

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68229
    28İzleyin

    media: cedrus: skip invalid H.264 reference list entries

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68230
    29İzleyin

    media: amlogic-c3: Add validations for ae and awb config

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68260
    31İzleyin

    drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68262
    28İzleyin

    drm/imagination: Fix user array stride in pvr_set_uobj_array()

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68263
    31İzleyin

    drm/imagination: Fix double call to drm_sched_entity_fini()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68283
    35İzleyin

    tracing: Fix use-after-free freeing trigger private data

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68302
    39İzleyin

    amt: re-read skb header pointers after every pull

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68314
    31İzleyin

    net: mctp i3c: clean up notifier and buses if driver register fails

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68316
    31İzleyin

    accel: ethosu: Fix element size accounting for cmd stream validation

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68330
    31İzleyin

    net: airoha: Fix DMA direction for NPU mailbox buffer

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68340
    30İzleyin

    hwmon: occ: validate poll response sensor blocks

    YüksekCVSS 7,7İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68341
    35İzleyin

    ovpn: fix use after free in unlock_ovpn()

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68370
    31İzleyin

    usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68371
    33İzleyin

    usb: musb: omap2430: Do not put borrowed of_node in probe

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68379
    30İzleyin

    tcp: fix TIME_WAIT socket reference leak on PSP policy failure

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68380
    31İzleyin

    accel/amdxdna: Fix use-after-free of mm_struct in job scheduler

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68387
    31İzleyin

    can: raw: add locking for raw flags bitfield

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68389
    35İzleyin

    Bluetooth: hci_qca: Clear memdump state on invalid dump size

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68390
    35İzleyin

    Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68392
    31İzleyin

    Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68400
    31İzleyin

    firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68401
    31İzleyin

    firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68415
    31İzleyin

    xfrm: clear mode callbacks after failed mode setup

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68420
    28İzleyin

    xfrm: reject optional IPTFS templates in outbound policies

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-6374
    29İzleyin

    Hardcoded Credentials in Zyxel WAH7601 Router

    YüksekCVSS 7,3İstismar yokEPSS %0

    zyxel networks · wah760110 Ağu 2026

  • CVE-2026-72688
    30İzleyin

    OpenSignLabs opensignserver - Missing Authentication for Critical Function

    YüksekCVSS 7,5İstismar yokEPSS %0

    opensignlabs · opensignserver10 Ağu 2026

  • CVE-2026-72689
    30İzleyin

    OpenSignLabs opensignserver - Broken Object Level Authorization

    YüksekCVSS 7,5İstismar yokEPSS %0

    opensignlabs · opensignserver10 Ağu 2026

  • CVE-2026-72690
    28İzleyin

    Attendize Attendize - Cross-Tenant Authorization Bypass

    YüksekCVSS 7,1İstismar yokEPSS %0

    attendize · attendize10 Ağu 2026

  • CVE-2026-72691
    30İzleyin

    OpenSignLabs opensignserver - Authentication Bypass

    YüksekCVSS 7,5İstismar yokEPSS %0

    opensignlabs · opensignserver10 Ağu 2026

  • CVE-2026-72692
    30İzleyin

    OpenSignLabs opensignserver - Missing Authorization

    YüksekCVSS 7,5İstismar yokEPSS %0

    opensignlabs · opensignserver10 Ağu 2026

  • CVE-2026-63106
    37İzleyin

    ReadyEcommerce < 4.5.2 Unauthenticated SQL Injection via ProductController.php

    KritikCVSS 9,3İstismar yokEPSS %0

    razinsoft · ready ecommerce10 Ağu 2026

  • CVE-2026-18412
    36İzleyin

    The OpenCart v4.2.0.0 extension installer contains a directory traversal vulnerability

    KritikCVSS 9,1İstismar yokEPSS %0

    opencart · opencart10 Ağu 2026

  • CVE-2026-19433
    34İzleyin

    Authorization Bypass Through User-Controlled Key in Prospero Flow CRM contact save and vCard export

    YüksekCVSS 8,6İstismar yokEPSS %0

    roskus · prospero flow crm10 Ağu 2026

  • CVE-2026-68085
    32İzleyin

    Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled

    YüksekCVSS 8,0İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-68091
    35İzleyin

    HID: wacom: stop hardware after post-start probe failures

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux10 Ağu 2026

  • CVE-2026-47754
    37İzleyin

    unauthenticated path traversal in Metacat 2.x

    KritikCVSS 9,3İstismar yokEPSS %0

    nceas · metacat10 Ağu 2026

  • CVE-2026-48048
    30İzleyin

    XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests

    YüksekCVSS 7,5İstismar yokEPSS %0

    xwiki · xwiki-platform10 Ağu 2026

  • CVE-2026-48158
    37İzleyin

    use-context-selector was vulnerable to malicious code execution via compromised commits

    KritikCVSS 9,3İstismar yokEPSS %0

    dai-shi · use-context-selector10 Ağu 2026

  • CVE-2026-66738
    30İzleyin

    SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLite

    YüksekCVSS 7,7İstismar yokEPSS %0

    spip · spip10 Ağu 2026

  • CVE-2026-72718
    28İzleyin

    goose: Arbitrary command execution in goose CLI via `goose review` via git core.fsmonitor

    YüksekCVSS 7,0İstismar yokEPSS %0

    aaif-goose · goose10 Ağu 2026