İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.296 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 25 / 73

  • CVE-2026-28003
    28İzleyin

    WordPress Maspik – Spam blacklist plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    yonifre · maspik – spam blacklist13 Ağu 2026

  • CVE-2026-28004
    28İzleyin

    WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    strategy11 team · business directory13 Ağu 2026

  • CVE-2026-28008
    39İzleyin

    WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    miniorange · oauth single sign on – sso (oauth client)13 Ağu 2026

  • CVE-2026-28142
    37İzleyin

    WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    shamalli · web directory free13 Ağu 2026

  • CVE-2026-28148
    39İzleyin

    WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    miniorange · headless single sign on13 Ağu 2026

  • CVE-2026-28149
    39İzleyin

    WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    miniorange · headless single sign on13 Ağu 2026

  • CVE-2026-28156
    34İzleyin

    WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    lasso analytics, inc. · do lasso13 Ağu 2026

  • CVE-2026-28157
    30İzleyin

    WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    lasso analytics, inc. · do lasso13 Ağu 2026

  • CVE-2026-28158
    28İzleyin

    WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    lasso analytics, inc. · do lasso13 Ağu 2026

  • CVE-2026-28161
    35İzleyin

    WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    aonetheme · service finder booking13 Ağu 2026

  • CVE-2026-28168
    34İzleyin

    WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    imran tauqeer · cubewp13 Ağu 2026

  • CVE-2026-28170
    28İzleyin

    WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    1meril · blog floating button13 Ağu 2026

  • CVE-2026-28173
    28İzleyin

    WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    arraytics · wp event solution13 Ağu 2026

  • CVE-2026-28175
    28İzleyin

    WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    wp-buy · visitors traffic real time statistics13 Ağu 2026

  • CVE-2026-28176
    35İzleyin

    WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    booking activities team · booking activities13 Ağu 2026

  • CVE-2026-28185
    39İzleyin

    WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    rtcamp · log in with google13 Ağu 2026

  • CVE-2026-28186
    32İzleyin

    WordPress Travelfic Toolkit plugin <= 1.5.1 - Broken Access Control vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    themefic · travelfic toolkit13 Ağu 2026

  • CVE-2026-28187
    28İzleyin

    WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 17.211.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    echoplugins · knowledge base for documentation, faqs with ai assistance13 Ağu 2026

  • CVE-2026-28188
    29İzleyin

    WordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    themefic · hydra booking13 Ağu 2026

  • CVE-2026-28189
    29İzleyin

    WordPress Participants Database plugin <= 2.7.8.4 - Arbitrary File Deletion vulnerability

    YüksekCVSS 7,4İstismar yokEPSS %0

    roland barker · participants database13 Ağu 2026

  • CVE-2026-48702
    30İzleyin

    Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic

    YüksekCVSS 7,5İstismar yokEPSS %0

    sigstore · rekor13 Ağu 2026

  • CVE-2026-61960
    28İzleyin

    WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    themeisle · wp full stripe free13 Ağu 2026

  • CVE-2026-61962
    40Planlayın

    WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    hakan ozevin · wp base booking13 Ağu 2026

  • CVE-2026-61965
    28İzleyin

    WordPress GeekyBot plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    ahmadgb · geekybot13 Ağu 2026

  • CVE-2026-61966
    37İzleyin

    WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    denishua · wpjam basic13 Ağu 2026

  • CVE-2026-61967
    39İzleyin

    WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    miniorange · miniorange otp verification13 Ağu 2026

  • CVE-2026-61969
    37İzleyin

    WordPress Listdom plugin <= 5.6.0 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    webilia inc. · listdom13 Ağu 2026

  • CVE-2026-61974
    28İzleyin

    WordPress Mang Board WP plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    kitae park · mang board wp13 Ağu 2026

  • CVE-2026-61979
    32İzleyin

    WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    miniorange · saml sp single sign on13 Ağu 2026

  • CVE-2026-61980
    30İzleyin

    WordPress OMGF Pro plugin <= 5.2.7 - Arbitrary File Download vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    daan.dev · omgf pro13 Ağu 2026

  • CVE-2026-61984
    30İzleyin

    WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    amauri · wpmobile.app13 Ağu 2026

  • CVE-2026-65580
    28İzleyin

    WordPress Agrion theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    bracketweb · agrion13 Ağu 2026

  • CVE-2026-65582
    30İzleyin

    WordPress AI Hub theme <= 1.3.10 - Arbitrary File Download vulnerability

    YüksekCVSS 7,7İstismar yokEPSS %0

    liquidthemes · ai hub13 Ağu 2026

  • CVE-2026-66424
    39İzleyin

    WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    cozy vision technologies pvt. ltd. · sms alert order notifications13 Ağu 2026

  • CVE-2026-66426
    28İzleyin

    WordPress WP-Stats plugin <= 2.56 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    lester chan · wp-stats13 Ağu 2026

  • CVE-2026-66429
    28İzleyin

    WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    codepress · visitor traffic real time statistics pro13 Ağu 2026

  • CVE-2026-66430
    34İzleyin

    WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    codepress · visitor traffic real time statistics pro13 Ağu 2026

  • CVE-2026-66431
    30İzleyin

    WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) plugin <= 1.0.7 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    woompaloompa · bitcoin lightning payment gateway for woocommerce (via clink)13 Ağu 2026

  • CVE-2026-66432
    30İzleyin

    WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    denishua · wpjam basic13 Ağu 2026

  • CVE-2026-66436
    37İzleyin

    WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    realmag777 · active products tables for woocommerce13 Ağu 2026

  • CVE-2026-66441
    30İzleyin

    WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    multivendorx · multivendorx13 Ağu 2026

  • CVE-2026-66443
    30İzleyin

    WordPress REST API Log plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    pete nelson · rest api log13 Ağu 2026

  • CVE-2026-66446
    37İzleyin

    WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    if-so dynamic content · if-so dynamic content personalization13 Ağu 2026

  • CVE-2026-66449
    28İzleyin

    WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    dylan kuhn · geo mashup13 Ağu 2026

  • CVE-2026-66450
    32İzleyin

    WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    dylan kuhn · geo mashup13 Ağu 2026

  • CVE-2026-66453
    39İzleyin

    WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    dimitri grassi · salon booking system13 Ağu 2026

  • CVE-2026-66458
    37İzleyin

    WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    thimpress · realpress13 Ağu 2026

  • CVE-2026-66461
    30İzleyin

    WordPress SMEPay: UPI Gateway for WooCommerce plugin <= 1.0.5 - Payment Bypass vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    smepay · smepay: upi gateway for woocommerce13 Ağu 2026

  • CVE-2026-66462
    30İzleyin

    WordPress WooCommerce Appointments plugin <= 5.3.8 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    bookingwp · woocommerce appointments13 Ağu 2026

  • CVE-2026-66463
    30İzleyin

    WordPress iCARRY plugin <= 2.9 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    hassan fakih · icarry13 Ağu 2026

  • CVE-2026-66465
    39İzleyin

    WordPress Cartify theme <= 1.3.0.1 - Account Takeover vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    agnihd · cartify13 Ağu 2026

  • CVE-2026-66466
    30İzleyin

    WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.1.1 - Broken Access Control vulne

    YüksekCVSS 7,5İstismar yokEPSS %0

    wedevs · storegrowth: smart sales booster for woocommerce | bogo, upsells, direct checkout, quick view, side cart13 Ağu 2026

  • CVE-2026-66468
    28İzleyin

    WordPress Local Delivery Drivers for WooCommerce plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    powerfulwp · local delivery drivers for woocommerce13 Ağu 2026

  • CVE-2026-66469
    30İzleyin

    WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    afonso matos · arvow ai seo writer13 Ağu 2026

  • CVE-2026-66472
    37İzleyin

    WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    everestthemes · everest backup13 Ağu 2026

  • CVE-2026-66478
    37İzleyin

    WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    andy_moyle · church admin13 Ağu 2026

  • CVE-2026-66653
    32İzleyin

    WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    edge-themes · barista13 Ağu 2026

  • CVE-2026-66655
    28İzleyin

    WordPress MultiParcels Shipping For WooCommerce plugin <= 1.30.36 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    multiparcels · multiparcels shipping for woocommerce13 Ağu 2026

  • CVE-2026-66656
    32İzleyin

    WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    mikado-themes · foton core13 Ağu 2026

  • CVE-2026-66657
    32İzleyin

    WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    mikado-themes · biagiotti core13 Ağu 2026

  • CVE-2026-66658
    34İzleyin

    WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    mvpthemes · reviewer13 Ağu 2026

  • CVE-2026-66661
    30İzleyin

    WordPress Directories Pro plugin <= 2.0.5 - Privilege Escalation vulnerability

    YüksekCVSS 7,7İstismar yokEPSS %0

    onokazu · directories pro13 Ağu 2026

  • CVE-2026-66691
    39İzleyin

    WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    scriptsbundle · nokri13 Ağu 2026

  • CVE-2026-66697
    28İzleyin

    WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    colissimo · colissimo officiel : méthodes de livraison pour woocommerce13 Ağu 2026

  • CVE-2026-66698
    28İzleyin

    WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    brainstorm force · suredash13 Ağu 2026

  • CVE-2026-66700
    28İzleyin

    WordPress Smart Online Order for Clover plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    zaytech · smart online order for clover13 Ağu 2026

  • CVE-2026-66704
    28İzleyin

    WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    jegstudio · gutenverse companion13 Ağu 2026

  • CVE-2026-67986
    33İzleyin

    amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArra

    YüksekCVSS 8,4İstismar yokEPSS %0

    13 Ağu 2026

  • CVE-2026-67991
    30İzleyin

    crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition

    YüksekCVSS 7,5İstismar yokEPSS %0

    13 Ağu 2026

  • CVE-2026-73346
    30İzleyin

    WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    mailchimp · mailchimp for woocommerce13 Ağu 2026

  • CVE-2026-14456
    30İzleyin

    Unbounded Memory Growth in QUIC Server Incoming Channel Queue

    YüksekCVSS 7,5İstismar yokEPSS %0

    openssl · openssl13 Ağu 2026

  • CVE-2026-15994
    29İzleyin

    During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vant

    YüksekCVSS 7,3İstismar yokEPSS %0

    lenovo · commercial vantage13 Ağu 2026

  • CVE-2026-16101
    35İzleyin

    forced re-pairing with already bonded device

    YüksekCVSS 8,8İstismar yokEPSS %0

    silabs.com · wiseconnect13 Ağu 2026

  • CVE-2026-19291
    35İzleyin

    Bluetooth re-pairing can use a lower security level than previous

    YüksekCVSS 8,8İstismar yokEPSS %0

    silabs.com · wiseconnect13 Ağu 2026

  • CVE-2026-19292
    35İzleyin

    Bluetooth re-pairing with legitimate device can use lower security level

    YüksekCVSS 8,8İstismar yokEPSS %0

    silabs.com · wiseconnect13 Ağu 2026

  • CVE-2026-19293
    35İzleyin

    SMP security request

    YüksekCVSS 8,8İstismar yokEPSS %0

    silabs.com · wiseconnect13 Ağu 2026

  • CVE-2026-19734
    34İzleyin

    IDOR in Prospero Flow CRM allows cross-tenant product disclosure and hijacking

    YüksekCVSS 8,6İstismar yokEPSS %0

    roskus · prospero flow crm13 Ağu 2026

  • CVE-2026-28154
    28İzleyin

    WordPress Samex and M.Anh WordPress themes affected by Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    snstheme · samex - clean, minimal shop woocommerce wordpress theme13 Ağu 2026

  • CVE-2026-49857
    29İzleyin

    auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback

    YüksekCVSS 7,4İstismar yokEPSS %0

    ymw0407 · auth-fetch-mcp13 Ağu 2026

  • CVE-2026-53783
    34İzleyin

    rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync

    YüksekCVSS 8,6İstismar yokEPSS %0

    rsyncproject · rsync13 Ağu 2026

  • CVE-2026-53784
    33İzleyin

    rsync < 3.5.0 Path Traversal via Symlink Module Root

    YüksekCVSS 8,4İstismar yokEPSS %0

    samba · rsync13 Ağu 2026

  • CVE-2026-53785
    27İzleyin

    rsync < 3.5.0 Path Traversal Write Escape via --relative Mode

    OrtaCVSS 6,9İstismar yokEPSS %0

    rsyncproject · rsync13 Ağu 2026

  • CVE-2026-53789
    28İzleyin

    rsync < 3.5.0 Arbitrary File Deletion via Malicious File List

    YüksekCVSS 7,1İstismar yokEPSS %0

    samba · rsync13 Ağu 2026

  • CVE-2026-53790
    36İzleyin

    rsync < 3.5.0 Command Injection via Multiple Code Paths

    KritikCVSS 9,2İstismar yokEPSS %0

    rsyncproject · rsync13 Ağu 2026

  • CVE-2026-53791
    36İzleyin

    rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header

    KritikCVSS 9,1İstismar yokEPSS %0

    samba · rsync13 Ağu 2026

  • CVE-2026-53792
    28İzleyin

    rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block

    YüksekCVSS 7,1İstismar yokEPSS %0

    rsyncproject · rsync13 Ağu 2026

  • CVE-2026-53793
    36İzleyin

    rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode

    KritikCVSS 9,1İstismar yokEPSS %0

    rsyncproject · rsync13 Ağu 2026

  • CVE-2026-53795
    28İzleyin

    rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest

    YüksekCVSS 7,2İstismar yokEPSS %0

    samba · rsync13 Ağu 2026

  • CVE-2026-53799
    28İzleyin

    rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application

    YüksekCVSS 7,2İstismar yokEPSS %0

    samba · rsync13 Ağu 2026

  • CVE-2026-53801
    32İzleyin

    rsync < 3.5.0 Symlink Race Condition Directory Traversal

    YüksekCVSS 8,2İstismar yokEPSS %0

    samba · rsync13 Ağu 2026

  • CVE-2026-53802
    33İzleyin

    rsync < 3.5.0 Arbitrary File Read via Symlink Following

    YüksekCVSS 8,4İstismar yokEPSS %0

    samba · rsync13 Ağu 2026

  • CVE-2026-53803
    34İzleyin

    rsync < 3.5.0 Symlink Following Arbitrary File Overwrite

    YüksekCVSS 8,5İstismar yokEPSS %0

    samba · rsync13 Ağu 2026

  • CVE-2026-63423
    34İzleyin

    During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise fo

    YüksekCVSS 8,5İstismar yokEPSS %0

    lenovo · accessories and display manager13 Ağu 2026

  • CVE-2026-63424
    28İzleyin

    During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authentic

    YüksekCVSS 7,0İstismar yokEPSS %0

    lenovo · dock manager13 Ağu 2026

  • CVE-2026-63425
    34İzleyin

    During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allo

    YüksekCVSS 8,5İstismar yokEPSS %0

    lenovo · dock manager13 Ağu 2026

  • CVE-2026-65934
    28İzleyin

    BT122 plaintext pause encryption request causes DOS

    YüksekCVSS 7,1İstismar yokEPSS %0

    silabs.com · bt12213 Ağu 2026

  • CVE-2026-65935
    30İzleyin

    Bypassing passkey entry in legacy pairing

    YüksekCVSS 7,6İstismar yokEPSS %0

    silabs.com · wiseconnect13 Ağu 2026

  • CVE-2026-66256
    28İzleyin

    Apache Shindig Common, Apache Shindig Social-Api: Remote Code Execution via XStream deserialization (OpenSocial REST API)

    YüksekCVSS 7,2İstismar yokEPSS %0

    apache · shindig13 Ağu 2026

  • CVE-2026-6387
    29İzleyin

    A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute

    YüksekCVSS 7,3İstismar yokEPSS %0

    lenovo · system update13 Ağu 2026

  • CVE-2026-70452
    36İzleyin

    rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure

    KritikCVSS 9,1İstismar yokEPSS %0

    rsyncproject · rsync13 Ağu 2026