Yayın tarihine göre
Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları
7.294 kayıt · 20 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 20 / 73
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2026-66807İstismar yok | Microsoft Office Graphics Component Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-121 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
36İzleyin | CVE-2026-66808İstismar yok | Microsoft SharePoint Server Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-502 | Yüksek8,8 | — | %2,0 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68792İstismar yok | Microsoft Office Elevation of Privilege Vulnerabilitymicrosoft · 365 apps · CWE-77 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68793İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-125 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68794İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68795İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-121 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68796İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68798İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68800İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68801İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68803İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-843 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68804İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68805İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68806İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-787 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68807İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68810İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-822 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68811İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-843 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68812İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68814İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-125 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68815İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68816İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-121 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68817İstismar yok | Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-121 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
30İzleyin | CVE-2026-68819İstismar yok | Windows Network File System Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-126 | Yüksek7,5 | — | %0,9 | 11 Ağu 2026 |
58Planlayın | CVE-2026-68820Silahlaştırılmış | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | Yüksek7,0 | KEV | %0,3 | 11 Ağu 2026 |
31İzleyin | CVE-2026-68821İstismar yok | Windows Package Manager Elevation of Privilege Vulnerabilitymicrosoft · app installer · CWE-269 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
36İzleyin | CVE-2026-69223İstismar yok | Apache Allura: Server-side request forgeryapache · allura · CWE-918 | Kritik9,1 | — | %0,7 | 11 Ağu 2026 |
31İzleyin | CVE-2026-69278İstismar yok | Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-693 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
32İzleyin | CVE-2026-69306İstismar yok | Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-636 | Yüksek8,2 | — | %0,5 | 11 Ağu 2026 |
35İzleyin | CVE-2026-69320İstismar yok | Visual Studio Code Remote Code Execution Vulnerabilitymicrosoft · visual studio code · CWE-78 | Yüksek8,8 | — | %0,8 | 11 Ağu 2026 |
31İzleyin | CVE-2026-70130İstismar yok | Microsoft Office Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
31İzleyin | CVE-2026-70304İstismar yok | Windows DNS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
37İzleyin | CVE-2026-70306İstismar yok | Microsoft Office SharePoint Spoofing Vulnerabilitymicrosoft · sharepoint server · CWE-79 | Kritik9,3 | — | %1,0 | 11 Ağu 2026 |
28İzleyin | CVE-2026-70307İstismar yok | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 | Yüksek7,0 | — | %0,2 | 11 Ağu 2026 |
34İzleyin | CVE-2026-72778Kavram kanıtı | Craft CMS 5.0.0-RC1 before 5.10.6 Authenticated RCE via condition.configcraftcms · cms · CWE-915 | Yüksek8,7 | — | %0,8 | 11 Ağu 2026 |
34İzleyin | CVE-2026-72779İstismar yok | Craft CMS 5.0.0-RC1 before 5.10.6 Arbitrary File Read via SplFileObjectcraftcms · cms · CWE-184 | Yüksek8,7 | — | %0,3 | 11 Ağu 2026 |
31İzleyin | CVE-2026-70311İstismar yok | Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-416 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
28İzleyin | CVE-2026-72780İstismar yok | Craft CMS before 5.10.5 WebAuthn Assertion Replay via login-with-passkeycraftcms · cms · CWE-294 | Yüksek7,1 | — | %0,3 | 11 Ağu 2026 |
34İzleyin | CVE-2026-72781Kavram kanıtı | Craft CMS 5.0.0-RC1 before 5.10.7 Remote Code Execution via Twig Sandbox Escapecraftcms · cms · CWE-693 | Yüksek8,7 | — | %0,7 | 11 Ağu 2026 |
31İzleyin | CVE-2026-70313İstismar yok | Microsoft PowerPoint Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-20 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
28İzleyin | CVE-2026-72782İstismar yok | Craft CMS 5.0.0-RC1 before 5.10.6 Environment Variable Leakcraftcms · cms · CWE-668 | Yüksek7,1 | — | %0,3 | 11 Ağu 2026 |
37İzleyin | CVE-2026-72785İstismar yok | Craft CMS before 5.10.6 Authorization Bypass via structures/move-elementcraftcms · cms · CWE-863 | Kritik9,3 | — | %0,2 | 11 Ağu 2026 |
36İzleyin | CVE-2026-70321İstismar yok | Microsoft SharePoint Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-502 | Yüksek8,8 | — | %1,6 | 11 Ağu 2026 |
35İzleyin | CVE-2026-70324İstismar yok | Microsoft SharePoint Elevation of Privilege Vulnerabilitymicrosoft · sharepoint server · CWE-918 | Yüksek8,8 | — | %0,9 | 11 Ağu 2026 |
35İzleyin | CVE-2026-70326İstismar yok | Microsoft SharePoint Server Elevation of Privilege Vulnerabilitymicrosoft · sharepoint server · CWE-918 | Yüksek8,8 | — | %0,7 | 11 Ağu 2026 |
35İzleyin | CVE-2026-70329İstismar yok | Microsoft Outlook Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-190 | Yüksek8,8 | — | %0,8 | 11 Ağu 2026 |
31İzleyin | CVE-2026-70330İstismar yok | Windows DNS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
31İzleyin | CVE-2026-70335İstismar yok | GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerabilitymicrosoft · visual studio code · CWE-78 | Yüksek7,8 | — | %0,4 | 11 Ağu 2026 |
35İzleyin | CVE-2026-70336İstismar yok | Visual Studio Code Remote Code Execution Vulnerabilitymicrosoft · visual studio code · CWE-94 | Yüksek8,8 | — | %0,8 | 11 Ağu 2026 |
35İzleyin | CVE-2026-70337İstismar yok | Microsoft PowerShell Remote Code Execution Vulnerabilitymicrosoft · powershell · CWE-23 | Yüksek8,8 | — | %0,9 | 11 Ağu 2026 |
31İzleyin | CVE-2026-70338İstismar yok | Microsoft PowerShell Security Feature Bypass Vulnerabilitymicrosoft · powershell · CWE-94 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
35İzleyin | CVE-2026-70340İstismar yok | Azure CycleCloud Elevation of Privilege Vulnerabilitymicrosoft · azure cyclecloud · CWE-862 | Yüksek8,8 | — | %0,7 | 11 Ağu 2026 |
31İzleyin | CVE-2026-70344İstismar yok | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-121 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
31İzleyin | CVE-2026-70345İstismar yok | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
31İzleyin | CVE-2026-70346İstismar yok | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-121 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
31İzleyin | CVE-2026-70347İstismar yok | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
31İzleyin | CVE-2026-70354İstismar yok | .NET Core Remote Code Execution Vulnerabilitymicrosoft · visual studio 2022 · CWE-787 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
34İzleyin | CVE-2026-70355İstismar yok | Microsoft SharePoint Server Elevation of Privilege Vulnerabilitymicrosoft · sharepoint server · CWE-79 | Yüksek8,7 | — | %0,7 | 11 Ağu 2026 |
32İzleyin | CVE-2026-71331İstismar yok | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1809 · CWE-122 | Yüksek8,1 | — | %0,7 | 11 Ağu 2026 |
29İzleyin | CVE-2026-71383İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek7,3 | — | %0,5 | 11 Ağu 2026 |
38İzleyin | CVE-2026-71384İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Kritik9,6 | — | %0,4 | 11 Ağu 2026 |
35İzleyin | CVE-2026-71386İstismar yok | ColdFusion | Cross-site Scripting (XSS) (CWE-79)adobe · coldfusion · CWE-79 | Yüksek8,8 | — | %0,5 | 11 Ağu 2026 |
35İzleyin | CVE-2026-71387İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek8,8 | — | %0,5 | 11 Ağu 2026 |
34İzleyin | CVE-2026-73081İstismar yok | Activepieces: Remote Code Execution via Command Injection in Code Step Nameactivepieces · activepieces · CWE-78 | Yüksek8,7 | — | %0,5 | 11 Ağu 2026 |
30İzleyin | CVE-2026-73083İstismar yok | Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loadingactivepieces · activepieces · CWE-693 | Yüksek7,6 | — | %0,2 | 11 Ağu 2026 |
29İzleyin | CVE-2026-73086İstismar yok | nanoid: Integer Overflow or Wraparoundai · nanoid · CWE-190 | Yüksek7,4 | — | %0,2 | 11 Ağu 2026 |
30İzleyin | CVE-2026-73088İstismar yok | Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)browserslist · browserslist · CWE-248 | Yüksek7,5 | — | %0,6 | 11 Ağu 2026 |
30İzleyin | CVE-2026-73089İstismar yok | Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOMbrowserslist · browserslist · CWE-770 | Yüksek7,5 | — | %0,6 | 11 Ağu 2026 |
40Planlayın | CVE-2026-27302İstismar yok | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)adobe · campaign · CWE-863 | Kritik10,0 | — | %1,1 | 11 Ağu 2026 |
38İzleyin | CVE-2026-47705İstismar yok | TypeBot vulnerable to CSV injection in result exportbaptistearno · typebot.io · CWE-1236 | Kritik9,6 | — | %0,5 | 11 Ağu 2026 |
31İzleyin | CVE-2026-47940İstismar yok | Lightroom Classic | Integer Overflow or Wraparound (CWE-190)adobe · lightroom · CWE-190 | Yüksek7,8 | — | %0,3 | 11 Ağu 2026 |
36İzleyin | CVE-2026-48381İstismar yok | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · campaign · CWE-89 | Kritik9,0 | — | %0,7 | 11 Ağu 2026 |
34İzleyin | CVE-2026-48397İstismar yok | Lightroom Classic | Deserialization of Untrusted Data (CWE-502)adobe · lightroom · CWE-502 | Yüksek8,6 | — | %0,9 | 11 Ağu 2026 |
31İzleyin | CVE-2026-48404İstismar yok | Lightroom Classic | Out-of-bounds Write (CWE-787)adobe · lightroom · CWE-787 | Yüksek7,8 | — | %0,2 | 11 Ağu 2026 |
31İzleyin | CVE-2026-48405İstismar yok | Lightroom Classic | Out-of-bounds Write (CWE-787)adobe · lightroom · CWE-787 | Yüksek7,8 | — | %0,2 | 11 Ağu 2026 |
31İzleyin | CVE-2026-48406İstismar yok | Lightroom Classic | Out-of-bounds Write (CWE-787)adobe · lightroom · CWE-787 | Yüksek7,8 | — | %0,2 | 11 Ağu 2026 |
31İzleyin | CVE-2026-48407İstismar yok | Lightroom Classic | Out-of-bounds Write (CWE-787)adobe · lightroom · CWE-787 | Yüksek7,8 | — | %0,2 | 11 Ağu 2026 |
31İzleyin | CVE-2026-48408İstismar yok | Lightroom Classic | Out-of-bounds Write (CWE-787)adobe · lightroom · CWE-787 | Yüksek7,8 | — | %0,2 | 11 Ağu 2026 |
31İzleyin | CVE-2026-48409İstismar yok | Lightroom Classic | Out-of-bounds Write (CWE-787)adobe · lightroom · CWE-787 | Yüksek7,8 | — | %0,2 | 11 Ağu 2026 |
31İzleyin | CVE-2026-48410İstismar yok | Lightroom Classic | Out-of-bounds Write (CWE-787)adobe · lightroom · CWE-787 | Yüksek7,8 | — | %0,2 | 11 Ağu 2026 |
28İzleyin | CVE-2026-48412İstismar yok | Adobe Commerce | Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 | Yüksek7,2 | — | %0,5 | 11 Ağu 2026 |
34İzleyin | CVE-2026-48413İstismar yok | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)adobe · commerce · CWE-79 | Yüksek8,7 | — | %0,6 | 11 Ağu 2026 |
34İzleyin | CVE-2026-48414İstismar yok | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)adobe · commerce · CWE-79 | Yüksek8,7 | — | %0,3 | 11 Ağu 2026 |
33İzleyin | CVE-2026-48415İstismar yok | Adobe Commerce | Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 | Yüksek8,3 | — | %0,4 | 11 Ağu 2026 |
30İzleyin | CVE-2026-48416İstismar yok | Adobe Commerce | Incorrect Authorization (CWE-863)adobe · commerce b2b · CWE-863 | Yüksek7,5 | — | %0,8 | 11 Ağu 2026 |
34İzleyin | CVE-2026-48441İstismar yok | Lightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · lightroom · CWE-22 | Yüksek8,6 | — | %0,3 | 11 Ağu 2026 |
30İzleyin | CVE-2026-48447İstismar yok | Lightroom Classic | Incorrect Authorization (CWE-863)adobe · lightroom · CWE-863 | Yüksek7,7 | — | %0,2 | 11 Ağu 2026 |
28İzleyin | CVE-2026-48494İstismar yok | TypeBot vulnerable to cross-typebot WhatsApp preview webhook resume via global `wa-preview-{phone}` session idsbaptistearno · typebot.io · CWE-639 | Yüksek7,1 | — | %0,4 | 11 Ağu 2026 |
30İzleyin | CVE-2026-48767İstismar yok | Google Sheets OAuth access token disclosure to guest members via getAccessTokenbaptistearno · typebot.io · CWE-200 | Yüksek7,6 | — | %0,4 | 11 Ağu 2026 |
32İzleyin | CVE-2026-48771İstismar yok | ishankportfolio: Stored Contact Form Submission Exposure via Public Client-Side Database Configurationishankjha740 · ishankportfolio · CWE-200 | Yüksek8,2 | — | %0,3 | 11 Ağu 2026 |
37İzleyin | CVE-2026-69102İstismar yok | MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trustdromara · maxkey · CWE-798 | Kritik9,3 | — | %0,6 | 11 Ağu 2026 |
92Hemen | CVE-2026-71362Silahlaştırılmış | Adobe Commerce | Incorrect Authorization (CWE-863)adobe · commerce · CWE-863 | Kritik9,1 | KEV | %87,5 | 11 Ağu 2026 |
40Planlayın | CVE-2026-71398İstismar yok | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)adobe · campaign · CWE-863 | Kritik10,0 | — | %1,1 | 11 Ağu 2026 |
34İzleyin | CVE-2026-72713İstismar yok | XAgent Path Traversal Arbitrary File Read via /workspace/fileopenbmb · xagent · CWE-22 | Yüksek8,7 | — | %0,8 | 11 Ağu 2026 |
37İzleyin | CVE-2026-73090İstismar yok | PeerTube: Cross-origin remote video takeover via Update activitychocobozzz · peertube · CWE-863 | Kritik9,3 | — | %0,3 | 11 Ağu 2026 |
39İzleyin | CVE-2026-73211İstismar yok | PeerTube: Unauthenticated remote SQL injection in ActorFollowModel.updateScore()chocobozzz · peertube · CWE-89 | Kritik9,8 | — | %0,7 | 11 Ağu 2026 |
32İzleyin | CVE-2026-73214İstismar yok | coturn allocates a full per-peer SSL/session before verifying the DTLS cookie, enabling source-spoofing/botnet state-exhaustion DoScoturn · coturn · CWE-400 | Yüksek8,2 | — | %0,5 | 11 Ağu 2026 |
28İzleyin | CVE-2026-73215İstismar yok | The coturn server can end in a state where it does not accept more requests with "even-port" enabled.coturn · coturn · CWE-400 | Yüksek7,1 | — | %0,4 | 11 Ağu 2026 |
30İzleyin | CVE-2026-73217İstismar yok | Cursor: Sandbox escape via tampered Python virtual environmentscursor · cursor · CWE-693 | Yüksek7,7 | — | %0,4 | 11 Ağu 2026 |
30İzleyin | CVE-2026-73218İstismar yok | Cursor: Sandbox escape via launching privileged containerscursor · cursor · CWE-269 | Yüksek7,7 | — | %0,6 | 11 Ağu 2026 |
35İzleyin | CVE-2026-15426İstismar yok | AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Updateacyba · acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress · CWE-269 | Yüksek8,8 | — | %0,6 | 11 Ağu 2026 |
- CVE-2026-6680731İzleyin
Microsoft Office Graphics Component Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6680836İzleyin
Microsoft SharePoint Server Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2microsoft · sharepoint server11 Ağu 2026
- CVE-2026-6879231İzleyin
Microsoft Office Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6879331İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6879431İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6879531İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6879631İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6879831İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6880031İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6880131İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6880331İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6880431İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6880531İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6880631İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6880731İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6881031İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6881131İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6881231İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6881431İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6881531İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6881631İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6881731İzleyin
Microsoft Excel Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-6881930İzleyin
Windows Network File System Denial of Service Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0microsoft · windows 10 160711 Ağu 2026
- CVE-2026-6882058Planlayın
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %0microsoft · windows 10 160711 Ağu 2026
- CVE-2026-6882131İzleyin
Windows Package Manager Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · app installer11 Ağu 2026
- CVE-2026-6922336İzleyin
Apache Allura: Server-side request forgery
KritikCVSS 9,1İstismar yokEPSS %0apache · allura11 Ağu 2026
- CVE-2026-6927831İzleyin
Visual Studio Code Security Feature Bypass Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · visual studio code11 Ağu 2026
- CVE-2026-6930632İzleyin
Visual Studio Code Security Feature Bypass Vulnerability
YüksekCVSS 8,2İstismar yokEPSS %0microsoft · visual studio code11 Ağu 2026
- CVE-2026-6932035İzleyin
Visual Studio Code Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · visual studio code11 Ağu 2026
- CVE-2026-7013031İzleyin
Microsoft Office Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-7030431İzleyin
Windows DNS Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · windows 10 160711 Ağu 2026
- CVE-2026-7030637İzleyin
Microsoft Office SharePoint Spoofing Vulnerability
KritikCVSS 9,3İstismar yokEPSS %1microsoft · sharepoint server11 Ağu 2026
- CVE-2026-7030728İzleyin
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
YüksekCVSS 7,0İstismar yokEPSS %0microsoft · windows 10 160711 Ağu 2026
- CVE-2026-7277834İzleyin
Craft CMS 5.0.0-RC1 before 5.10.6 Authenticated RCE via condition.config
YüksekCVSS 8,7Kavram kanıtıEPSS %0craftcms · cms11 Ağu 2026
- CVE-2026-7277934İzleyin
Craft CMS 5.0.0-RC1 before 5.10.6 Arbitrary File Read via SplFileObject
YüksekCVSS 8,7İstismar yokEPSS %0craftcms · cms11 Ağu 2026
- CVE-2026-7031131İzleyin
Microsoft Office Word Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-7278028İzleyin
Craft CMS before 5.10.5 WebAuthn Assertion Replay via login-with-passkey
YüksekCVSS 7,1İstismar yokEPSS %0craftcms · cms11 Ağu 2026
- CVE-2026-7278134İzleyin
Craft CMS 5.0.0-RC1 before 5.10.7 Remote Code Execution via Twig Sandbox Escape
YüksekCVSS 8,7Kavram kanıtıEPSS %0craftcms · cms11 Ağu 2026
- CVE-2026-7031331İzleyin
Microsoft PowerPoint Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-7278228İzleyin
Craft CMS 5.0.0-RC1 before 5.10.6 Environment Variable Leak
YüksekCVSS 7,1İstismar yokEPSS %0craftcms · cms11 Ağu 2026
- CVE-2026-7278537İzleyin
Craft CMS before 5.10.6 Authorization Bypass via structures/move-element
KritikCVSS 9,3İstismar yokEPSS %0craftcms · cms11 Ağu 2026
- CVE-2026-7032136İzleyin
Microsoft SharePoint Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1microsoft · sharepoint server11 Ağu 2026
- CVE-2026-7032435İzleyin
Microsoft SharePoint Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · sharepoint server11 Ağu 2026
- CVE-2026-7032635İzleyin
Microsoft SharePoint Server Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · sharepoint server11 Ağu 2026
- CVE-2026-7032935İzleyin
Microsoft Outlook Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · 365 apps11 Ağu 2026
- CVE-2026-7033031İzleyin
Windows DNS Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · windows 10 160711 Ağu 2026
- CVE-2026-7033531İzleyin
GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · visual studio code11 Ağu 2026
- CVE-2026-7033635İzleyin
Visual Studio Code Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · visual studio code11 Ağu 2026
- CVE-2026-7033735İzleyin
Microsoft PowerShell Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · powershell11 Ağu 2026
- CVE-2026-7033831İzleyin
Microsoft PowerShell Security Feature Bypass Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · powershell11 Ağu 2026
- CVE-2026-7034035İzleyin
Azure CycleCloud Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · azure cyclecloud11 Ağu 2026
- CVE-2026-7034431İzleyin
Windows Installer Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · windows 10 160711 Ağu 2026
- CVE-2026-7034531İzleyin
Windows Installer Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · windows 10 160711 Ağu 2026
- CVE-2026-7034631İzleyin
Windows Installer Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · windows 10 160711 Ağu 2026
- CVE-2026-7034731İzleyin
Windows Installer Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · windows 10 160711 Ağu 2026
- CVE-2026-7035431İzleyin
.NET Core Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · visual studio 202211 Ağu 2026
- CVE-2026-7035534İzleyin
Microsoft SharePoint Server Elevation of Privilege Vulnerability
YüksekCVSS 8,7İstismar yokEPSS %0microsoft · sharepoint server11 Ağu 2026
- CVE-2026-7133132İzleyin
Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0microsoft · windows 10 180911 Ağu 2026
- CVE-2026-7138329İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 7,3İstismar yokEPSS %0adobe · coldfusion11 Ağu 2026
- CVE-2026-7138438İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
KritikCVSS 9,6İstismar yokEPSS %0adobe · coldfusion11 Ağu 2026
- CVE-2026-7138635İzleyin
ColdFusion | Cross-site Scripting (XSS) (CWE-79)
YüksekCVSS 8,8İstismar yokEPSS %0adobe · coldfusion11 Ağu 2026
- CVE-2026-7138735İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 8,8İstismar yokEPSS %0adobe · coldfusion11 Ağu 2026
- CVE-2026-7308134İzleyin
Activepieces: Remote Code Execution via Command Injection in Code Step Name
YüksekCVSS 8,7İstismar yokEPSS %0activepieces · activepieces11 Ağu 2026
- CVE-2026-7308330İzleyin
Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading
YüksekCVSS 7,6İstismar yokEPSS %0activepieces · activepieces11 Ağu 2026
- CVE-2026-7308629İzleyin
nanoid: Integer Overflow or Wraparound
YüksekCVSS 7,4İstismar yokEPSS %0ai · nanoid11 Ağu 2026
- CVE-2026-7308830İzleyin
Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)
YüksekCVSS 7,5İstismar yokEPSS %0browserslist · browserslist11 Ağu 2026
- CVE-2026-7308930İzleyin
Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM
YüksekCVSS 7,5İstismar yokEPSS %0browserslist · browserslist11 Ağu 2026
- CVE-2026-2730240Planlayın
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
KritikCVSS 10,0İstismar yokEPSS %1adobe · campaign11 Ağu 2026
- CVE-2026-4770538İzleyin
TypeBot vulnerable to CSV injection in result export
KritikCVSS 9,6İstismar yokEPSS %0baptistearno · typebot.io11 Ağu 2026
- CVE-2026-4794031İzleyin
Lightroom Classic | Integer Overflow or Wraparound (CWE-190)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · lightroom11 Ağu 2026
- CVE-2026-4838136İzleyin
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
KritikCVSS 9,0İstismar yokEPSS %0adobe · campaign11 Ağu 2026
- CVE-2026-4839734İzleyin
Lightroom Classic | Deserialization of Untrusted Data (CWE-502)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · lightroom11 Ağu 2026
- CVE-2026-4840431İzleyin
Lightroom Classic | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · lightroom11 Ağu 2026
- CVE-2026-4840531İzleyin
Lightroom Classic | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · lightroom11 Ağu 2026
- CVE-2026-4840631İzleyin
Lightroom Classic | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · lightroom11 Ağu 2026
- CVE-2026-4840731İzleyin
Lightroom Classic | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · lightroom11 Ağu 2026
- CVE-2026-4840831İzleyin
Lightroom Classic | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · lightroom11 Ağu 2026
- CVE-2026-4840931İzleyin
Lightroom Classic | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · lightroom11 Ağu 2026
- CVE-2026-4841031İzleyin
Lightroom Classic | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · lightroom11 Ağu 2026
- CVE-2026-4841228İzleyin
Adobe Commerce | Incorrect Authorization (CWE-863)
YüksekCVSS 7,2İstismar yokEPSS %0adobe · commerce11 Ağu 2026
- CVE-2026-4841334İzleyin
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
YüksekCVSS 8,7İstismar yokEPSS %0adobe · commerce11 Ağu 2026
- CVE-2026-4841434İzleyin
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
YüksekCVSS 8,7İstismar yokEPSS %0adobe · commerce11 Ağu 2026
- CVE-2026-4841533İzleyin
Adobe Commerce | Incorrect Authorization (CWE-863)
YüksekCVSS 8,3İstismar yokEPSS %0adobe · commerce11 Ağu 2026
- CVE-2026-4841630İzleyin
Adobe Commerce | Incorrect Authorization (CWE-863)
YüksekCVSS 7,5İstismar yokEPSS %0adobe · commerce b2b11 Ağu 2026
- CVE-2026-4844134İzleyin
Lightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · lightroom11 Ağu 2026
- CVE-2026-4844730İzleyin
Lightroom Classic | Incorrect Authorization (CWE-863)
YüksekCVSS 7,7İstismar yokEPSS %0adobe · lightroom11 Ağu 2026
- CVE-2026-4849428İzleyin
TypeBot vulnerable to cross-typebot WhatsApp preview webhook resume via global `wa-preview-{phone}` session ids
YüksekCVSS 7,1İstismar yokEPSS %0baptistearno · typebot.io11 Ağu 2026
- CVE-2026-4876730İzleyin
Google Sheets OAuth access token disclosure to guest members via getAccessToken
YüksekCVSS 7,6İstismar yokEPSS %0baptistearno · typebot.io11 Ağu 2026
- CVE-2026-4877132İzleyin
ishankportfolio: Stored Contact Form Submission Exposure via Public Client-Side Database Configuration
YüksekCVSS 8,2İstismar yokEPSS %0ishankjha740 · ishankportfolio11 Ağu 2026
- CVE-2026-6910237İzleyin
MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust
KritikCVSS 9,3İstismar yokEPSS %0dromara · maxkey11 Ağu 2026
- CVE-2026-7136292Hemen
Adobe Commerce | Incorrect Authorization (CWE-863)
KritikCVSS 9,1KEVSilahlaştırılmışEPSS %87adobe · commerce11 Ağu 2026
- CVE-2026-7139840Planlayın
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
KritikCVSS 10,0İstismar yokEPSS %1adobe · campaign11 Ağu 2026
- CVE-2026-7271334İzleyin
XAgent Path Traversal Arbitrary File Read via /workspace/file
YüksekCVSS 8,7İstismar yokEPSS %0openbmb · xagent11 Ağu 2026
- CVE-2026-7309037İzleyin
PeerTube: Cross-origin remote video takeover via Update activity
KritikCVSS 9,3İstismar yokEPSS %0chocobozzz · peertube11 Ağu 2026
- CVE-2026-7321139İzleyin
PeerTube: Unauthenticated remote SQL injection in ActorFollowModel.updateScore()
KritikCVSS 9,8İstismar yokEPSS %0chocobozzz · peertube11 Ağu 2026
- CVE-2026-7321432İzleyin
coturn allocates a full per-peer SSL/session before verifying the DTLS cookie, enabling source-spoofing/botnet state-exhaustion DoS
YüksekCVSS 8,2İstismar yokEPSS %0coturn · coturn11 Ağu 2026
- CVE-2026-7321528İzleyin
The coturn server can end in a state where it does not accept more requests with "even-port" enabled.
YüksekCVSS 7,1İstismar yokEPSS %0coturn · coturn11 Ağu 2026
- CVE-2026-7321730İzleyin
Cursor: Sandbox escape via tampered Python virtual environments
YüksekCVSS 7,7İstismar yokEPSS %0cursor · cursor11 Ağu 2026
- CVE-2026-7321830İzleyin
Cursor: Sandbox escape via launching privileged containers
YüksekCVSS 7,7İstismar yokEPSS %0cursor · cursor11 Ağu 2026
- CVE-2026-1542635İzleyin
AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update
YüksekCVSS 8,8İstismar yokEPSS %0acyba · acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress11 Ağu 2026