İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.228 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 3 / 73

  • CVE-2026-41453
    34İzleyin

    Krayin CRM < 2.2.4 Blind SQL Injection via LeadDataGrid.php rotten_lead Parameter

    YüksekCVSS 8,7İstismar yokEPSS %0

    krayin · laravel-crm3 Ağu 2026

  • CVE-2026-61372
    30İzleyin

    Apache Jena Fuseki: Web requests using SPARQL Update can escape file restrictions

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · jena fuseki3 Ağu 2026

  • CVE-2026-67610
    34İzleyin

    OpenEMR 8.2.0 OAuth2 Dynamic Client Registration Unauthorized FHIR Access

    YüksekCVSS 8,6İstismar yokEPSS %0

    openemr · openemr3 Ağu 2026

  • CVE-2026-67611
    34İzleyin

    OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration

    YüksekCVSS 8,6İstismar yokEPSS %0

    open-emr · openemr3 Ağu 2026

  • CVE-2026-68945
    35İzleyin

    Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

    YüksekCVSS 8,8İstismar yokEPSS %0

    angular · angular3 Ağu 2026

  • CVE-2026-69149
    34İzleyin

    Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

    YüksekCVSS 8,6İstismar yokEPSS %0

    angular · angular3 Ağu 2026

  • CVE-2026-69151
    30İzleyin

    Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

    YüksekCVSS 7,6İstismar yokEPSS %0

    angular · angular3 Ağu 2026

  • CVE-2026-69152
    30İzleyin

    brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

    YüksekCVSS 7,5İstismar yokEPSS %0

    juliangruber · brace-expansion3 Ağu 2026

  • CVE-2026-69088
    34İzleyin

    Grav CMS 2.0.7 through 2.0.10 Arbitrary Method Invocation via Blueprint

    YüksekCVSS 8,6İstismar yokEPSS %0

    getgrav · grav3 Ağu 2026

  • CVE-2026-69089
    34İzleyin

    Grav CMS before 2.0.11 Path Traversal via watermark

    YüksekCVSS 8,7İstismar yokEPSS %0

    getgrav · grav3 Ağu 2026

  • CVE-2026-18612
    36İzleyin

    GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection

    YüksekCVSS 8,9İstismar yokEPSS %3

    gl-inet · gl-mt30003 Ağu 2026

  • CVE-2026-18613
    35İzleyin

    GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection

    YüksekCVSS 8,9İstismar yokEPSS %0

    gl-inet · gl-mt30003 Ağu 2026

  • CVE-2026-40717
    31İzleyin

    Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability.

    YüksekCVSS 7,8İstismar yokEPSS %0

    dell · monitor driver3 Ağu 2026

  • CVE-2026-61523
    34İzleyin

    WebsiteBaker CMS < 2.13.10 Code Injection via Droplets Editor

    YüksekCVSS 8,6İstismar yokEPSS %1

    websitebaker org e.v. · websitebaker cms3 Ağu 2026

  • CVE-2026-61524
    34İzleyin

    WebsiteBaker CMS < 2.13.10 File Upload RCE via Module Installation

    YüksekCVSS 8,6İstismar yokEPSS %1

    websitebaker org e.v. · websitebaker cms3 Ağu 2026

  • CVE-2026-18614
    36İzleyin

    GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection

    YüksekCVSS 8,9İstismar yokEPSS %3

    gl-inet · gl-mt30003 Ağu 2026

  • CVE-2026-18615
    36İzleyin

    GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection

    YüksekCVSS 8,9İstismar yokEPSS %3

    gl-inet · gl-mt30003 Ağu 2026

  • CVE-2026-18616
    36İzleyin

    GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection

    YüksekCVSS 8,9İstismar yokEPSS %3

    gl-inet · gl-mt30003 Ağu 2026

  • CVE-2026-38444
    24İzleyin

    osTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting (XSS) via the email From-header display name.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    3 Ağu 2026

  • CVE-2026-38447
    39İzleyin

    osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing.

    KritikCVSS 9,8İstismar yokEPSS %0

    3 Ağu 2026

  • CVE-2026-59912
    31İzleyin

    Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability.

    YüksekCVSS 7,8İstismar yokEPSS %0

    dell · display and peripheral manager3 Ağu 2026

  • CVE-2026-59913
    31İzleyin

    Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication for Critical Function vulnera

    YüksekCVSS 7,8İstismar yokEPSS %0

    dell · display and peripheral manager3 Ağu 2026

  • CVE-2026-18655
    28İzleyin

    Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection

    YüksekCVSS 7,1İstismar yokEPSS %0

    aws · amazon-mq-mcp-server3 Ağu 2026

  • CVE-2026-47211
    33İzleyin

    Ouroboros: Remote Code Execution via Untrusted Project-Directory .env

    YüksekCVSS 8,4İstismar yokEPSS %0

    q00 · ouroboros3 Ağu 2026

  • CVE-2026-48031
    36İzleyin

    Go Restful API Boilerplate: Hardcoded JWT Secret "random" Allows Token Forgery

    KritikCVSS 9,1İstismar yokEPSS %0

    dhax · go-base3 Ağu 2026

  • CVE-2026-62354
    30İzleyin

    Apache NiFi: Incorrect Authorization for Parameter Context Validation Requests

    YüksekCVSS 7,7İstismar yokEPSS %0

    apache · nifi3 Ağu 2026

  • CVE-2026-67598
    36İzleyin

    Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    emlog · emlog3 Ağu 2026

  • CVE-2026-67599
    35İzleyin

    ClearOS 7.9 OS Command Injection via Log Viewer filter parameter

    YüksekCVSS 8,6Kavram kanıtıEPSS %2

    clearfoundation · clearos3 Ağu 2026

  • CVE-2026-68981
    35İzleyin

    Apache NiFi: Uncontrolled Resource Consumption through Decompression of HTTP Requests

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · nifi3 Ağu 2026

  • CVE-2026-69185
    30İzleyin

    Socket.IO: Zero-attachment Memory Exhaustion

    YüksekCVSS 7,5İstismar yokEPSS %0

    socketio · socket.io3 Ağu 2026

  • CVE-2026-69192
    30İzleyin

    ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass

    YüksekCVSS 7,7İstismar yokEPSS %0

    beaugunderson · ip-address3 Ağu 2026

  • CVE-2026-18733
    30İzleyin

    Prompt injection bypasses shell tool consent gate in Strands Agents Tools

    YüksekCVSS 7,5İstismar yokEPSS %0

    aws · strands-agents-tools3 Ağu 2026

  • CVE-2026-18737
    28İzleyin

    Shlink Blind SQL Injection via tags/stats orderBy Parameter

    YüksekCVSS 7,1İstismar yokEPSS %0

    shlinkio · shlink3 Ağu 2026

  • CVE-2026-41447
    34İzleyin

    FirmaCheck < 1.3.16 DLL Hijacking via Unvalidated OpenSSL Configuration Path

    YüksekCVSS 8,5İstismar yokEPSS %0

    zucchetti s.p.a. · firmacheck3 Ağu 2026

  • CVE-2026-48063
    37İzleyin

    Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload

    KritikCVSS 9,3İstismar yokEPSS %0

    whiskeysockets · baileys3 Ağu 2026

  • CVE-2026-48113
    34İzleyin

    Chisel: ACL Bypass via Post-Handshake SSH Channel ExtraData Injection

    YüksekCVSS 8,5İstismar yokEPSS %0

    jpillora · chisel3 Ağu 2026

  • CVE-2026-51190
    40Planlayın

    The "s init" command in Serverless-Devs @serverless-devs/s <= 3.1.11 passes unsanitized user input to child_process.spawn() with shell: true

    KritikCVSS 9,8İstismar yokEPSS %1

    3 Ağu 2026

  • CVE-2026-51775
    39İzleyin

    SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the application/common/controller

    KritikCVSS 9,8İstismar yokEPSS %0

    3 Ağu 2026

  • CVE-2026-52102
    40Planlayın

    An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary comma

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    3 Ağu 2026

  • CVE-2026-52521
    32İzleyin

    A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via the id parameter in th

    YüksekCVSS 8,1İstismar yokEPSS %0

    3 Ağu 2026

  • CVE-2026-66065
    33İzleyin

    Ouroboros: Untrusted project .env can still reach RCE via omitted execution-routing keys (Incomplete fix of CVE-2026-47211)

    YüksekCVSS 8,4İstismar yokEPSS %0

    q00 · ouroboros3 Ağu 2026

  • CVE-2026-67972
    30İzleyin

    An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly

    YüksekCVSS 7,5İstismar yokEPSS %0

    3 Ağu 2026

  • CVE-2026-67976
    30İzleyin

    The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to ca

    YüksekCVSS 7,5İstismar yokEPSS %0

    3 Ağu 2026

  • CVE-2026-69240
    39İzleyin

    Sequelize: SQL Injection (Oracle DB)

    KritikCVSS 9,8İstismar yokEPSS %0

    sequelize · sequelize3 Ağu 2026

  • CVE-2026-69243
    25İzleyin

    AIOHTTP: HTTP request smuggling via WebSocket upgrade

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    aio-libs · aiohttp3 Ağu 2026

  • CVE-2026-69244
    28İzleyin

    AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

    YüksekCVSS 7,1İstismar yokEPSS %0

    aio-libs · aiohttp3 Ağu 2026

  • CVE-2026-69246
    28İzleyin

    Guzzle: Noncanonical host can bypass host-based checks

    YüksekCVSS 7,2İstismar yokEPSS %0

    guzzle · guzzle3 Ağu 2026

  • CVE-2025-9291
    30İzleyin

    Improper Certificate Validation in TP-Link Omada Cloud Communications

    YüksekCVSS 7,7İstismar yokEPSS %0

    tp-link · omada fusion 2.5g firmware3 Ağu 2026

  • CVE-2026-10849
    30İzleyin

    Heap out-of-bounds write in Zephyr hawkBit OTA client when terminating server response body

    YüksekCVSS 7,5İstismar yokEPSS %0

    zephyrproject · zephyr3 Ağu 2026

  • CVE-2026-46713
    36İzleyin

    Misskey: JSON-LD signature validation + compaction may lead to improper activity handling

    KritikCVSS 9,2İstismar yokEPSS %0

    misskey-dev · misskey3 Ağu 2026

  • CVE-2026-47746
    35İzleyin

    Misskey: JSON-LD signature validation + compaction is vulnerable to timing attacks

    YüksekCVSS 8,9İstismar yokEPSS %0

    misskey-dev · misskey3 Ağu 2026

  • CVE-2026-67969
    30İzleyin

    An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a craft

    YüksekCVSS 7,5İstismar yokEPSS %0

    3 Ağu 2026

  • CVE-2026-67970
    30İzleyin

    Incorrect access control in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 allows attackers to access sensitive components via a path

    YüksekCVSS 7,5İstismar yokEPSS %0

    3 Ağu 2026

  • CVE-2026-67973
    30İzleyin

    An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via replaying final CFDP PDUs.

    YüksekCVSS 7,5İstismar yokEPSS %0

    3 Ağu 2026

  • CVE-2026-67974
    30İzleyin

    A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v7.0.1 allows attacker

    YüksekCVSS 7,5İstismar yokEPSS %0

    3 Ağu 2026

  • CVE-2026-67975
    30İzleyin

    Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new streams via sending T

    YüksekCVSS 7,5İstismar yokEPSS %0

    3 Ağu 2026

  • CVE-2026-67977
    30İzleyin

    An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service

    YüksekCVSS 7,5İstismar yokEPSS %0

    3 Ağu 2026

  • CVE-2026-69247
    32İzleyin

    cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

    YüksekCVSS 8,2İstismar yokEPSS %0

    pyca · cryptography3 Ağu 2026

  • CVE-2026-69249
    34İzleyin

    python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

    YüksekCVSS 8,7İstismar yokEPSS %0

    pyca · cryptography3 Ağu 2026

  • CVE-2025-15628
    32İzleyin

    Hardcoded Certificates in TP-Link Omada Device Communications

    YüksekCVSS 8,2İstismar yokEPSS %0

    tp-link · omada oc200 v3 firmware3 Ağu 2026

  • CVE-2026-18667
    37İzleyin

    Sensor Proxy Version 1.4.2 Fixes One Vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    tenable, inc. · sensor proxy3 Ağu 2026

  • CVE-2026-18684
    36İzleyin

    GL.iNet GL-MT3000 modem.so glc remove_profile command injection

    YüksekCVSS 8,9İstismar yokEPSS %3

    gl.inet · gl-mt30003 Ağu 2026

  • CVE-2026-48317
    38İzleyin

    Adobe Campaign Classic (ACC) | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)

    KritikCVSS 9,6İstismar yokEPSS %0

    adobe · campaign3 Ağu 2026

  • CVE-2026-48323
    40Planlayın

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    KritikCVSS 10,0İstismar yokEPSS %1

    adobe · campaign3 Ağu 2026

  • CVE-2026-48326
    39İzleyin

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    KritikCVSS 9,9İstismar yokEPSS %0

    adobe · campaign3 Ağu 2026

  • CVE-2026-48330
    40Planlayın

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    KritikCVSS 10,0İstismar yokEPSS %1

    adobe · campaign3 Ağu 2026

  • CVE-2026-48331
    40Planlayın

    Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

    KritikCVSS 10,0İstismar yokEPSS %0

    adobe · campaign3 Ağu 2026

  • CVE-2026-48333
    39İzleyin

    Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

    KritikCVSS 9,8İstismar yokEPSS %0

    adobe · campaign3 Ağu 2026

  • CVE-2026-48399
    30İzleyin

    Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · campaign3 Ağu 2026

  • CVE-2026-67978
    30İzleyin

    An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via transmitting a crafted SBN fram

    YüksekCVSS 7,5İstismar yokEPSS %0

    3 Ağu 2026

  • CVE-2026-18685
    36İzleyin

    GL.iNet GL-MT3000 modem.so glc set_upgrade command injection

    YüksekCVSS 8,9İstismar yokEPSS %3

    gl.inet · gl-mt30003 Ağu 2026

  • CVE-2026-18686
    36İzleyin

    GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection

    YüksekCVSS 8,9İstismar yokEPSS %4

    gl.inet · gl-mt30003 Ağu 2026

  • CVE-2026-62870
    35İzleyin

    Microsoft Excel Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · 365 apps3 Ağu 2026

  • CVE-2026-65802
    29İzleyin

    Microsoft Edge for Android Information Disclosure Vulnerability

    YüksekCVSS 7,4İstismar yokEPSS %0

    microsoft · edge chromium3 Ağu 2026

  • CVE-2026-66310
    28İzleyin

    Microsoft Edge for Android Information Disclosure Vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    microsoft · edge3 Ağu 2026

  • CVE-2026-66312
    35İzleyin

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    microsoft · edge chromium3 Ağu 2026

  • CVE-2026-66315
    30İzleyin

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    microsoft · edge chromium3 Ağu 2026

  • CVE-2026-66318
    32İzleyin

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    microsoft · edge chromium3 Ağu 2026

  • CVE-2026-66321
    38İzleyin

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    KritikCVSS 9,6İstismar yokEPSS %1

    microsoft · edge chromium3 Ağu 2026

  • CVE-2026-66326
    35İzleyin

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · edge chromium3 Ağu 2026

  • CVE-2026-56845
    30İzleyin

    An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is configured to FileSystem.

    YüksekCVSS 7,5İstismar yokEPSS %0

    rocket.chat · rocket.chat3 Ağu 2026

  • CVE-2026-56846
    30İzleyin

    A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion.

    YüksekCVSS 7,5İstismar yokEPSS %0

    nodejs · node3 Ağu 2026

  • CVE-2026-58042
    23İzleyin

    A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records.

    OrtaCVSS 5,9İstismar yokEPSS %0

    nodejs · node3 Ağu 2026

  • CVE-2026-6837
    28İzleyin

    A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    zyxel · wax650s firmware3 Ağu 2026

  • CVE-2026-8508
    26İzleyin

    An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 cou

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    zyxel · wax650s firmware3 Ağu 2026

  • CVE-2026-14818
    28İzleyin

    A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 throu

    YüksekCVSS 7,2İstismar yokEPSS %0

    zyxel · atp series firmware4 Ağu 2026

  • CVE-2026-16881
    34İzleyin

    A code injection vulnerability exists in the LINE Android app prior to version 26.7.2.

    YüksekCVSS 8,7İstismar yokEPSS %0

    ly corporation · line client for android4 Ağu 2026

  • CVE-2026-15958
    37İzleyin

    Easy Dropbox Integration < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX

    KritikCVSS 9,3İstismar yokEPSS %0

    unknown · easy integration for dropbox4 Ağu 2026

  • CVE-2026-16618
    39İzleyin

    ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · improve seo4 Ağu 2026

  • CVE-2026-16623
    32İzleyin

    Create Block Theme < 2.10.0 - Admin+ PHP Code Injection via Pattern Save (Multisite)

    YüksekCVSS 8,0İstismar yokEPSS %0

    unknown · create block theme4 Ağu 2026

  • CVE-2026-42169
    31İzleyin

    Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)

    YüksekCVSS 7,8İstismar yokEPSS %0

    redhat · enterprise linux4 Ağu 2026

  • CVE-2026-18753
    36İzleyin

    Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-ASManager)

    KritikCVSS 9,1İstismar yokEPSS %0

    geovision inc. · gv-as1620 (as-manager)4 Ağu 2026

  • CVE-2026-18754
    36İzleyin

    Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-Cloud)

    KritikCVSS 9,1İstismar yokEPSS %0

    geovision inc. · gv-as1620 (gv-cloud)4 Ağu 2026

  • CVE-2026-18755
    29İzleyin

    GV-ASManager DLL hijacking vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    geovision inc. · gv-asmanager4 Ağu 2026

  • CVE-2026-18759
    34İzleyin

    An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.

    YüksekCVSS 8,5İstismar yokEPSS %0

    asustor inc. · abp4 Ağu 2026

  • CVE-2026-67243
    34İzleyin

    freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability.

    YüksekCVSS 8,6İstismar yokEPSS %0

    refirio · freo24 Ağu 2026

  • CVE-2026-14175
    39İzleyin

    Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources

    KritikCVSS 9,8İstismar yokEPSS %0

    bilin software and informatics consultancy inc. · humanist digital human resources4 Ağu 2026

  • CVE-2026-14804
    36İzleyin

    Hardcoded Cryptographic Key in Bilin Software's HUMANIST Digital Human Resources

    KritikCVSS 9,1İstismar yokEPSS %0

    bilin software and informatics consultancy inc. · humanist digital human resources4 Ağu 2026

  • CVE-2026-14838
    29İzleyin

    Session Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human Resources

    YüksekCVSS 7,4İstismar yokEPSS %0

    bilin software and informatics consultancy inc. · humanist digital human resources4 Ağu 2026

  • CVE-2026-15721
    39İzleyin

    Query Console SQL Injection Leading to Sensitive Data Disclosure in Bilin Software's HUMANIST Digital Human Resources

    KritikCVSS 9,8İstismar yokEPSS %0

    bilin software and informatics consultancy inc. · humanist digital human resources4 Ağu 2026