İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.228 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 15 / 73

  • CVE-2026-72900
    28İzleyin

    Metabase information exposure

    YüksekCVSS 7,1İstismar yokEPSS %0

    metabase · metabase10 Ağu 2026

  • CVE-2026-59091
    31İzleyin

    Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file

    YüksekCVSS 7,8İstismar yokEPSS %0

    gimp · gimp10 Ağu 2026

  • CVE-2026-72863
    39İzleyin

    Dokploy: Missing authorization in WebSocket handlers allows a low-privilege member to gain root on the Docker host

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72864
    39İzleyin

    Dokploy Broken Access Control on docker-container-terminal WebSocket (Member -> Root in Arbitrary Containers)

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72865
    39İzleyin

    Dokploy: OS Command Injection via compose `composePath`

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72866
    35İzleyin

    WebSocket Terminal Auth Bypass

    YüksekCVSS 8,8İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72867
    40Planlayın

    Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.

    KritikCVSS 9,9Kavram kanıtıEPSS %3

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72868
    39İzleyin

    Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injection

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72869
    39İzleyin

    Dokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCE

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72870
    34İzleyin

    Dokploy: Command Injection via Docker Credentials in buildRemoteDocker

    YüksekCVSS 8,7İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72871
    30İzleyin

    Dokploy: Unauthenticated Git Provider Injection via GitHub OAuth Callback

    YüksekCVSS 7,5İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72872
    39İzleyin

    Dokploy: OS Command Injection via Bitbucket `owner`/`repository` in `git clone`

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-19433
    34İzleyin

    Authorization Bypass Through User-Controlled Key in Prospero Flow CRM contact save and vCard export

    YüksekCVSS 8,6İstismar yokEPSS %0

    roskus · prospero flow crm10 Ağu 2026

  • CVE-2026-44401
    18İzleyin

    Typemill CMS 2.x Persistent XSS via Markdown javascript URI

    OrtaCVSS 4,6Kavram kanıtıEPSS %0

    typemill · typemill10 Ağu 2026

  • CVE-2026-69114
    28İzleyin

    Spacebar Server Cross-Channel Message Deletion via Permission Check Bypass

    YüksekCVSS 7,1İstismar yokEPSS %0

    spacebar server · spacebar server10 Ağu 2026

  • CVE-2026-72874
    34İzleyin

    Dokploy: Command Injection via Unescaped Git URL in Clone Commands

    YüksekCVSS 8,7İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72875
    35İzleyin

    Dokploy: Remote Code Execution (RCE) via Command Injection in settings.readTraefikFile

    YüksekCVSS 8,8İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72876
    39İzleyin

    Dokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.*

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72877
    38İzleyin

    Dokploy: Command Injection via dockerImage in buildRemoteDocker

    KritikCVSS 9,6İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72878
    38İzleyin

    Dokploy: OS Command Injection in backup/restore pipeline via unescaped user-controlled shell arguments

    KritikCVSS 9,6İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72879
    37İzleyin

    Dokploy: Command Injection via Registry Credentials in Swarm Upload

    KritikCVSS 9,4İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72880
    39İzleyin

    Dokploy: Arbitrary File Write + Remote OS Command Injection via `certificatePath`

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72882
    39İzleyin

    Dokploy: Authenticated blind command injection via file mounts leads to direct remote host RCE on managed servers

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72883
    35İzleyin

    Dokploy: WebSocket Terminal Missing Service-Level Access Control

    YüksekCVSS 8,8İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72884
    34İzleyin

    Dokploy: Command Injection via Compose Custom Command

    YüksekCVSS 8,7İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72886
    39İzleyin

    Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632)

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72901
    39İzleyin

    Dokploy: Remote Code Execution via volume-backup

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-72902
    39İzleyin

    Dokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.testRegistryById

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy10 Ağu 2026

  • CVE-2026-47754
    37İzleyin

    unauthenticated path traversal in Metacat 2.x

    KritikCVSS 9,3İstismar yokEPSS %0

    nceas · metacat10 Ağu 2026

  • CVE-2026-48048
    30İzleyin

    XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests

    YüksekCVSS 7,5İstismar yokEPSS %0

    xwiki · xwiki-platform10 Ağu 2026

  • CVE-2026-48158
    37İzleyin

    use-context-selector was vulnerable to malicious code execution via compromised commits

    KritikCVSS 9,3İstismar yokEPSS %0

    dai-shi · use-context-selector10 Ağu 2026

  • CVE-2026-72718
    28İzleyin

    goose: Arbitrary command execution in goose CLI via `goose review` via git core.fsmonitor

    YüksekCVSS 7,0İstismar yokEPSS %0

    aaif-goose · goose10 Ağu 2026

  • CVE-2026-14450
    39İzleyin

    Maas-billing: maas api: privilege escalation via forged http headers due to missing authentication

    KritikCVSS 9,9İstismar yokEPSS %0

    red hat · red hat openshift ai 3.410 Ağu 2026

  • CVE-2026-15467
    32İzleyin

    Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code p

    YüksekCVSS 8,1İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-15581
    32İzleyin

    Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide

    YüksekCVSS 8,0İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18608
    34İzleyin

    Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide

    YüksekCVSS 8,7İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18611
    30İzleyin

    Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18617
    35İzleyin

    Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator pod

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18620
    28İzleyin

    Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy

    YüksekCVSS 7,1İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18948
    39İzleyin

    Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server

    KritikCVSS 9,9İstismar yokEPSS %1

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18950
    35İzleyin

    Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18982
    35İzleyin

    Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-72904
    37İzleyin

    Firecrawl: Arbitrary file read via JSON Schema $ref expansion

    KritikCVSS 9,3İstismar yokEPSS %0

    firecrawl · firecrawl10 Ağu 2026

  • CVE-2026-73033
    28İzleyin

    Sucuri WordPress Plugin 2.7.3 Path Traversal via integrity.lib.php

    YüksekCVSS 7,0İstismar yokEPSS %0

    sucuri · sucuri-wordpress-plugin10 Ağu 2026

  • CVE-2026-71576
    34İzleyin

    Multicluster-global-hub: multicluster-global-hub: manager trusts self-asserted evt.source() for leaf-hub identity in all status handlers

    YüksekCVSS 8,5İstismar yokEPSS %0

    red hat · multicluster global hub 1.4.910 Ağu 2026

  • CVE-2026-72914
    30İzleyin

    Mastodon: Exhausting data by an unauthenticated request to the admin retention API

    YüksekCVSS 7,5İstismar yokEPSS %0

    mastodon · mastodon10 Ağu 2026

  • CVE-2026-72915
    30İzleyin

    Mastodon: Personally-identifying information disclosure due to incorrect access control validation

    YüksekCVSS 7,5İstismar yokEPSS %0

    mastodon · mastodon10 Ağu 2026

  • CVE-2026-10754
    34İzleyin

    Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security con

    YüksekCVSS 8,6İstismar yokEPSS %0

    pegasystems · pega infinity10 Ağu 2026

  • CVE-2026-16626
    37İzleyin

    JasperReports Server: XXE Injection Vulnerability (Unauthenticated)

    KritikCVSS 9,3İstismar yokEPSS %0

    jaspersoft · jasperreports server10 Ağu 2026

  • CVE-2026-48159
    37İzleyin

    use-reducer-async was vulnerable to malicious code execution via compromised commits

    KritikCVSS 9,3İstismar yokEPSS %0

    dai-shi · use-reducer-async10 Ağu 2026

  • CVE-2026-70622
    28İzleyin

    tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all()

    YüksekCVSS 7,1İstismar yokEPSS %0

    composefs · tar-rs10 Ağu 2026

  • CVE-2026-71962
    34İzleyin

    Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assistants-file/download

    YüksekCVSS 8,7İstismar yokEPSS %0

    flowiseai · flowise10 Ağu 2026

  • CVE-2026-71964
    28İzleyin

    CyberPanel 2.4.3 Arbitrary File Read via File Manager ZIP Upload

    YüksekCVSS 7,1İstismar yokEPSS %0

    usmannasir · cyberpanel10 Ağu 2026

  • CVE-2026-71968
    33İzleyin

    OP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENT

    YüksekCVSS 8,4İstismar yokEPSS %0

    op-tee · optee_os10 Ağu 2026

  • CVE-2026-71969
    33İzleyin

    OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations

    YüksekCVSS 8,4İstismar yokEPSS %0

    op-tee · optee_os10 Ağu 2026

  • CVE-2025-13293
    37İzleyin

    Backdoor / default root credentials

    KritikCVSS 9,3İstismar yokEPSS %0

    tbea · tbea tlogger (tbea communication box 3rd generation)10 Ağu 2026

  • CVE-2025-13294
    37İzleyin

    Unauthenticated SQL Injection

    KritikCVSS 9,3İstismar yokEPSS %0

    tbea · tbea tlogger (tbea communication box 3rd generation)10 Ağu 2026

  • CVE-2025-15681
    36İzleyin

    Insufficient Webserver Authentication

    KritikCVSS 9,2İstismar yokEPSS %0

    tbea · tbea tlogger (tbea communication box 3rd generation)10 Ağu 2026

  • CVE-2025-15682
    34İzleyin

    Unauthenticated Resource Exhaustion

    YüksekCVSS 8,7İstismar yokEPSS %0

    tbea · tbea tlogger (tbea communication box 3rd generation)10 Ağu 2026

  • CVE-2025-15683
    35İzleyin

    Multiple Unauthenticated Denial-of-Service Conditions

    YüksekCVSS 8,8İstismar yokEPSS %0

    tbea · tbea tlogger (tbea communication box 3rd generation)10 Ağu 2026

  • CVE-2026-14886
    32İzleyin

    Vault Enterprise vulnerable to cross-namespace entity deletion

    YüksekCVSS 8,2İstismar yokEPSS %0

    hashicorp · vault enterprise10 Ağu 2026

  • CVE-2026-69118
    34İzleyin

    Cachet 2.4.1 Authenticated Server-Side Template Injection RCE

    YüksekCVSS 8,7İstismar yokEPSS %0

    cachethq · cachet10 Ağu 2026

  • CVE-2026-71965
    34İzleyin

    CyberPanel 2.4.3 Authenticated RCE via Remote Backup Feature

    YüksekCVSS 8,7İstismar yokEPSS %0

    usmannasir · cyberpanel10 Ağu 2026

  • CVE-2026-71966
    35İzleyin

    CyberPanel 2.4.3 Authenticated Command Injection via starRemoteTransfer

    YüksekCVSS 8,7İstismar yokEPSS %3

    usmannasir · cyberpanel10 Ağu 2026

  • CVE-2026-11810
    30İzleyin

    NULL-pointer dereference in UpdateHub OTA agent on empty inner metadata array (remote DoS)

    YüksekCVSS 7,5İstismar yokEPSS %0

    zephyrproject · zephyr10 Ağu 2026

  • CVE-2026-13717
    35İzleyin

    Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (token

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat openshift ai 3.410 Ağu 2026

  • CVE-2026-18618
    30İzleyin

    Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18621
    30İzleyin

    Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening

    YüksekCVSS 7,6İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18941
    30İzleyin

    Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication

    YüksekCVSS 7,7İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18947
    34İzleyin

    Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization

    YüksekCVSS 8,5İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18949
    35İzleyin

    Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18951
    35İzleyin

    Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat openshift ai 3.310 Ağu 2026

  • CVE-2026-48160
    37İzleyin

    react-tracked was vulnerable to malicious code execution via compromised commits

    KritikCVSS 9,3İstismar yokEPSS %0

    dai-shi · react-tracked10 Ağu 2026

  • CVE-2026-63622
    31İzleyin

    Libvirt: swtpm privilege escalation via symlink following

    YüksekCVSS 7,8İstismar yokEPSS %0

    red hat · red hat enterprise linux 10.0 extended update support10 Ağu 2026

  • CVE-2026-72903
    32İzleyin

    Tabby: Windows SFTP path traversal allows a malicious server to write files outside the selected download directory

    YüksekCVSS 8,1İstismar yokEPSS %0

    eugeny · tabby10 Ağu 2026

  • CVE-2026-72909
    28İzleyin

    ERPNext: Broken Access Control on certain endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext10 Ağu 2026

  • CVE-2026-72910
    28İzleyin

    ERPNext: Unauthorised modification of master data due to missing validation

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext10 Ağu 2026

  • CVE-2026-72911
    39İzleyin

    ERPNext: Possibility of server-side template injection due to missing validation

    KritikCVSS 9,9İstismar yokEPSS %0

    frappe · erpnext10 Ağu 2026

  • CVE-2026-72913
    29İzleyin

    Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences

    YüksekCVSS 7,3İstismar yokEPSS %0

    kovidgoyal · kitty10 Ağu 2026

  • CVE-2026-73030
    28İzleyin

    unearth 0.18.2 Path Traversal via Unnormalized Paths and Symlink Escape

    YüksekCVSS 7,2İstismar yokEPSS %0

    frostming · unearth10 Ağu 2026

  • CVE-2025-30237
    34İzleyin

    Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet Devices

    YüksekCVSS 8,7İstismar yokEPSS %0

    tp-link systems inc. · hb810(us2) v1.0/1.6/2.0/2.610 Ağu 2026

  • CVE-2025-30238
    34İzleyin

    Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet Devices

    YüksekCVSS 8,6İstismar yokEPSS %0

    tp-link systems inc. · hb810(us2) v1.0/1.6/2.0/2.610 Ağu 2026

  • CVE-2025-30239
    34İzleyin

    Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices

    YüksekCVSS 8,5İstismar yokEPSS %0

    tp-link systems inc. · hb810(us2) v1.0/1.6/2.0/2.610 Ağu 2026

  • CVE-2025-30241
    34İzleyin

    OS Command Injection in Web Interface in Multiple TP-Link Aginet Devices

    YüksekCVSS 8,6İstismar yokEPSS %0

    tp-link systems inc. · hb810(us2) v1.0/1.6/2.0/2.610 Ağu 2026

  • CVE-2026-48161
    37İzleyin

    react18-use was vulnerable to malicious code execution via compromised commits

    KritikCVSS 9,3İstismar yokEPSS %0

    dai-shi · react18-use10 Ağu 2026

  • CVE-2026-8718
    33İzleyin

    Out-of-bounds write in DTLS peer Connection ID getsockopt (`TLS_DTLS_PEER_CID_VALUE`) in Zephyr net sockets/TLS

    YüksekCVSS 8,4İstismar yokEPSS %0

    zephyrproject · zephyr10 Ağu 2026

  • CVE-2026-8917
    33İzleyin

    Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to wr

    YüksekCVSS 8,4İstismar yokEPSS %0

    asus · gpu tweak iii10 Ağu 2026

  • CVE-2026-34265
    39İzleyin

    Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform

    KritikCVSS 9,8İstismar yokEPSS %0

    sap_se · sap netweaver and abap platform11 Ağu 2026

  • CVE-2026-44758
    36İzleyin

    Code Injection vulnerability in Manufacturing Integration and Intelligence

    KritikCVSS 9,1İstismar yokEPSS %0

    sap_se · sap manufacturing integration and intelligence11 Ağu 2026

  • CVE-2026-44763
    30İzleyin

    Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence

    YüksekCVSS 7,6İstismar yokEPSS %0

    sap_se · sap manufacturing integration and intelligence11 Ağu 2026

  • CVE-2026-44764
    29İzleyin

    Missing Authorization Check in SAP Manufacturing Integration and Intelligence

    YüksekCVSS 7,3İstismar yokEPSS %0

    sap_se · sap manufacturing integration and intelligence11 Ağu 2026

  • CVE-2026-44765
    29İzleyin

    Missing Authorization Check in SAP Manufacturing Integration and Intelligence

    YüksekCVSS 7,3İstismar yokEPSS %0

    sap_se · sap manufacturing integration and intelligence11 Ağu 2026

  • CVE-2026-58230
    28İzleyin

    Multiple vulnerabilities in SAP Business AI Platform (Approuter)

    YüksekCVSS 7,0İstismar yokEPSS %0

    sap · approuter11 Ağu 2026

  • CVE-2026-58243
    35İzleyin

    Privilege Escalation vulnerability in SAP ABAP Developer Tools

    YüksekCVSS 8,8İstismar yokEPSS %0

    sap_se · sap abap developer tools11 Ağu 2026

  • CVE-2026-66763
    31İzleyin

    Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)

    YüksekCVSS 7,9İstismar yokEPSS %0

    sap_se · sap businessobjects business intelligence platform (central management server)11 Ağu 2026

  • CVE-2026-19516
    36İzleyin

    CVE-2026-19516 CVE Record

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    grafana · grafana mcp server11 Ağu 2026

  • CVE-2026-16053
    35İzleyin

    Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerabilit

    YüksekCVSS 8,5İstismar yokEPSS %1

    zohocorp · manageengine m365 manager plus11 Ağu 2026

  • CVE-2026-19424
    34İzleyin

    Inventec Appliances｜Chiline Cloud - Insecure Direct Object Reference

    YüksekCVSS 8,7İstismar yokEPSS %0

    inventec appliances · chiline cloud11 Ağu 2026

  • CVE-2026-71217
    30İzleyin

    Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    red hat · red hat enterprise linux 1011 Ağu 2026

  • CVE-2026-19425
    37İzleyin

    Win Men Intermational｜Travel Agency Management System - SQL Injection

    KritikCVSS 9,3İstismar yokEPSS %0

    win men intermational · travel agency management system11 Ağu 2026