İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.237 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 22 / 73

  • CVE-2026-16294
    28İzleyin

    Blubrry PowerPress < 11.17.1 - Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URL

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · powerpress podcasting plugin by blubrry12 Ağu 2026

  • CVE-2026-16538
    36İzleyin

    TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up

    KritikCVSS 9,1İstismar yokEPSS %0

    unknown · wallet for woocommerce12 Ağu 2026

  • CVE-2026-16977
    32İzleyin

    Form Maker by 10Web < 1.15.45 - Subscriber+ SQL Injection via display_name

    YüksekCVSS 8,1İstismar yokEPSS %0

    unknown · form maker by 10web12 Ağu 2026

  • CVE-2026-18048
    30İzleyin

    WP Photo Album Plus < 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · wp photo album plus12 Ağu 2026

  • CVE-2026-18049
    30İzleyin

    WP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogo

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · wp photo album plus12 Ağu 2026

  • CVE-2026-18057
    32İzleyin

    Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection

    YüksekCVSS 8,1İstismar yokEPSS %0

    unknown · events manager12 Ağu 2026

  • CVE-2026-18230
    32İzleyin

    WP Directory Kit < 1.5.6 - Subscriber+ SQL Injection via section Parameter

    YüksekCVSS 8,1İstismar yokEPSS %0

    unknown · wp directory kit12 Ağu 2026

  • CVE-2026-18366
    39İzleyin

    Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    unknown · events manager12 Ağu 2026

  • CVE-2026-18391
    39İzleyin

    WooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object Injection

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · woocommerce subscriptions12 Ağu 2026

  • CVE-2026-18474
    34İzleyin

    WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_category

    YüksekCVSS 8,6İstismar yokEPSS %0

    unknown · wp directory kit12 Ağu 2026

  • CVE-2026-18789
    30İzleyin

    Ezoic < 2.23.1 - Unauthenticated Database Export via Content Export REST Routes

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · ezoic12 Ağu 2026

  • CVE-2026-12234
    31İzleyin

    TOCTOU double-fetch in `zsock_sendmsg`/`recvmsg` userspace verifiers allows kernel-heap out-of-bounds write

    YüksekCVSS 7,8İstismar yokEPSS %0

    zephyrproject · zephyr12 Ağu 2026

  • CVE-2026-64954
    32İzleyin

    Velociraptor collect_client() Permissions Bypass

    YüksekCVSS 8,2İstismar yokEPSS %0

    rapid7 · velociraptor12 Ağu 2026

  • CVE-2026-19594
    32İzleyin

    Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation

    YüksekCVSS 8,1İstismar yokEPSS %0

    snowflake · snowflake python apis12 Ağu 2026

  • CVE-2026-66659
    37İzleyin

    WordPress Tablesome Table plugin <= 1.2.9 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    essekia · tablesome table12 Ağu 2026

  • CVE-2025-41769
    37İzleyin

    Unauthenticated Buffer Overflow in PROFINET Service

    KritikCVSS 9,3İstismar yokEPSS %0

    phoenix contact · axc f 115212 Ağu 2026

  • CVE-2025-41770
    34İzleyin

    Unauthenticated Denial of Service

    YüksekCVSS 8,7İstismar yokEPSS %0

    phoenix contact · axc f 115212 Ağu 2026

  • CVE-2026-19426
    35İzleyin

    FitSoft｜POS Sytstem - Missing Authentication

    YüksekCVSS 8,8İstismar yokEPSS %0

    fitsoft · pos system12 Ağu 2026

  • CVE-2026-19566
    30İzleyin

    Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths

    YüksekCVSS 7,5İstismar yokEPSS %0

    rrwo · net::cidr::set12 Ağu 2026

  • CVE-2026-67282
    40Planlayın

    Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8

    KritikCVSS 10,0İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla12 Ağu 2026

  • CVE-2026-47231
    32İzleyin

    Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders

    YüksekCVSS 8,1İstismar yokEPSS %0

    admidio · admidio12 Ağu 2026

  • CVE-2026-73284
    35İzleyin

    RustFS: AddServiceAccount Handler Allows Creation of Root-Parent Service Accounts

    YüksekCVSS 8,8İstismar yokEPSS %0

    rustfs · rustfs12 Ağu 2026

  • CVE-2026-73285
    30İzleyin

    RustFS: OPA policy plugin omits ExistingObjectTag conditions, allowing tag-based authorization policies to treat tagged objects as untagged

    YüksekCVSS 7,5İstismar yokEPSS %0

    rustfs · rustfs12 Ağu 2026

  • CVE-2026-73286
    32İzleyin

    RustF: Request headers can populate server-derived IAM condition keys, letting a caller satisfy identity-based policy conditions

    YüksekCVSS 8,1İstismar yokEPSS %0

    rustfs · rustfs12 Ağu 2026

  • CVE-2026-73289
    32İzleyin

    RustFS: ForAllValues/ForAnyValue negated string conditions are transposed, inverting IAM and bucket-policy decisions

    YüksekCVSS 8,1İstismar yokEPSS %0

    rustfs · rustfs12 Ağu 2026

  • CVE-2026-73431
    35İzleyin

    Reusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookup

    YüksekCVSS 8,8İstismar yokEPSS %0

    vulnerability-lookup · vulnerability-lookup12 Ağu 2026

  • CVE-2026-11325
    35İzleyin

    cloudflare/pages-action is deprecated — migration required by September 18th, 2026

    YüksekCVSS 8,8İstismar yokEPSS %0

    cloudflare · https://github.com/cloudflare/pages-action12 Ağu 2026

  • CVE-2026-70465
    32İzleyin

    A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, F

    YüksekCVSS 8,1İstismar yokEPSS %0

    fortinet · forticlient12 Ağu 2026

  • CVE-2026-26035
    39İzleyin

    An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, For

    KritikCVSS 9,8İstismar yokEPSS %0

    fortinet · fortiweb12 Ağu 2026

  • CVE-2026-53996
    29İzleyin

    NetBSD hdaudio(4) Driver Privilege Bypass Use-After-Free via HDAUDIO_FGRP_SETCONFIG ioctl

    YüksekCVSS 7,3İstismar yokEPSS %0

    the netbsd foundation · netbsd12 Ağu 2026

  • CVE-2026-57858
    37İzleyin

    Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking ID

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    cal.com · cal.com self-hosted (cal.diy)12 Ağu 2026

  • CVE-2026-70468
    32İzleyin

    A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, F

    YüksekCVSS 8,1İstismar yokEPSS %0

    fortinet · fortimanager12 Ağu 2026

  • CVE-2026-71407
    32İzleyin

    A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated att

    YüksekCVSS 8,1İstismar yokEPSS %0

    fortinet · fortios12 Ağu 2026

  • CVE-2026-48553
    30İzleyin

    Nagios Core / XI Authenticated RCE via Custom-Variable Macro Injection

    YüksekCVSS 7,7İstismar yokEPSS %0

    nagios enterprises, llc. · nagios core12 Ağu 2026

  • CVE-2026-48554
    30İzleyin

    Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution

    YüksekCVSS 7,7İstismar yokEPSS %0

    nagios enterprises, llc. · nagios core12 Ağu 2026

  • CVE-2026-15423
    34İzleyin

    Incorrect Authorization in GitLab

    YüksekCVSS 8,5İstismar yokEPSS %0

    gitlab · gitlab12 Ağu 2026

  • CVE-2026-16627
    36İzleyin

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    KritikCVSS 9,0İstismar yokEPSS %0

    gitlab · gitlab12 Ağu 2026

  • CVE-2026-44741
    35İzleyin

    Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    pimcore · pimcore12 Ağu 2026

  • CVE-2025-59325
    30İzleyin

    CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents, allowing for the offline recovery of secrets

    YüksekCVSS 7,5İstismar yokEPSS %0

    12 Ağu 2026

  • CVE-2025-59326
    39İzleyin

    CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for u

    KritikCVSS 9,8İstismar yokEPSS %0

    12 Ağu 2026

  • CVE-2025-59327
    30İzleyin

    In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is pres

    YüksekCVSS 7,5İstismar yokEPSS %0

    12 Ağu 2026

  • CVE-2026-73300
    38İzleyin

    Budibase: SQL Injection via `multipleStatements: true`

    KritikCVSS 9,6İstismar yokEPSS %0

    budibase · budibase12 Ağu 2026

  • CVE-2026-7427
    30İzleyin

    Allocation of Resources Without Limits or Throttling in GitLab

    YüksekCVSS 7,5İstismar yokEPSS %0

    gitlab · gitlab12 Ağu 2026

  • CVE-2026-67285
    36İzleyin

    Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0

    KritikCVSS 9,2İstismar yokEPSS %0

    joomshaper.com · sp page builder extension for joomla12 Ağu 2026

  • CVE-2025-59319
    28İzleyin

    CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first p

    YüksekCVSS 7,2İstismar yokEPSS %0

    12 Ağu 2026

  • CVE-2025-59321
    39İzleyin

    CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state.

    KritikCVSS 9,8İstismar yokEPSS %0

    12 Ağu 2026

  • CVE-2025-59322
    30İzleyin

    CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted

    YüksekCVSS 7,5İstismar yokEPSS %0

    12 Ağu 2026

  • CVE-2025-59323
    33İzleyin

    CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partitioned filesystem, respo

    YüksekCVSS 8,4İstismar yokEPSS %0

    12 Ağu 2026

  • CVE-2025-59324
    36İzleyin

    CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoP

    KritikCVSS 9,1İstismar yokEPSS %0

    12 Ağu 2026

  • CVE-2026-18952
    34İzleyin

    Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin

    YüksekCVSS 8,6İstismar yokEPSS %0

    aws · opensearch12 Ağu 2026

  • CVE-2026-19311
    34İzleyin

    Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin

    YüksekCVSS 8,6İstismar yokEPSS %0

    aws · opensearch12 Ağu 2026

  • CVE-2026-14478
    31İzleyin

    Incorrect Permission Assignment in Autodesk Installer Named Pipes

    YüksekCVSS 7,8İstismar yokEPSS %0

    autodesk · installer12 Ağu 2026

  • CVE-2026-50561
    37İzleyin

    Yuxi has a JWT Authentication Bypass Leading to Cross-Instance Administrator Token Reuse

    KritikCVSS 9,4İstismar yokEPSS %0

    xerrors · yuxi12 Ağu 2026

  • CVE-2026-66375
    32İzleyin

    Low-privilege users may remove protected Artifactory metadata

    YüksekCVSS 8,1İstismar yokEPSS %0

    jfrog · artifactory12 Ağu 2026

  • CVE-2026-68752
    28İzleyin

    Project Resource Managers may escalate privileges in JFrog Artifactory

    YüksekCVSS 7,2İstismar yokEPSS %0

    jfrog · artifactory12 Ağu 2026

  • CVE-2026-68757
    30İzleyin

    Potential improper SAML signature verification in JFrog Artifactory

    YüksekCVSS 7,5İstismar yokEPSS %0

    jfrog · artifactory12 Ağu 2026

  • CVE-2026-73263
    39İzleyin

    Prowler: RCE on Prowler App workers via kubeconfig auth-provider cmd-path

    KritikCVSS 9,9İstismar yokEPSS %0

    prowler-cloud · prowler12 Ağu 2026

  • CVE-2026-73264
    30İzleyin

    Prowler: Server-Side Request Forgery (SSRF) in Lighthouse Provider

    YüksekCVSS 7,6İstismar yokEPSS %0

    prowler-cloud · prowler12 Ağu 2026

  • CVE-2026-73291
    28İzleyin

    Seerr: Path traversal to RCE via /avatarproxy image cache filename from upstream ETag

    YüksekCVSS 7,1İstismar yokEPSS %0

    seerr-team · seerr12 Ağu 2026

  • CVE-2026-15803
    34İzleyin

    In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity (XXE) processing when parsing untrusted XML-base

    YüksekCVSS 8,7İstismar yokEPSS %0

    eclipse foundation · eclipse rdf4j12 Ağu 2026

  • CVE-2026-58076
    35İzleyin

    Apache Airflow: Unguarded import_string() of airflow_exc_ser / base_exc_ser exception nodes in BaseSerialization.deserialize enables DAG-author RCE on Scheduler

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · airflow12 Ağu 2026

  • CVE-2026-64639
    37İzleyin

    Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to

    KritikCVSS 9,3İstismar yokEPSS %0

    webpros · plesk12 Ağu 2026

  • CVE-2026-65937
    32İzleyin

    WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI

    YüksekCVSS 8,0İstismar yokEPSS %0

    progress · whatsup gold12 Ağu 2026

  • CVE-2026-65941
    35İzleyin

    WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.

    YüksekCVSS 8,8İstismar yokEPSS %0

    progress · whatsup gold12 Ağu 2026

  • CVE-2026-66384
    51Planlayın

    Authenticated users may write data outside the intended Docker cache path

    OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %0

    jfrog · artifactory12 Ağu 2026

  • CVE-2026-67260
    29İzleyin

    Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization

    YüksekCVSS 7,3İstismar yokEPSS %0

    apache · airflow12 Ağu 2026

  • CVE-2026-67587
    35İzleyin

    Apache Airflow: DAG-author remote code execution on the Scheduler via a Serde `Callback` deserialization gadget

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · airflow12 Ağu 2026

  • CVE-2026-68759
    28İzleyin

    Integration credential holders may impersonate users in JFrog Access

    YüksekCVSS 7,2İstismar yokEPSS %0

    jfrog · artifactory12 Ağu 2026

  • CVE-2026-68968
    30İzleyin

    Apache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill id

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · airflow12 Ağu 2026

  • CVE-2026-69105
    32İzleyin

    Potential package cache integrity issue in JFrog Artifactory

    YüksekCVSS 8,1İstismar yokEPSS %0

    jfrog · artifactory12 Ağu 2026

  • CVE-2026-73292
    33İzleyin

    Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation

    YüksekCVSS 8,3Kavram kanıtıEPSS %0

    semaphoreui · semaphore12 Ağu 2026

  • CVE-2026-73293
    35İzleyin

    Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision

    YüksekCVSS 8,8İstismar yokEPSS %0

    semaphoreui · semaphore12 Ağu 2026

  • CVE-2026-73294
    39İzleyin

    Semaphore U: OS Command Injection

    KritikCVSS 9,9İstismar yokEPSS %0

    semaphoreui · semaphore12 Ağu 2026

  • CVE-2026-73325
    33İzleyin

    Fujitsu OneCompression < 1.2.1 Arbitrary Code Execution via torch.load Deserialization

    YüksekCVSS 8,4İstismar yokEPSS %0

    fujitsu research · onecompression12 Ağu 2026

  • CVE-2026-11923
    29İzleyin

    Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

    YüksekCVSS 7,4İstismar yokEPSS %0

    ibm · security verify access12 Ağu 2026

  • CVE-2026-12359
    32İzleyin

    Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

    YüksekCVSS 8,1İstismar yokEPSS %0

    ibm · security verify access12 Ağu 2026

  • CVE-2026-12618
    28İzleyin

    Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

    YüksekCVSS 7,2İstismar yokEPSS %0

    ibm · security verify access12 Ağu 2026

  • CVE-2026-15216
    34İzleyin

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    YüksekCVSS 8,7İstismar yokEPSS %0

    gitlab · gitlab12 Ağu 2026

  • CVE-2026-15217
    34İzleyin

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    YüksekCVSS 8,7İstismar yokEPSS %0

    gitlab · gitlab12 Ağu 2026

  • CVE-2026-16494
    28İzleyin

    Missing Authorization in GitLab

    YüksekCVSS 7,1İstismar yokEPSS %0

    gitlab · gitlab12 Ağu 2026

  • CVE-2026-19228
    34İzleyin

    Authorization Bypass Through User-Controlled Key in GitLab

    YüksekCVSS 8,5İstismar yokEPSS %0

    gitlab · gitlab12 Ağu 2026

  • CVE-2026-73303
    32İzleyin

    Budibase: Email Change IDOR via POST /api/v2/email allows full Account Takeover (accountId not validated against session)

    YüksekCVSS 8,2İstismar yokEPSS %0

    budibase · budibase12 Ağu 2026

  • CVE-2026-73406
    30İzleyin

    Budibase: Unauthenticated user information disclosure via public tenant user lookup endpoint

    YüksekCVSS 7,5İstismar yokEPSS %0

    budibase · budibase12 Ağu 2026

  • CVE-2026-73407
    36İzleyin

    Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak (bypass of CVE-2026-48152))

    KritikCVSS 9,0İstismar yokEPSS %0

    budibase · budibase12 Ağu 2026

  • CVE-2026-73415
    30İzleyin

    jupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tab

    YüksekCVSS 7,5İstismar yokEPSS %0

    jupyterlab · jupyterlab12 Ağu 2026

  • CVE-2026-17094
    28İzleyin

    IBM i is Affected By Path Traversal Vulnerability in Navigator for i

    YüksekCVSS 7,1İstismar yokEPSS %0

    ibm · i12 Ağu 2026

  • CVE-2026-17095
    33İzleyin

    IBM i is Affected By Multiple Vulnerabilities in Navigator for i

    YüksekCVSS 8,3İstismar yokEPSS %0

    ibm · i12 Ağu 2026

  • CVE-2026-18098
    32İzleyin

    IBM i is Affected By XML injection flaw in Navigator for i

    YüksekCVSS 8,1İstismar yokEPSS %0

    ibm · i12 Ağu 2026

  • CVE-2026-18499
    32İzleyin

    IBM WebSphere Application Server Liberty is affected by a privilege escalation

    YüksekCVSS 8,1İstismar yokEPSS %0

    ibm · websphere application server12 Ağu 2026

  • CVE-2026-18683
    35İzleyin

    IBM i is Affected By privilege escalation in Navigator for i

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · i12 Ağu 2026

  • CVE-2026-18847
    39İzleyin

    IBM i is Affected By Multiple Vulnerabilities in Navigator for i

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · i12 Ağu 2026

  • CVE-2026-73240
    39İzleyin

    Apache Allura: Git command injection

    KritikCVSS 9,8İstismar yokEPSS %1

    apache · allura12 Ağu 2026

  • CVE-2026-73296
    38İzleyin

    Microsoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure

    KritikCVSS 9,4Kavram kanıtıEPSS %3

    microsoft · ufo12 Ağu 2026

  • CVE-2026-11932
    30İzleyin

    Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · security verify access12 Ağu 2026

  • CVE-2026-17616
    39İzleyin

    Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · security verify access12 Ağu 2026

  • CVE-2026-64826
    28İzleyin

    rConfig < 8.2.13 Path Traversal File Read via FileDownloadController

    YüksekCVSS 7,1İstismar yokEPSS %0

    rconfig · rconfig12 Ağu 2026

  • CVE-2026-73418
    30İzleyin

    NextAuth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers

    YüksekCVSS 7,5İstismar yokEPSS %0

    nextauthjs · next-auth12 Ağu 2026

  • CVE-2024-27253
    40Planlayın

    IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request

    KritikCVSS 10,0İstismar yokEPSS %0

    ibm · doors next12 Ağu 2026

  • CVE-2026-16856
    35İzleyin

    IBM i is Affected By Multiple Vulnerabilities in Domain Name System

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · i12 Ağu 2026

  • CVE-2026-16860
    39İzleyin

    IBM i is Affected By Remote Code Execution Vulnerability []

    KritikCVSS 9,9İstismar yokEPSS %0

    ibm · i12 Ağu 2026