İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 29 / 73

  • CVE-2026-15303
    39İzleyin

    6Storage Rentals <= 2.27.0 - Unauthenticated Account Takeover via 'email' Parameter

    KritikCVSS 9,8İstismar yokEPSS %0

    sixstorage · 6storage rentals14 Ağu 2026

  • CVE-2026-15312
    35İzleyin

    Propovoice: All-in-One Client Management System <= 1.7.8 - Authenticated (ndpv_manager+) Privilege Escalation via 'role' Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    fassionstorage · propovoice: all-in-one client management system14 Ağu 2026

  • CVE-2026-15341
    39İzleyin

    User Session Synchronizer <= 1.4.0 - Unauthenticated Authentication Bypass to Account Takeover via 'ussync-key', 'ussync-token', and 'ussync-ref' Parameters

    KritikCVSS 9,8İstismar yokEPSS %0

    rafasashi · user session synchronizer14 Ağu 2026

  • CVE-2026-15965
    35İzleyin

    MaxUpload <= 1.4.0 - Unauthenticated Arbitrary File Upload via 'resumableFilename' Parameter

    YüksekCVSS 8,8İstismar yokEPSS %1

    sadathimel · maxupload – big file uploads – increase maximum file upload size14 Ağu 2026

  • CVE-2026-13360
    28İzleyin

    Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    wplegalpages · wplp cookie consent – cookie banner & consent management for gdpr, ccpa & google consent mode15 Ağu 2026

  • CVE-2026-16145
    28İzleyin

    Invisible Anti-Spam & CAPTCHA <= 5.1 - Unauthenticated Stored Cross-Site Scripting via 'action' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    matthiasnordwig · invisible anti-spam & captcha — recaptcha alternative for all forms15 Ağu 2026

  • CVE-2026-16007
    28İzleyin

    Authenticated SQL Injection in AppFlowy

    YüksekCVSS 7,1İstismar yokEPSS %0

    appflowy-io · appflowy-cloud15 Ağu 2026

  • CVE-2026-16611
    30İzleyin

    Product Feed PRO for WooCommerce < 13.5.7 - Unauthenticated Feed Configuration Disclosure

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · product feed pro for woocommerce by adtribes15 Ağu 2026

  • CVE-2026-68457
    36İzleyin

    ksmbd: use opener credentials for FSCTL mutations

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68458
    31İzleyin

    binder: cache secctx size before release zeroes it

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68462
    31İzleyin

    bpf: Reject negative const offsets for buffer pointers

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68466
    35İzleyin

    mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68467
    31İzleyin

    mtd: mchp23k256: use SPI match data for chip caps

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68471
    35İzleyin

    wifi: ieee80211: validate MLE common info length

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68473
    31İzleyin

    powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68474
    31İzleyin

    powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-68476
    39İzleyin

    ipvs: reload ip header after head reallocation

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72027
    31İzleyin

    mm/compaction: handle free_pages_prepare() properly in compaction_free()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72033
    39İzleyin

    orangefs: keep the readdir entry size 64-bit in fill_from_part()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72042
    31İzleyin

    ipmi: Fix user refcount underflow in event delivery

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72043
    28İzleyin

    LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72046
    39İzleyin

    gve: fix header buffer corruption with header-split and HW-GRO

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72071
    31İzleyin

    tracing/user_events: Fix use-after-free in user_event_mm_dup()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72089
    28İzleyin

    accel/ivpu: Reject firmware log with size smaller than header

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72090
    31İzleyin

    accel/amdxdna: Use caller client for debug BO sync

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72093
    31İzleyin

    accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72109
    31İzleyin

    net: sparx5: unregister blocking notifier on init failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72112
    31İzleyin

    io_uring/bpf-ops: reject re-registration of an already-bound ops

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72133
    33İzleyin

    spi: uniphier: Fix completion initialization order before devm_request_irq()

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72134
    31İzleyin

    spi: imx: reconfigure for PIO when DMA cannot be started

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72137
    39İzleyin

    xfrm: nat_keepalive: avoid double free on send error

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72139
    39İzleyin

    tcp: defer md5sig_info kfree past RCU grace period in tcp_connect

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72141
    30İzleyin

    i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ)

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72146
    33İzleyin

    dmaengine: sh: rz-dmac: Move interrupt request after everything is set up

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72148
    35İzleyin

    dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72151
    33İzleyin

    tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72154
    31İzleyin

    openrisc: Fix jump_label smp syncing

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72162
    31İzleyin

    ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72171
    31İzleyin

    mtd: slram: remove failed entries from the device list

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72181
    31İzleyin

    mips: sched: Fix CPUMASK_OFFSTACK memory corruption

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72185
    39İzleyin

    ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72186
    36İzleyin

    ntfs: make system files immutable to prevent corruption

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72188
    36İzleyin

    ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name()

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72198
    31İzleyin

    ntfs: reject non-resident records for resident-only attributes

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72199
    39İzleyin

    ntfs: validate resident index root values on lookup

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72200
    39İzleyin

    ntfs: detect mapping-pairs LCN accumulator overflow

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72201
    39İzleyin

    ntfs: validate index entries on reading

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72202
    30İzleyin

    ntfs: avoid heap allocation for free-cluster readahead state

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72203
    30İzleyin

    ntfs: skip extent mft records in writeback to prevent deadlock

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72204
    33İzleyin

    ntfs: centalize $INDEX_ROOT header validation

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72206
    39İzleyin

    ntfs: validate index block header more strictly

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72207
    39İzleyin

    ntfs: not change 0-byte $DATA attribute to non-resident

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72208
    39İzleyin

    ntfs: add bounds check before accessing EA entries

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72209
    39İzleyin

    ntfs: validate attribute values on lookup

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72210
    39İzleyin

    ntfs: fix off-by-one in mapping pairs decoding bounds checks

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72211
    39İzleyin

    ntfs: grow index root value before reparent header update

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72217
    39İzleyin

    SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72220
    39İzleyin

    sunrpc: harden rq_procinfo lifecycle to prevent double-free

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72227
    32İzleyin

    batman-adv: mcast: avoid OOB read of num_dests header

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72239
    37İzleyin

    x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN"

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72248
    39İzleyin

    netfilter: flowtable: support IPIP tunnel with direct xmit

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72249
    39İzleyin

    netfilter: flowtable: use dst in this direction when pushing IPIP header

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72277
    37İzleyin

    KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72278
    37İzleyin

    KVM: arm64: nv: Re-translate VNCR before injecting abort

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72279
    36İzleyin

    KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR

    KritikCVSS 9,0İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72283
    35İzleyin

    KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72285
    31İzleyin

    KVM: TDX: Reject concurrent change to CPUID entry count

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72287
    31İzleyin

    KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72291
    37İzleyin

    KVM: s390: Fix unlikely race in try_get_locked_pte()

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72294
    35İzleyin

    LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt()

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72295
    35İzleyin

    LoongArch: KVM: Validate irqchip index in irqfd routing

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72328
    31İzleyin

    accel/amdxdna: Fix potential amdxdna_umap lifetime race

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72340
    31İzleyin

    net: microchip: vcap: fix races on the shared Super VCAP block

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72344
    31İzleyin

    net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72353
    35İzleyin

    ntfs: avoid stale runlist element dereference in fallocate

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72354
    35İzleyin

    ntfs: avoid stale runlist element dereference in MFT writeback

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72355
    39İzleyin

    netfs: Fix barriering when walking subrequest list

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72356
    30İzleyin

    cifs: Fix missing credit release on failure in cifs_issue_read()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72357
    31İzleyin

    uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72358
    31İzleyin

    drm/xe/pt: prevent invalid cursor access for purged BOs

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72364
    28İzleyin

    netfs: Fix writeback error handling

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72366
    39İzleyin

    netfs: Fix netfs_create_write_req() to handle async cache object creation

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72367
    35İzleyin

    iomap: guard io_size EOF trim against concurrent truncate underflow

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72368
    31İzleyin

    cachefiles: Fix double unlock in nomem_d_alloc error path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72369
    31İzleyin

    minix: avoid overflow in bitmap block count calculation

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72372
    31İzleyin

    afs: Fix lack of locking around modifications of net->cells_dyn_ino

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72378
    30İzleyin

    afs: Fix error code in afs_extract_vl_addrs()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72381
    39İzleyin

    ksmbd: fix use-after-free of fp->owner.name in durable handle owner check

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72382
    35İzleyin

    ksmbd: reject undersized DACLs before parsing ACEs

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72393
    39İzleyin

    eth: fbnic: don't cache shinfo across skb realloc

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72395
    28İzleyin

    hwmon: (pmbus) Fix passing events to regulator core

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72399
    39İzleyin

    net: enetc: check the number of BDs needed for xdp_frame

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72407
    40Planlayın

    geneve: validate inner network offset in geneve_gro_complete()

    KritikCVSS 10,0İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72408
    40Planlayın

    geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint

    KritikCVSS 10,0İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72410
    31İzleyin

    octeontx2-af: Validate NIX maximum LFs correctly

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72411
    31İzleyin

    net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72412
    37İzleyin

    s390/mm: Fix handling of _PAGE_UNUSED pte bit

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72417
    39İzleyin

    netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72422
    39İzleyin

    ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux15 Ağu 2026

  • CVE-2026-72426
    33İzleyin

    bpf: Preserve pointer spill metadata during half-slot cleanup

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux15 Ağu 2026