İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.232 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 25 / 73

  • CVE-2026-58427
    30İzleyin

    Private org member list leaked via /members API endpoint — incomplete fix for PR #38145

    YüksekCVSS 7,5İstismar yokEPSS %0

    gitea · gitea open source git server13 Ağu 2026

  • CVE-2026-58433
    36İzleyin

    Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting

    KritikCVSS 9,1İstismar yokEPSS %0

    gitea · gitea open source git server13 Ağu 2026

  • CVE-2026-58434
    30İzleyin

    Private Repository Metadata Remains Accessible After Access Revocation

    YüksekCVSS 7,5İstismar yokEPSS %0

    gitea · gitea open source git server13 Ağu 2026

  • CVE-2026-58436
    30İzleyin

    ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests

    YüksekCVSS 7,5İstismar yokEPSS %0

    gitea · gitea open source git server13 Ağu 2026

  • CVE-2026-58437
    28İzleyin

    Repository Visibility Manipulation via Git Push Options

    YüksekCVSS 7,1İstismar yokEPSS %0

    gitea · gitea open source git server13 Ağu 2026

  • CVE-2026-58438
    30İzleyin

    Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

    YüksekCVSS 7,5İstismar yokEPSS %0

    gitea · gitea open source git server13 Ağu 2026

  • CVE-2026-58439
    32İzleyin

    Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag

    YüksekCVSS 8,1İstismar yokEPSS %0

    gitea · gitea open source git server13 Ağu 2026

  • CVE-2026-58443
    36İzleyin

    Public-only repository tokens can update private PR head branches

    KritikCVSS 9,1İstismar yokEPSS %0

    gitea · gitea open source git server13 Ağu 2026

  • CVE-2026-58508
    36İzleyin

    Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)

    KritikCVSS 9,1İstismar yokEPSS %0

    gitea · gitea open source git server13 Ağu 2026

  • CVE-2026-49478
    34İzleyin

    Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage

    YüksekCVSS 8,7İstismar yokEPSS %0

    sigstore · fulcio13 Ağu 2026

  • CVE-2026-49827
    39İzleyin

    WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)

    KritikCVSS 9,8İstismar yokEPSS %0

    smewebify · weberpmesv213 Ağu 2026

  • CVE-2026-27345
    30İzleyin

    WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.3 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    magepeopleteam · taxi booking manager for woocommerce13 Ağu 2026

  • CVE-2026-27380
    28İzleyin

    WordPress Car Rental Manager plugin <= 1.3.9 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    magepeopleteam · car rental manager13 Ağu 2026

  • CVE-2026-27535
    28İzleyin

    WordPress Solace Extra plugin <= 1.6.0 - Broken Access Control vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    solacewp · solace extra13 Ağu 2026

  • CVE-2026-27536
    28İzleyin

    WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    pluginops · mailchimp subscribe forms13 Ağu 2026

  • CVE-2026-27538
    30İzleyin

    WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpdirectorykit · wp directory kit13 Ağu 2026

  • CVE-2026-27539
    28İzleyin

    WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    welcart · welcart e-commerce13 Ağu 2026

  • CVE-2026-27543
    32İzleyin

    WordPress MStore API plugin <= 4.20.0 - Privilege Escalation vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    fluxbuilder · mstore api13 Ağu 2026

  • CVE-2026-27544
    40Planlayın

    WordPress QA Analytics plugin <= 5.2.0.0 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    quarka · qa analytics13 Ağu 2026

  • CVE-2026-28001
    37İzleyin

    WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    wpdirectorykit · wp directory kit13 Ağu 2026

  • CVE-2026-28002
    34İzleyin

    WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    arraytics · booktics13 Ağu 2026

  • CVE-2026-28003
    28İzleyin

    WordPress Maspik – Spam blacklist plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    yonifre · maspik – spam blacklist13 Ağu 2026

  • CVE-2026-28004
    28İzleyin

    WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    strategy11 team · business directory13 Ağu 2026

  • CVE-2026-28008
    39İzleyin

    WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    miniorange · oauth single sign on – sso (oauth client)13 Ağu 2026

  • CVE-2026-28142
    37İzleyin

    WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    shamalli · web directory free13 Ağu 2026

  • CVE-2026-28148
    39İzleyin

    WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    miniorange · headless single sign on13 Ağu 2026

  • CVE-2026-28149
    39İzleyin

    WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    miniorange · headless single sign on13 Ağu 2026

  • CVE-2026-28156
    34İzleyin

    WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    lasso analytics, inc. · do lasso13 Ağu 2026

  • CVE-2026-28157
    30İzleyin

    WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    lasso analytics, inc. · do lasso13 Ağu 2026

  • CVE-2026-28158
    28İzleyin

    WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    lasso analytics, inc. · do lasso13 Ağu 2026

  • CVE-2026-28161
    35İzleyin

    WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    aonetheme · service finder booking13 Ağu 2026

  • CVE-2026-28168
    34İzleyin

    WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    imran tauqeer · cubewp13 Ağu 2026

  • CVE-2026-28170
    28İzleyin

    WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    1meril · blog floating button13 Ağu 2026

  • CVE-2026-28173
    28İzleyin

    WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    arraytics · wp event solution13 Ağu 2026

  • CVE-2026-28175
    28İzleyin

    WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    wp-buy · visitors traffic real time statistics13 Ağu 2026

  • CVE-2026-28176
    35İzleyin

    WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    booking activities team · booking activities13 Ağu 2026

  • CVE-2026-28185
    39İzleyin

    WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    rtcamp · log in with google13 Ağu 2026

  • CVE-2026-28186
    32İzleyin

    WordPress Travelfic Toolkit plugin <= 1.5.1 - Broken Access Control vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    themefic · travelfic toolkit13 Ağu 2026

  • CVE-2026-28187
    28İzleyin

    WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 17.211.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    echoplugins · knowledge base for documentation, faqs with ai assistance13 Ağu 2026

  • CVE-2026-28188
    29İzleyin

    WordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    themefic · hydra booking13 Ağu 2026

  • CVE-2026-28189
    29İzleyin

    WordPress Participants Database plugin <= 2.7.8.4 - Arbitrary File Deletion vulnerability

    YüksekCVSS 7,4İstismar yokEPSS %0

    roland barker · participants database13 Ağu 2026

  • CVE-2026-48702
    30İzleyin

    Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic

    YüksekCVSS 7,5İstismar yokEPSS %0

    sigstore · rekor13 Ağu 2026

  • CVE-2026-61960
    28İzleyin

    WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    themeisle · wp full stripe free13 Ağu 2026

  • CVE-2026-61962
    40Planlayın

    WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    hakan ozevin · wp base booking13 Ağu 2026

  • CVE-2026-61965
    28İzleyin

    WordPress GeekyBot plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    ahmadgb · geekybot13 Ağu 2026

  • CVE-2026-61966
    37İzleyin

    WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    denishua · wpjam basic13 Ağu 2026

  • CVE-2026-61967
    39İzleyin

    WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    miniorange · miniorange otp verification13 Ağu 2026

  • CVE-2026-61969
    37İzleyin

    WordPress Listdom plugin <= 5.6.0 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    webilia inc. · listdom13 Ağu 2026

  • CVE-2026-61974
    28İzleyin

    WordPress Mang Board WP plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    kitae park · mang board wp13 Ağu 2026

  • CVE-2026-61979
    32İzleyin

    WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    miniorange · saml sp single sign on13 Ağu 2026

  • CVE-2026-61980
    30İzleyin

    WordPress OMGF Pro plugin <= 5.2.7 - Arbitrary File Download vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    daan.dev · omgf pro13 Ağu 2026

  • CVE-2026-61984
    30İzleyin

    WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    amauri · wpmobile.app13 Ağu 2026

  • CVE-2026-65580
    28İzleyin

    WordPress Agrion theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    bracketweb · agrion13 Ağu 2026

  • CVE-2026-65582
    30İzleyin

    WordPress AI Hub theme <= 1.3.10 - Arbitrary File Download vulnerability

    YüksekCVSS 7,7İstismar yokEPSS %0

    liquidthemes · ai hub13 Ağu 2026

  • CVE-2026-66424
    39İzleyin

    WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    cozy vision technologies pvt. ltd. · sms alert order notifications13 Ağu 2026

  • CVE-2026-66426
    28İzleyin

    WordPress WP-Stats plugin <= 2.56 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    lester chan · wp-stats13 Ağu 2026

  • CVE-2026-66429
    28İzleyin

    WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    codepress · visitor traffic real time statistics pro13 Ağu 2026

  • CVE-2026-66430
    34İzleyin

    WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    codepress · visitor traffic real time statistics pro13 Ağu 2026

  • CVE-2026-66431
    30İzleyin

    WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) plugin <= 1.0.7 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    woompaloompa · bitcoin lightning payment gateway for woocommerce (via clink)13 Ağu 2026

  • CVE-2026-66432
    30İzleyin

    WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    denishua · wpjam basic13 Ağu 2026

  • CVE-2026-66436
    37İzleyin

    WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    realmag777 · active products tables for woocommerce13 Ağu 2026

  • CVE-2026-66441
    30İzleyin

    WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    multivendorx · multivendorx13 Ağu 2026

  • CVE-2026-66462
    30İzleyin

    WordPress WooCommerce Appointments plugin <= 5.3.8 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    bookingwp · woocommerce appointments13 Ağu 2026

  • CVE-2026-66463
    30İzleyin

    WordPress iCARRY plugin <= 2.9 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    hassan fakih · icarry13 Ağu 2026

  • CVE-2026-66465
    39İzleyin

    WordPress Cartify theme <= 1.3.0.1 - Account Takeover vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    agnihd · cartify13 Ağu 2026

  • CVE-2026-66466
    30İzleyin

    WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.1.1 - Broken Access Control vulne

    YüksekCVSS 7,5İstismar yokEPSS %0

    wedevs · storegrowth: smart sales booster for woocommerce | bogo, upsells, direct checkout, quick view, side cart13 Ağu 2026

  • CVE-2026-66468
    28İzleyin

    WordPress Local Delivery Drivers for WooCommerce plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    powerfulwp · local delivery drivers for woocommerce13 Ağu 2026

  • CVE-2026-66469
    30İzleyin

    WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    afonso matos · arvow ai seo writer13 Ağu 2026

  • CVE-2026-66472
    37İzleyin

    WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    everestthemes · everest backup13 Ağu 2026

  • CVE-2026-66478
    37İzleyin

    WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    andy_moyle · church admin13 Ağu 2026

  • CVE-2026-66653
    32İzleyin

    WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    edge-themes · barista13 Ağu 2026

  • CVE-2026-66655
    28İzleyin

    WordPress MultiParcels Shipping For WooCommerce plugin <= 1.30.36 - Reflected Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    multiparcels · multiparcels shipping for woocommerce13 Ağu 2026

  • CVE-2026-66656
    32İzleyin

    WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    mikado-themes · foton core13 Ağu 2026

  • CVE-2026-66657
    32İzleyin

    WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    mikado-themes · biagiotti core13 Ağu 2026

  • CVE-2026-66658
    34İzleyin

    WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    mvpthemes · reviewer13 Ağu 2026

  • CVE-2026-66661
    30İzleyin

    WordPress Directories Pro plugin <= 2.0.5 - Privilege Escalation vulnerability

    YüksekCVSS 7,7İstismar yokEPSS %0

    onokazu · directories pro13 Ağu 2026

  • CVE-2026-66691
    39İzleyin

    WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    scriptsbundle · nokri13 Ağu 2026

  • CVE-2026-66697
    28İzleyin

    WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    colissimo · colissimo officiel : méthodes de livraison pour woocommerce13 Ağu 2026

  • CVE-2026-66698
    28İzleyin

    WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    brainstorm force · suredash13 Ağu 2026

  • CVE-2026-66700
    28İzleyin

    WordPress Smart Online Order for Clover plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    zaytech · smart online order for clover13 Ağu 2026

  • CVE-2026-66704
    28İzleyin

    WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    jegstudio · gutenverse companion13 Ağu 2026

  • CVE-2026-73346
    30İzleyin

    WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    mailchimp · mailchimp for woocommerce13 Ağu 2026

  • CVE-2019-25765
    34İzleyin

    ASP-CMS SQL Injection via commentList.asp id Parameter

    YüksekCVSS 8,7İstismar yokEPSS %0

    asp-cms project · asp-cms13 Ağu 2026

  • CVE-2026-18428
    34İzleyin

    SQL Query Validation Bypass in OpenSearch Direct Query

    YüksekCVSS 8,7İstismar yokEPSS %0

    aws · opensearch13 Ağu 2026

  • CVE-2026-17197
    39İzleyin

    IBM i is Affected By Multiple Vulnerabilities in Host Servers

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · i13 Ağu 2026

  • CVE-2026-17220
    32İzleyin

    IBM i is Affected By Multiple Vulnerabilities in Host Servers

    YüksekCVSS 8,2İstismar yokEPSS %0

    ibm · i13 Ağu 2026

  • CVE-2026-18071
    31İzleyin

    IBM i is Affected By An Improper Management Vulnerability in HTTP Server []

    YüksekCVSS 7,8İstismar yokEPSS %0

    ibm · i13 Ağu 2026

  • CVE-2026-72777
    30İzleyin

    Next AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url

    YüksekCVSS 7,7İstismar yokEPSS %0

    dayuanjiang · next-ai-draw-io13 Ağu 2026

  • CVE-2026-73482
    28İzleyin

    phpList < 3.7.0-RC5 Cross-Site Request Forgery via admins.php

    YüksekCVSS 7,2İstismar yokEPSS %0

    phplist · phplist313 Ağu 2026

  • CVE-2026-73650
    32İzleyin

    SVGO: removeScripts plugin leaves some executable scripts intact

    YüksekCVSS 8,2İstismar yokEPSS %0

    svg · svgo13 Ağu 2026

  • CVE-2026-73652
    28İzleyin

    vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

    YüksekCVSS 7,1İstismar yokEPSS %0

    vantage6 · vantage613 Ağu 2026

  • CVE-2026-73653
    37İzleyin

    Vitest: Browser Mode provider commands bypass the file-access permission gate

    KritikCVSS 9,4İstismar yokEPSS %0

    vitest-dev · vitest13 Ağu 2026

  • CVE-2026-16101
    35İzleyin

    forced re-pairing with already bonded device

    YüksekCVSS 8,8İstismar yokEPSS %0

    silabs.com · wiseconnect13 Ağu 2026

  • CVE-2026-19291
    35İzleyin

    Bluetooth re-pairing can use a lower security level than previous

    YüksekCVSS 8,8İstismar yokEPSS %0

    silabs.com · wiseconnect13 Ağu 2026

  • CVE-2026-19292
    35İzleyin

    Bluetooth re-pairing with legitimate device can use lower security level

    YüksekCVSS 8,8İstismar yokEPSS %0

    silabs.com · wiseconnect13 Ağu 2026

  • CVE-2026-19293
    35İzleyin

    SMP security request

    YüksekCVSS 8,8İstismar yokEPSS %0

    silabs.com · wiseconnect13 Ağu 2026

  • CVE-2026-19734
    34İzleyin

    IDOR in Prospero Flow CRM allows cross-tenant product disclosure and hijacking

    YüksekCVSS 8,6İstismar yokEPSS %0

    roskus · prospero flow crm13 Ağu 2026

  • CVE-2026-49857
    29İzleyin

    auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback

    YüksekCVSS 7,4İstismar yokEPSS %0

    ymw0407 · auth-fetch-mcp13 Ağu 2026

  • CVE-2026-53783
    34İzleyin

    rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync

    YüksekCVSS 8,6İstismar yokEPSS %0

    rsyncproject · rsync13 Ağu 2026

  • CVE-2026-53784
    33İzleyin

    rsync < 3.5.0 Path Traversal via Symlink Module Root

    YüksekCVSS 8,4İstismar yokEPSS %0

    samba · rsync13 Ağu 2026