İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 16 / 73

  • CVE-2026-44764
    29İzleyin

    Missing Authorization Check in SAP Manufacturing Integration and Intelligence

    YüksekCVSS 7,3İstismar yokEPSS %0

    sap_se · sap manufacturing integration and intelligence10 Ağu 2026

  • CVE-2026-18947
    34İzleyin

    Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization

    YüksekCVSS 8,5İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-44765
    29İzleyin

    Missing Authorization Check in SAP Manufacturing Integration and Intelligence

    YüksekCVSS 7,3İstismar yokEPSS %0

    sap_se · sap manufacturing integration and intelligence10 Ağu 2026

  • CVE-2026-58230
    28İzleyin

    Multiple vulnerabilities in SAP Business AI Platform (Approuter)

    YüksekCVSS 7,0İstismar yokEPSS %0

    sap · approuter10 Ağu 2026

  • CVE-2026-18949
    35İzleyin

    Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat openshift ai 2.2510 Ağu 2026

  • CVE-2026-18951
    35İzleyin

    Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat openshift ai 3.310 Ağu 2026

  • CVE-2026-58243
    35İzleyin

    Privilege Escalation vulnerability in SAP ABAP Developer Tools

    YüksekCVSS 8,8İstismar yokEPSS %0

    sap_se · sap abap developer tools10 Ağu 2026

  • CVE-2026-66763
    31İzleyin

    Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)

    YüksekCVSS 7,9İstismar yokEPSS %0

    sap_se · sap businessobjects business intelligence platform (central management server)10 Ağu 2026

  • CVE-2026-63622
    31İzleyin

    Libvirt: swtpm privilege escalation via symlink following

    YüksekCVSS 7,8İstismar yokEPSS %0

    red hat · red hat enterprise linux 10.0 extended update support10 Ağu 2026

  • CVE-2025-30237
    34İzleyin

    Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet Devices

    YüksekCVSS 8,7İstismar yokEPSS %0

    tp-link systems inc. · hb810(us2) v1.0/1.6/2.0/2.610 Ağu 2026

  • CVE-2025-30238
    34İzleyin

    Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet Devices

    YüksekCVSS 8,6İstismar yokEPSS %0

    tp-link systems inc. · hb810(us2) v1.0/1.6/2.0/2.610 Ağu 2026

  • CVE-2025-30239
    34İzleyin

    Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices

    YüksekCVSS 8,5İstismar yokEPSS %0

    tp-link systems inc. · hb810(us2) v1.0/1.6/2.0/2.610 Ağu 2026

  • CVE-2025-30241
    34İzleyin

    OS Command Injection in Web Interface in Multiple TP-Link Aginet Devices

    YüksekCVSS 8,6İstismar yokEPSS %0

    tp-link systems inc. · hb810(us2) v1.0/1.6/2.0/2.610 Ağu 2026

  • CVE-2026-19424
    34İzleyin

    Inventec Appliances｜Chiline Cloud - Insecure Direct Object Reference

    YüksekCVSS 8,7İstismar yokEPSS %0

    inventec appliances · chiline cloud10 Ağu 2026

  • CVE-2026-8917
    33İzleyin

    Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to wr

    YüksekCVSS 8,4İstismar yokEPSS %0

    asus · gpu tweak iii10 Ağu 2026

  • CVE-2026-19425
    37İzleyin

    Win Men Intermational｜Travel Agency Management System - SQL Injection

    KritikCVSS 9,3İstismar yokEPSS %0

    win men intermational · travel agency management system11 Ağu 2026

  • CVE-2026-13716
    36İzleyin

    Path Traversal: '.../...//' in Crafty Controller

    KritikCVSS 9,1İstismar yokEPSS %0

    craftycontrol · crafty controller11 Ağu 2026

  • CVE-2026-19516
    36İzleyin

    CVE-2026-19516 CVE Record

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    grafana · grafana mcp server11 Ağu 2026

  • CVE-2026-4757
    28İzleyin

    A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation.

    YüksekCVSS 7,2İstismar yokEPSS %0

    axis communications ab · axis os11 Ağu 2026

  • CVE-2026-16053
    35İzleyin

    Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerabilit

    YüksekCVSS 8,5İstismar yokEPSS %1

    zohocorp · manageengine m365 manager plus11 Ağu 2026

  • CVE-2026-19418
    29İzleyin

    TYPO3 CMS - Broken Access Control in Backend and Install Tool

    YüksekCVSS 7,3İstismar yokEPSS %0

    typo3 · typo3 cms11 Ağu 2026

  • CVE-2026-10579
    39İzleyin

    Picketlink-federation: auth bypass in picketlink saml unsolicited-response

    KritikCVSS 9,8İstismar yokEPSS %0

    red hat · red hat jboss enterprise application platform 7.4.2511 Ağu 2026

  • CVE-2026-15556
    32İzleyin

    Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions

    YüksekCVSS 8,1İstismar yokEPSS %0

    red hat · red hat jboss enterprise application platform 7.4.2511 Ağu 2026

  • CVE-2026-71217
    30İzleyin

    Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    red hat · red hat enterprise linux 1011 Ağu 2026

  • CVE-2026-72694
    28İzleyin

    Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation

    YüksekCVSS 7,1İstismar yokEPSS %0

    red hat · red hat enterprise linux 1011 Ağu 2026

  • CVE-2026-73160
    34İzleyin

    cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses

    YüksekCVSS 8,7İstismar yokEPSS %0

    misp · cti-transmute11 Ağu 2026

  • CVE-2026-58231
    40Planlayın

    Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    sap_se · sap commerce cloud (data hub adapter)11 Ağu 2026

  • CVE-2026-13737
    36İzleyin

    Command Restriction Bypass

    KritikCVSS 9,2İstismar yokEPSS %0

    commvault · commvault11 Ağu 2026

  • CVE-2026-13738
    36İzleyin

    Improper Authorization Validation

    KritikCVSS 9,2İstismar yokEPSS %0

    commvault · commvault11 Ağu 2026

  • CVE-2026-13739
    35İzleyin

    Server-Side Request Forgery (SSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    commvault · commvault11 Ağu 2026

  • CVE-2026-50236
    29İzleyin

    Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console

    YüksekCVSS 7,4İstismar yokEPSS %0

    red hat · red hat openshift container platform 4.1411 Ağu 2026

  • CVE-2026-50237
    29İzleyin

    Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in ope

    YüksekCVSS 7,4İstismar yokEPSS %0

    red hat · red hat openshift container platform 4.1211 Ağu 2026

  • CVE-2026-72533
    35İzleyin

    Portainer Portainer CE - Authentication Bypass

    YüksekCVSS 8,8İstismar yokEPSS %0

    portainer · portainer ce11 Ağu 2026

  • CVE-2026-72534
    35İzleyin

    Authentik Security authentik - Privilege Escalation

    YüksekCVSS 8,8İstismar yokEPSS %0

    authentik security · authentik11 Ağu 2026

  • CVE-2026-72535
    34İzleyin

    Chaskiq Chaskiq - Missing Authentication

    YüksekCVSS 8,6İstismar yokEPSS %0

    chaskiq · chaskiq11 Ağu 2026

  • CVE-2026-72536
    34İzleyin

    Chaskiq Chaskiq - Missing Authentication

    YüksekCVSS 8,6İstismar yokEPSS %0

    chaskiq · chaskiq11 Ağu 2026

  • CVE-2026-72537
    35İzleyin

    Authentik Security authentik - Privilege Escalation

    YüksekCVSS 8,8İstismar yokEPSS %0

    authentik security · authentik11 Ağu 2026

  • CVE-2026-72538
    35İzleyin

    PrefectHQ Prefect - Argument Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    prefecthq · prefect11 Ağu 2026

  • CVE-2026-72543
    30İzleyin

    OpenSignLabs OpenSign - Insecure Direct Object Reference

    YüksekCVSS 7,5İstismar yokEPSS %0

    opensignlabs · opensign11 Ağu 2026

  • CVE-2026-72544
    30İzleyin

    OpenSignLabs OpenSign - Insufficient Verification of Data Authenticity

    YüksekCVSS 7,5İstismar yokEPSS %0

    opensignlabs · opensign11 Ağu 2026

  • CVE-2026-72545
    30İzleyin

    OpenSignLabs OpenSign - Insecure Direct Object Reference

    YüksekCVSS 7,5İstismar yokEPSS %0

    opensignlabs · opensign11 Ağu 2026

  • CVE-2026-72546
    28İzleyin

    Attendize Attendize - Insecure Direct Object Reference

    YüksekCVSS 7,1İstismar yokEPSS %0

    attendize · attendize11 Ağu 2026

  • CVE-2026-72547
    28İzleyin

    Attendize Attendize - Insecure Direct Object Reference

    YüksekCVSS 7,1İstismar yokEPSS %0

    attendize · attendize11 Ağu 2026

  • CVE-2026-72548
    30İzleyin

    OpenSignLabs OpenSign - Information Disclosure

    YüksekCVSS 7,5İstismar yokEPSS %0

    opensignlabs · opensign11 Ağu 2026

  • CVE-2026-72550
    39İzleyin

    Friendica Friendica - SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    friendica · friendica11 Ağu 2026

  • CVE-2026-72551
    35İzleyin

    Apioo Fusio - Remote Code Execution

    YüksekCVSS 8,8İstismar yokEPSS %1

    apioo · fusio11 Ağu 2026

  • CVE-2026-72552
    30İzleyin

    Dub Dub - Server-Side Request Forgery

    YüksekCVSS 7,5İstismar yokEPSS %0

    dub · dub11 Ağu 2026

  • CVE-2026-72555
    32İzleyin

    Peppermint Lab Peppermint - Broken Access Control

    YüksekCVSS 8,1İstismar yokEPSS %0

    peppermint lab · peppermint11 Ağu 2026

  • CVE-2026-72556
    35İzleyin

    ZoneMinder ZoneMinder - Remote Code Execution

    YüksekCVSS 8,8İstismar yokEPSS %1

    zoneminder · zoneminder11 Ağu 2026

  • CVE-2026-72557
    35İzleyin

    Cockpit CMS Cockpit CMS - Unrestricted File Upload

    YüksekCVSS 8,8İstismar yokEPSS %0

    cockpit cms · cockpit cms11 Ağu 2026

  • CVE-2026-72558
    35İzleyin

    CiviCRM CiviCRM - SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    civicrm · civicrm11 Ağu 2026

  • CVE-2026-72561
    35İzleyin

    Peppermint Lab Peppermint - Broken Access Control

    YüksekCVSS 8,8İstismar yokEPSS %0

    peppermint lab · peppermint11 Ağu 2026

  • CVE-2026-72562
    35İzleyin

    Pimcore pimcore admin-ui-classic-bundle - SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    pimcore · pimcore admin-ui-classic-bundle11 Ağu 2026

  • CVE-2026-72563
    32İzleyin

    BadChoice Handesk - Broken Access Control

    YüksekCVSS 8,1İstismar yokEPSS %0

    badchoice · handesk11 Ağu 2026

  • CVE-2026-72595
    32İzleyin

    BadChoice Handesk - Broken Access Control

    YüksekCVSS 8,1İstismar yokEPSS %0

    badchoice · handesk11 Ağu 2026

  • CVE-2026-72596
    32İzleyin

    Ghost Foundation Ghost - Broken Access Control

    YüksekCVSS 8,1İstismar yokEPSS %0

    ghost foundation · ghost11 Ağu 2026

  • CVE-2026-72599
    39İzleyin

    e107 e107 - SQL Injection

    KritikCVSS 9,8İstismar yokEPSS %0

    e107 · e10711 Ağu 2026

  • CVE-2026-72600
    30İzleyin

    Idurar IDURAR ERP CRM - Broken Access Control

    YüksekCVSS 7,5İstismar yokEPSS %0

    idurar · idurar erp crm11 Ağu 2026

  • CVE-2026-72601
    30İzleyin

    CSZ CMS CSZ CMS - Broken Access Control

    YüksekCVSS 7,5İstismar yokEPSS %0

    csz cms · csz cms11 Ağu 2026

  • CVE-2026-72602
    30İzleyin

    AsyncFuncAI deepwiki-open - Path Traversal

    YüksekCVSS 7,5İstismar yokEPSS %0

    asyncfuncai · deepwiki-open11 Ağu 2026

  • CVE-2026-72603
    40Planlayın

    wg-easy wg-easy - OS Command Injection

    KritikCVSS 9,9İstismar yokEPSS %2

    wg-easy · wg-easy11 Ağu 2026

  • CVE-2026-72605
    30İzleyin

    Swing Music Swing Music - Missing Authentication

    YüksekCVSS 7,5İstismar yokEPSS %0

    swing music · swing music11 Ağu 2026

  • CVE-2026-72606
    30İzleyin

    Pinry Pinry - Server-Side Request Forgery

    YüksekCVSS 7,5İstismar yokEPSS %0

    pinry · pinry11 Ağu 2026

  • CVE-2026-72607
    28İzleyin

    Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by Age

    YüksekCVSS 7,1İstismar yokEPSS %0

    koha community · koha11 Ağu 2026

  • CVE-2026-72609
    28İzleyin

    Koha Community Koha - SQL Injection via ORDER BY Direction in acqui/parcels.pl

    YüksekCVSS 7,1İstismar yokEPSS %0

    koha community · koha11 Ağu 2026

  • CVE-2026-15554
    29İzleyin

    Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery

    YüksekCVSS 7,4İstismar yokEPSS %0

    red hat · red hat jboss enterprise application platform 7.4.2511 Ağu 2026

  • CVE-2026-15555
    35İzleyin

    Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat jboss enterprise application platform 7.4.2511 Ağu 2026

  • CVE-2026-15560
    32İzleyin

    Openjdk-orb: unauthed class loading via iiop in eap

    YüksekCVSS 8,1İstismar yokEPSS %0

    red hat · red hat jboss enterprise application platform 7.4.2511 Ağu 2026

  • CVE-2026-15561
    30İzleyin

    Undertow-core: oom via missing limits in chunked trailer in eap's undertow

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat jboss enterprise application platform 7.4.2511 Ağu 2026

  • CVE-2026-15562
    30İzleyin

    Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat jboss enterprise application platform 7.4.2511 Ağu 2026

  • CVE-2026-15563
    29İzleyin

    Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos

    YüksekCVSS 7,4İstismar yokEPSS %0

    red hat · red hat jboss enterprise application platform 7.4.2511 Ağu 2026

  • CVE-2026-15565
    30İzleyin

    Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat jboss enterprise application platform 7.4.2511 Ağu 2026

  • CVE-2026-15567
    30İzleyin

    Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat jboss enterprise application platform 7.4.2511 Ağu 2026

  • CVE-2026-72693
    31İzleyin

    Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

    YüksekCVSS 7,8İstismar yokEPSS %0

    red hat · red hat enterprise linux 1011 Ağu 2026

  • CVE-2026-18972
    38İzleyin

    Velociraptor authenticated identity-spoofing vulnerability

    KritikCVSS 9,6İstismar yokEPSS %0

    rapid7 · velociraptor11 Ağu 2026

  • CVE-2026-50058
    29İzleyin

    A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update

    YüksekCVSS 7,3İstismar yokEPSS %0

    siemens · solid edge se202511 Ağu 2026

  • CVE-2026-50059
    29İzleyin

    A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update

    YüksekCVSS 7,3İstismar yokEPSS %0

    siemens · solid edge se202511 Ağu 2026

  • CVE-2026-50060
    29İzleyin

    A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update

    YüksekCVSS 7,3İstismar yokEPSS %0

    siemens · solid edge se202511 Ağu 2026

  • CVE-2026-50061
    29İzleyin

    A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update

    YüksekCVSS 7,3İstismar yokEPSS %0

    siemens · solid edge se202511 Ağu 2026

  • CVE-2026-50062
    29İzleyin

    A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update

    YüksekCVSS 7,3İstismar yokEPSS %0

    siemens · solid edge se202511 Ağu 2026

  • CVE-2026-50063
    29İzleyin

    A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update

    YüksekCVSS 7,3İstismar yokEPSS %0

    siemens · solid edge se202511 Ağu 2026

  • CVE-2026-50064
    29İzleyin

    A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update

    YüksekCVSS 7,3İstismar yokEPSS %0

    siemens · solid edge se202511 Ağu 2026

  • CVE-2026-57262
    28İzleyin

    A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9).

    YüksekCVSS 7,0İstismar yokEPSS %0

    siemens · logo! soft comfort11 Ağu 2026

  • CVE-2026-57263
    28İzleyin

    A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9).

    YüksekCVSS 7,0İstismar yokEPSS %0

    siemens · logo! soft comfort11 Ağu 2026

  • CVE-2026-58115
    40Planlayın

    A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Nod

    KritikCVSS 10,0İstismar yokEPSS %0

    siemens · simatic iot2050 advanced11 Ağu 2026

  • CVE-2026-59086
    29İzleyin

    A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter Nastran (All versions < V2606).

    YüksekCVSS 7,3İstismar yokEPSS %0

    siemens · simcenter femap11 Ağu 2026

  • CVE-2026-59700
    29İzleyin

    A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001).

    YüksekCVSS 7,3İstismar yokEPSS %0

    siemens · simcenter femap11 Ağu 2026

  • CVE-2026-59701
    29İzleyin

    A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001).

    YüksekCVSS 7,3İstismar yokEPSS %0

    siemens · simcenter femap11 Ağu 2026

  • CVE-2026-64629
    29İzleyin

    A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230).

    YüksekCVSS 7,3İstismar yokEPSS %0

    siemens · parasolid v38.011 Ağu 2026

  • CVE-2026-69108
    33İzleyin

    A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1).

    YüksekCVSS 8,3İstismar yokEPSS %0

    siemens · siemens license server (sls)11 Ağu 2026

  • CVE-2026-69109
    34İzleyin

    A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3).

    YüksekCVSS 8,7İstismar yokEPSS %0

    siemens · siemens license server (sls)11 Ağu 2026

  • CVE-2026-72744
    27İzleyin

    Nuxt before 4.5.1 Information Disclosure via Chrome DevTools

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    nuxt · nuxt11 Ağu 2026

  • CVE-2026-72749
    28İzleyin

    n8n before 1.123.67 Prototype Pollution via Edit Fields

    YüksekCVSS 7,1İstismar yokEPSS %0

    n8n · n8n11 Ağu 2026

  • CVE-2026-72762
    30İzleyin

    n8n before 1.123.67 Arbitrary File Write via Edit Image Node

    YüksekCVSS 7,7İstismar yokEPSS %0

    n8n · n8n11 Ağu 2026

  • CVE-2026-72763
    28İzleyin

    n8n before 1.123.67 Credential Exfiltration via Sub-Workflow

    YüksekCVSS 7,2İstismar yokEPSS %0

    n8n · n8n11 Ağu 2026

  • CVE-2026-72765
    34İzleyin

    n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape

    YüksekCVSS 8,7İstismar yokEPSS %0

    n8n · n8n11 Ağu 2026

  • CVE-2026-72766
    32İzleyin

    n8n before 1.123.67 Arbitrary File Read via Send Email Node

    YüksekCVSS 8,2İstismar yokEPSS %0

    n8n · n8n11 Ağu 2026

  • CVE-2026-72767
    34İzleyin

    n8n before 1.123.67 Remote Code Execution via Git node

    YüksekCVSS 8,7İstismar yokEPSS %0

    n8n · n8n11 Ağu 2026

  • CVE-2026-72770
    28İzleyin

    n8n before 1.123.67 Path Traversal via Git Node Operations

    YüksekCVSS 7,1İstismar yokEPSS %0

    n8n · n8n11 Ağu 2026

  • CVE-2026-72771
    28İzleyin

    n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes

    YüksekCVSS 7,1İstismar yokEPSS %0

    n8n · n8n11 Ağu 2026