İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.296 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 21 / 73

  • CVE-2026-18694
    28İzleyin

    Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosure

    YüksekCVSS 7,1İstismar yokEPSS %0

    mongodb · mongodb11 Ağu 2026

  • CVE-2026-18695
    28İzleyin

    Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service

    YüksekCVSS 7,1İstismar yokEPSS %0

    mongodb · mongodb11 Ağu 2026

  • CVE-2026-18696
    28İzleyin

    Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections

    YüksekCVSS 7,0İstismar yokEPSS %0

    mongodb · mongodb11 Ağu 2026

  • CVE-2026-18697
    34İzleyin

    Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos

    YüksekCVSS 8,7İstismar yokEPSS %0

    mongodb · mongodb11 Ağu 2026

  • CVE-2026-18701
    28İzleyin

    Type Confusion in MongoDB Query Subsystem Leads to Denial of Service

    YüksekCVSS 7,1İstismar yokEPSS %0

    mongodb · mongodb11 Ağu 2026

  • CVE-2026-18704
    28İzleyin

    Improper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write Operations

    YüksekCVSS 7,1İstismar yokEPSS %0

    mongodb · mongodb11 Ağu 2026

  • CVE-2026-18705
    28İzleyin

    Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Data

    YüksekCVSS 7,1İstismar yokEPSS %0

    mongodb · mongodb11 Ağu 2026

  • CVE-2026-18706
    30İzleyin

    Use-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of Service and Potential Remote Code Execution

    YüksekCVSS 7,5İstismar yokEPSS %0

    mongodb · mongodb11 Ağu 2026

  • CVE-2026-18711
    28İzleyin

    Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosure

    YüksekCVSS 7,1İstismar yokEPSS %0

    mongodb · mongodb11 Ağu 2026

  • CVE-2026-18712
    28İzleyin

    Improper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other Collections

    YüksekCVSS 7,2İstismar yokEPSS %0

    mongodb · mongodb11 Ağu 2026

  • CVE-2026-48802
    30İzleyin

    python-engineio has unbound thread allocation that can cause denial of service

    YüksekCVSS 7,5İstismar yokEPSS %0

    miguelgrinberg · python-engineio11 Ağu 2026

  • CVE-2026-48809
    30İzleyin

    python-engineio has possible denial of service due to maximum payload size sometimes not being enforced

    YüksekCVSS 7,5İstismar yokEPSS %0

    miguelgrinberg · python-engineio11 Ağu 2026

  • CVE-2026-69115
    28İzleyin

    OpenIM Server v3.8.3 Missing Authorization on User and Group Enumeration Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    openimsdk · openim server (open-im-server)11 Ağu 2026

  • CVE-2026-69117
    28İzleyin

    NetBox 4.5.8 ORM Injection via WritableNestedSerializer

    YüksekCVSS 7,1İstismar yokEPSS %0

    netbox labs · netbox11 Ağu 2026

  • CVE-2026-69119
    28İzleyin

    Taubyte Tau v1.1.10 Missing Authorization via POST /projects/{id}

    YüksekCVSS 7,2İstismar yokEPSS %0

    taubyte · tau11 Ağu 2026

  • CVE-2026-72742
    36İzleyin

    DSPy 3.3.0b1 Local File Read via Image/Audio Output Field Parsing

    KritikCVSS 9,2İstismar yokEPSS %0

    stanford nlp · dspy11 Ağu 2026

  • CVE-2026-73222
    35İzleyin

    Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)

    YüksekCVSS 8,8İstismar yokEPSS %0

    davila7 · claude-code-templates11 Ağu 2026

  • CVE-2026-73223
    32İzleyin

    electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename

    YüksekCVSS 8,1İstismar yokEPSS %0

    electerm · electerm11 Ağu 2026

  • CVE-2026-73224
    35İzleyin

    Electerm check folder size function may get attacked by unsafe folder name

    YüksekCVSS 8,8İstismar yokEPSS %0

    electerm · electerm11 Ağu 2026

  • CVE-2026-73225
    32İzleyin

    electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename

    YüksekCVSS 8,1İstismar yokEPSS %0

    electerm · electerm11 Ağu 2026

  • CVE-2026-73226
    35İzleyin

    Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist

    YüksekCVSS 8,8İstismar yokEPSS %0

    electerm · electerm11 Ağu 2026

  • CVE-2026-73227
    32İzleyin

    electerm's RDP clipboard file download may parse unsafe file name

    YüksekCVSS 8,1İstismar yokEPSS %0

    electerm · electerm11 Ağu 2026

  • GHSA-w36c-qxrq-v7fw
    35İzleyin

    Duplicate Advisory: Craft CMS: Authenticated RCE via `condition.config` JSON cleanse bypass

    YüksekCVSS 8,8İstismar yok

    Packagist · craftcms/cms11 Ağu 2026

  • GHSA-h784-hpjp-2rrm
    35İzleyin

    Duplicate Advisory: Craft CMS: Authenticated RCE through Twig sandbox escape

    YüksekCVSS 8,8İstismar yok

    Packagist · craftcms/cms11 Ağu 2026

  • CVE-2025-31114
    37İzleyin

    Fooocus webui vulnerable to Remote Code Execution

    KritikCVSS 9,3İstismar yokEPSS %0

    lllyasviel · fooocus11 Ağu 2026

  • CVE-2026-13457
    30İzleyin

    InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure

    YüksekCVSS 7,5İstismar yokEPSS %0

    instawp · instawp connect – 1-click wp staging & migration11 Ağu 2026

  • CVE-2026-16230
    39İzleyin

    Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature Field

    KritikCVSS 9,8İstismar yokEPSS %0

    strategy11 · formidable digital signatures11 Ağu 2026

  • CVE-2026-18844
    28İzleyin

    Pulsetto Vagus Nerve Stimulator Hidden Functionality

    YüksekCVSS 7,2İstismar yokEPSS %0

    pulsetto · vagus nerve stimulator11 Ağu 2026

  • CVE-2026-73072
    34İzleyin

    Vim: Heap Buffer Overflow when Loading a Spell File

    YüksekCVSS 8,5Kavram kanıtıEPSS %0

    vim · vim11 Ağu 2026

  • CVE-2026-73074
    28İzleyin

    Vim: Heap Buffer Overflow in Text Property Handling

    YüksekCVSS 7,1İstismar yokEPSS %0

    vim · vim11 Ağu 2026

  • CVE-2026-19091
    32İzleyin

    GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_del

    YüksekCVSS 8,1İstismar yokEPSS %1

    paoltaia · geodirectory – wp business directory plugin and classified listings directory11 Ağu 2026

  • CVE-2026-73076
    33İzleyin

    Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`

    YüksekCVSS 8,4İstismar yokEPSS %0

    vim · vim11 Ağu 2026

  • CVE-2026-73077
    33İzleyin

    Vim: Arbitrary Code Execution via Shell Keyword Lookup

    YüksekCVSS 8,4İstismar yokEPSS %0

    vim · vim11 Ağu 2026

  • CVE-2026-73078
    34İzleyin

    Vim: Arbitrary Code Execution via Netrw Menu Construction

    YüksekCVSS 8,6İstismar yokEPSS %0

    vim · vim11 Ağu 2026

  • CVE-2026-45618
    40Planlayın

    LiquidJS is Vulnerable to Remote Code Execution

    KritikCVSS 10,0İstismar yokEPSS %0

    harttle · liquidjs11 Ağu 2026

  • CVE-2026-48804
    30İzleyin

    python-socketio: Binary attachment accumulation can cause denial of service

    YüksekCVSS 7,5İstismar yokEPSS %0

    miguelgrinberg · python-socketio11 Ağu 2026

  • CVE-2026-48813
    34İzleyin

    Flawfinder output manipulation via untrusted filenames and source text

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    david-a-wheeler · flawfinder11 Ağu 2026

  • CVE-2026-66145
    36İzleyin

    An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remot

    KritikCVSS 9,1İstismar yokEPSS %0

    sonicwall · gms11 Ağu 2026

  • CVE-2026-71467
    30İzleyin

    Acm-search-v2-api-rhel9: search-v2-api: authentication bypass on /federated via upgrade: websocket header spoofing

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat advanced cluster management for kubernetes 2.1711 Ağu 2026

  • CVE-2026-71474
    28İzleyin

    Insights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx response

    YüksekCVSS 7,1İstismar yokEPSS %0

    redhat · advanced cluster management for kubernetes11 Ağu 2026

  • CVE-2026-71845
    30İzleyin

    Insights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault()

    YüksekCVSS 7,7İstismar yokEPSS %0

    redhat · advanced cluster management for kubernetes11 Ağu 2026

  • CVE-2026-73031
    32İzleyin

    telegram-search Stored XSS via v-html in MessageList.vue

    YüksekCVSS 8,2İstismar yokEPSS %0

    gramsearch · telegram-search11 Ağu 2026

  • CVE-2026-73032
    37İzleyin

    PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()

    KritikCVSS 9,4İstismar yokEPSS %0

    papersgpt · papersgpt-for-zotero11 Ağu 2026

  • CVE-2026-73034
    39İzleyin

    DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header

    KritikCVSS 9,3Kavram kanıtıEPSS %5

    eosphoros-ai · db-gpt11 Ağu 2026

  • CVE-2026-73231
    31İzleyin

    Faker: helpers.fake exploitable into arbritary code execution

    YüksekCVSS 7,8İstismar yokEPSS %0

    faker-js · faker11 Ağu 2026

  • CVE-2026-73232
    30İzleyin

    ffuf denial of service (OOM) via HTTP response decompression bomb

    YüksekCVSS 7,5İstismar yokEPSS %0

    ffuf · ffuf11 Ağu 2026

  • CVE-2026-73233
    34İzleyin

    FreeCAD: FEM formula incomplete escape

    YüksekCVSS 8,5İstismar yokEPSS %0

    freecad · freecad11 Ağu 2026

  • CVE-2026-73234
    31İzleyin

    FreeCAD: FCStd path traversal allows arbitrary file write via unsanitized file attribute in PropertyFileIncluded::Restore()

    YüksekCVSS 7,8İstismar yokEPSS %0

    freecad · freecad11 Ağu 2026

  • CVE-2026-73241
    33İzleyin

    FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`)

    YüksekCVSS 8,3İstismar yokEPSS %0

    freerdp · freerdp11 Ağu 2026

  • CVE-2026-73242
    33İzleyin

    FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`

    YüksekCVSS 8,3İstismar yokEPSS %0

    freerdp · freerdp11 Ağu 2026

  • CVE-2026-14863
    35İzleyin

    FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection

    YüksekCVSS 8,7İstismar yokEPSS %2

    filerun · filerun11 Ağu 2026

  • CVE-2026-15606
    35İzleyin

    Frontend Admin by DynamiApps <= 3.29.9 - Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Token

    YüksekCVSS 8,8İstismar yokEPSS %0

    shabti · frontend admin by dynamiapps11 Ağu 2026

  • CVE-2026-18634
    33İzleyin

    An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and

    YüksekCVSS 8,4İstismar yokEPSS %0

    sonicwall · gms11 Ağu 2026

  • CVE-2026-29035
    33İzleyin

    CivetWeb Heap/Stack Buffer Overflow via WebSocket permessage-deflate Decompression

    YüksekCVSS 8,3İstismar yokEPSS %0

    civetweb · civetweb11 Ağu 2026

  • CVE-2026-48763
    32İzleyin

    TypeBot has Arbitrary S3 Object Write in deprecated public upload endpoint via attacker-controlled filePath

    YüksekCVSS 8,2İstismar yokEPSS %0

    baptistearno · typebot.io11 Ağu 2026

  • CVE-2026-48765
    39İzleyin

    TypeBot vulnerable to cross-workspace OAuth credential takeover in updateOAuthCredentials via missing object binding

    KritikCVSS 9,9İstismar yokEPSS %0

    baptistearno · typebot.io11 Ağu 2026

  • CVE-2025-31936
    28İzleyin

    Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may a

    YüksekCVSS 7,0İstismar yokEPSS %0

    intel · xeon 6337p firmware11 Ağu 2026

  • CVE-2025-8087
    28İzleyin

    A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstall

    YüksekCVSS 7,0İstismar yokEPSS %0

    amd · amd power design manager (pdm) software un-installer11 Ağu 2026

  • CVE-2026-66147
    38İzleyin

    An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allo

    KritikCVSS 9,4İstismar yokEPSS %1

    sonicwall · gms11 Ağu 2026

  • CVE-2026-66149
    31İzleyin

    Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated at

    YüksekCVSS 7,8İstismar yokEPSS %0

    sonicwall · email security11 Ağu 2026

  • CVE-2026-66150
    31İzleyin

    Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated at

    YüksekCVSS 7,8İstismar yokEPSS %0

    sonicwall · email security11 Ağu 2026

  • CVE-2026-66154
    33İzleyin

    An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) a

    YüksekCVSS 8,3İstismar yokEPSS %0

    sonicwall · gms11 Ağu 2026

  • CVE-2026-71290
    36İzleyin

    Apache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM)

    KritikCVSS 9,1İstismar yokEPSS %0

    apache · httpclient11 Ağu 2026

  • CVE-2026-50516
    37İzleyin

    Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

    KritikCVSS 9,4İstismar yokEPSS %0

    microsoft · azure kubernetes service11 Ağu 2026

  • CVE-2026-62712
    31İzleyin

    Windows Win32k Elevation of Privilege Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    microsoft · windows 10 160711 Ağu 2026

  • CVE-2026-62824
    35İzleyin

    Remote Desktop Client Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · windows 10 160711 Ağu 2026

  • CVE-2026-62886
    31İzleyin

    .NET Elevation of Privilege Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    microsoft · visual studio 202211 Ağu 2026

  • CVE-2026-62911
    32İzleyin

    Microsoft Exchange Server Elevation of Privilege Vulnerability

    YüksekCVSS 8,0Kavram kanıtıEPSS %0

    microsoft · exchange server11 Ağu 2026

  • CVE-2026-63533
    31İzleyin

    Microsoft Office Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    microsoft · 365 apps11 Ağu 2026

  • CVE-2026-64906
    31İzleyin

    Microsoft Access Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    microsoft · 365 apps11 Ağu 2026

  • CVE-2026-65673
    31İzleyin

    Microsoft Entra Connect Elevation of Privilege Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    microsoft · entra connect11 Ağu 2026

  • CVE-2026-66805
    36İzleyin

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %2

    microsoft · sharepoint server11 Ağu 2026

  • CVE-2026-68798
    31İzleyin

    Microsoft Excel Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    microsoft · 365 apps11 Ağu 2026

  • CVE-2026-68800
    31İzleyin

    Microsoft Excel Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    microsoft · 365 apps11 Ağu 2026

  • CVE-2016-20097
    34İzleyin

    Weaver E-cology 8.0 SQL Injection File Read via SignatureDownLoad

    YüksekCVSS 8,7İstismar yokEPSS %0

    weaver network co., ltd. · e-cology 8.011 Ağu 2026

  • CVE-2022-50997
    34İzleyin

    Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp

    YüksekCVSS 8,7İstismar yokEPSS %0

    weaver network co., ltd. · e-cology 9.011 Ağu 2026

  • CVE-2025-0046
    28İzleyin

    Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution.

    YüksekCVSS 7,0İstismar yokEPSS %0

    amd · amd power design manager (pdm) software installer for windows11 Ağu 2026

  • CVE-2025-54512
    28İzleyin

    A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges,

    YüksekCVSS 7,0İstismar yokEPSS %0

    amd · amd ryzen™ master11 Ağu 2026

  • CVE-2026-18710
    32İzleyin

    Cleartext Storage of Sensitive Information in MongoDB Driver Logging During Client Initialization

    YüksekCVSS 8,2İstismar yokEPSS %0

    mongodb · java driver11 Ağu 2026

  • CVE-2026-19556
    35İzleyin

    Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome11 Ağu 2026

  • CVE-2026-19557
    33İzleyin

    Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer proces

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome11 Ağu 2026

  • CVE-2026-19558
    30İzleyin

    Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extens

    YüksekCVSS 7,5İstismar yokEPSS %0

    google · chrome11 Ağu 2026

  • CVE-2026-19559
    35İzleyin

    Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a c

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome11 Ağu 2026

  • CVE-2026-19560
    35İzleyin

    Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome11 Ağu 2026

  • CVE-2026-29036
    34İzleyin

    cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding

    YüksekCVSS 8,7İstismar yokEPSS %0

    davegamble · cjson11 Ağu 2026

  • CVE-2026-5917
    34İzleyin

    libgit2 Shell Command Injection via ssh_libssh2 Backend

    YüksekCVSS 8,6İstismar yokEPSS %1

    libgit2 · libgit211 Ağu 2026

  • CVE-2026-66098
    28İzleyin

    Mira Hormone Monitor, Mira Android App Missing authentication for critical function

    YüksekCVSS 7,1İstismar yokEPSS %0

    quanovate tech inc. (operating as mira / mira care) · mira firmware11 Ağu 2026

  • CVE-2026-66875
    34İzleyin

    Mira Hormone Monitor, Mira Android App Missing authentication for critical function

    YüksekCVSS 8,7İstismar yokEPSS %0

    quanovate tech inc. (operating as mira / mira care) · mira firmware11 Ağu 2026

  • CVE-2026-67558
    32İzleyin

    Mira Hormone Monitor, Mira Android App Authentication bypass by spoofing

    YüksekCVSS 8,2İstismar yokEPSS %0

    quanovate tech inc. (operating as mira / mira care) · mira firmware11 Ağu 2026

  • CVE-2026-67568
    37İzleyin

    Mira Hormone Monitor, Mira Android App Use of Hard-coded Credentials

    KritikCVSS 9,3İstismar yokEPSS %0

    quanovate tech inc. (operating as mira / mira care) · mira firmware11 Ağu 2026

  • CVE-2026-68067
    37İzleyin

    Mira Hormone Monitor, Mira Android App Weak Authentication

    KritikCVSS 9,3İstismar yokEPSS %0

    quanovate tech inc. (operating as mira / mira care) · mira firmware11 Ağu 2026

  • CVE-2026-73246
    30İzleyin

    Kestra: Unauthenticated management `/worker` endpoint exposes live task configuration and plaintext credentials

    YüksekCVSS 7,5İstismar yokEPSS %0

    kestra-io · kestra11 Ağu 2026

  • CVE-2026-73247
    34İzleyin

    Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata

    YüksekCVSS 8,6İstismar yokEPSS %0

    kestra-io · kestra11 Ağu 2026

  • CVE-2026-73248
    34İzleyin

    calibre: Bypass of Python template restrictions via nested `template()` leading to RCE

    YüksekCVSS 8,5İstismar yokEPSS %0

    kovidgoyal · calibre11 Ağu 2026

  • CVE-2026-73249
    30İzleyin

    calibre Content Server `/book-update-annotations` Missing Write Authorization Check Allows Unauthorized Annotation Modification

    YüksekCVSS 7,5İstismar yokEPSS %0

    kovidgoyal · calibre11 Ağu 2026

  • GHSA-2q33-cf8w-7q23
    39İzleyin

    Duplicate Advisory: Microsoft QUIC Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yok

    NuGet · Microsoft.Native.Quic.MsQuic.OpenSSL11 Ağu 2026

  • CVE-2026-68431
    36İzleyin

    ksmbd: validate minimum PDU size for transform requests

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux11 Ağu 2026

  • CVE-2026-68440
    31İzleyin

    net: txgbe: fix heap overflow when reading module EEPROM

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Ağu 2026

  • CVE-2026-68445
    31İzleyin

    drm/vc4: Prevent shader BO mappings from becoming writable

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Ağu 2026

  • CVE-2026-6484
    32İzleyin

    Lack of verified boot to certain FV may cause arbitrary code execution

    YüksekCVSS 8,2İstismar yokEPSS %0

    insyde software · insydeh2o11 Ağu 2026