İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 35 / 73

  • CVE-2026-22072
    33İzleyin

    Arbitrary URL Loading in WebView Leading to Token Leakage Risk

    YüksekCVSS 8,3İstismar yokEPSS %0

    oppo · oppo health17 Ağu 2026

  • CVE-2026-74845
    34İzleyin

    2100 Technology｜Official Document Management System - Arbitrary File Upload

    YüksekCVSS 8,7İstismar yokEPSS %0

    2100 technology · official document management system17 Ağu 2026

  • CVE-2026-74579
    28İzleyin

    netfilter: nft_payload: fix mask build for partial field offload

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux17 Ağu 2026

  • CVE-2026-74798
    37İzleyin

    SiYuan kernel Path Traversal via database_clean MCP tool

    KritikCVSS 9,3İstismar yokEPSS %0

    siyuan-note · siyuan17 Ağu 2026

  • CVE-2026-74799
    36İzleyin

    SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure

    KritikCVSS 9,2İstismar yokEPSS %0

    siyuan-note · siyuan17 Ağu 2026

  • CVE-2026-74800
    37İzleyin

    SiYuan before v3.7.4 Stored XSS via assets endpoint

    KritikCVSS 9,4İstismar yokEPSS %0

    siyuan-note · siyuan17 Ağu 2026

  • CVE-2026-74801
    34İzleyin

    SiYuan before 3.7.4 Local Privilege Escalation via elevator.exe

    YüksekCVSS 8,6İstismar yokEPSS %0

    siyuan-note · siyuan17 Ağu 2026

  • CVE-2026-74802
    28İzleyin

    SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy

    YüksekCVSS 7,1İstismar yokEPSS %0

    siyuan-note · siyuan17 Ağu 2026

  • CVE-2026-74868
    34İzleyin

    SiYuan before 3.7.4 Brute-Force Authentication via Publish Service

    YüksekCVSS 8,7İstismar yokEPSS %0

    siyuan-note · siyuan17 Ağu 2026

  • CVE-2026-74869
    33İzleyin

    stoatchat before 0.15.0 Missing Authorization via Subscribe

    YüksekCVSS 8,3İstismar yokEPSS %0

    stoatchat · stoatchat17 Ağu 2026

  • CVE-2026-74870
    34İzleyin

    openssl_encrypt before 1.4.8 Hardware Pepper Information Disclosure

    YüksekCVSS 8,7İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74882
    34İzleyin

    openssl_encrypt before 1.4.0 Insecure Default Configuration

    YüksekCVSS 8,7İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74883
    34İzleyin

    openssl_encrypt before 1.4.0 Sandbox Bypass via pathlib and io

    YüksekCVSS 8,7İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74884
    34İzleyin

    openssl_encrypt before 1.4.0 Path Traversal via plugin_id

    YüksekCVSS 8,7İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74885
    37İzleyin

    openssl_encrypt before 1.4.0 Logging Bug and Race Condition

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74886
    37İzleyin

    openssl_encrypt before 1.4.0 Plugin Import Guard Bypass

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74888
    34İzleyin

    openssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivation

    YüksekCVSS 8,7İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74889
    37İzleyin

    openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74890
    37İzleyin

    openssl_encrypt before 1.4.0 HMAC Authentication Bypass via Environment Variable

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74891
    34İzleyin

    openssl_encrypt before 1.4.0 Hardcoded Database Credentials

    YüksekCVSS 8,7İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74892
    34İzleyin

    openssl_encrypt before 1.4.0 Hardcoded Secret Key

    YüksekCVSS 8,7İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74893
    34İzleyin

    openssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded Secrets

    YüksekCVSS 8,7İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74894
    37İzleyin

    openssl_encrypt before 1.4.0 Authentication Bypass via Bearer Token

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74895
    37İzleyin

    openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74896
    37İzleyin

    openssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute Traversal

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74899
    37İzleyin

    openssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarchy

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74900
    37İzleyin

    openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74901
    37İzleyin

    openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74843
    37İzleyin

    Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow

    KritikCVSS 9,3İstismar yokEPSS %1

    wavlink · wn531p317 Ağu 2026

  • CVE-2026-14564
    36İzleyin

    Sensitive Data Exposure in Innotim Software's Logsign SIEM

    KritikCVSS 9,0İstismar yokEPSS %0

    innotim software telecommunications and consulting trade ltd. co. · logsign siem17 Ağu 2026

  • CVE-2026-16467
    30İzleyin

    Broken Access Control in Dolusoft Software's Fortilogger

    YüksekCVSS 7,5İstismar yokEPSS %0

    dolusoft software technologies · fortilogger17 Ağu 2026

  • CVE-2026-18674
    28İzleyin

    Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifier

    YüksekCVSS 7,0İstismar yokEPSS %0

    kong inc. · kong mesh17 Ağu 2026

  • CVE-2026-74997
    35İzleyin

    In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code execution

    YüksekCVSS 8,8İstismar yokEPSS %1

    roundcube · webmail17 Ağu 2026

  • CVE-2026-74998
    28İzleyin

    In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS (Cascading Style Sheets) proxy were not validated, which m

    YüksekCVSS 7,2İstismar yokEPSS %0

    roundcube · webmail17 Ağu 2026

  • CVE-2026-75002
    29İzleyin

    In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information d

    YüksekCVSS 7,1İstismar yokEPSS %2

    roundcube · webmail17 Ağu 2026

  • CVE-2026-75003
    39İzleyin

    In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI attribute of an SVG image could evade the remote i

    KritikCVSS 9,8İstismar yokEPSS %0

    roundcube · webmail17 Ağu 2026

  • CVE-2026-75007
    35İzleyin

    In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitut

    YüksekCVSS 8,8İstismar yokEPSS %0

    roundcube · webmail17 Ağu 2026

  • CVE-2026-16137
    28İzleyin

    Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller

    YüksekCVSS 7,2İstismar yokEPSS %0

    progress · sharefile storage zones controller17 Ağu 2026

  • CVE-2026-16138
    32İzleyin

    Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service

    YüksekCVSS 8,0İstismar yokEPSS %0

    progress · sharefile storage zones controller17 Ağu 2026

  • CVE-2026-16139
    28İzleyin

    Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution

    YüksekCVSS 7,2İstismar yokEPSS %0

    progress · sharefile storage zones controller17 Ağu 2026

  • CVE-2026-16471
    30İzleyin

    Broken Access Control in Dolusoft Software's Sonlogger

    YüksekCVSS 7,5İstismar yokEPSS %0

    dolusoft software technologies · sonlogger17 Ağu 2026

  • CVE-2026-19693
    32İzleyin

    extract-zip arbitrary file write outside the destination directory via a symlink at the final path component

    YüksekCVSS 8,1İstismar yokEPSS %0

    max-mapper · extract-zip17 Ağu 2026

  • CVE-2026-56090
    29İzleyin

    Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability.

    YüksekCVSS 7,3İstismar yokEPSS %0

    dell · objectscale17 Ağu 2026

  • CVE-2026-56685
    29İzleyin

    Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command In

    YüksekCVSS 7,3İstismar yokEPSS %0

    dell · objectscale17 Ağu 2026

  • CVE-2026-56686
    31İzleyin

    Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command In

    YüksekCVSS 7,8İstismar yokEPSS %0

    dell · objectscale17 Ağu 2026

  • CVE-2026-59909
    28İzleyin

    Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability.

    YüksekCVSS 7,1İstismar yokEPSS %0

    dell · objectscale17 Ağu 2026

  • CVE-2026-59910
    31İzleyin

    Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command In

    YüksekCVSS 7,8İstismar yokEPSS %0

    dell · objectscale17 Ağu 2026

  • CVE-2026-74872
    37İzleyin

    openssl_encrypt before 1.4.0 Arbitrary Code Execution via Whirlpool

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74873
    34İzleyin

    openssl_encrypt before 1.4.0 Password Exposure via CLI Argument

    YüksekCVSS 8,7İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74874
    34İzleyin

    openssl_encrypt before 1.4.0 Weak PRNG Steganography Pixel Selection

    YüksekCVSS 8,7İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74875
    37İzleyin

    openssl_encrypt before 1.4.0 Schema Validation Bypass

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74876
    37İzleyin

    openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74877
    34İzleyin

    openssl_encrypt before 1.4.0 Missing Ownership Verification via revoke_key

    YüksekCVSS 8,7İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74878
    37İzleyin

    openssl_encrypt before 1.4.0 TOTP Rate Limiter Bypass

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74879
    34İzleyin

    openssl_encrypt before 1.4.0 Information Disclosure via /ready endpoint

    YüksekCVSS 8,7İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74880
    37İzleyin

    openssl_encrypt before 1.4.0 Token Leakage via Query Parameters

    KritikCVSS 9,3İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-74881
    28İzleyin

    openssl_encrypt before 1.4.0 CORS Misconfiguration via Wildcard Origins

    YüksekCVSS 7,1İstismar yokEPSS %0

    jahlives · openssl encrypt17 Ağu 2026

  • CVE-2026-13202
    29İzleyin

    HTML Injection in OTDS Swagger UI

    YüksekCVSS 7,3İstismar yokEPSS %0

    opentext · opentext directory services17 Ağu 2026

  • CVE-2026-71566
    37İzleyin

    KubeVirt backend is not authenticated

    KritikCVSS 9,3İstismar yokEPSS %0

    openshift-metal3 · fakefish17 Ağu 2026

  • CVE-2026-71567
    30İzleyin

    User-controlled variables inserted unescaped into shell scripts and Kubernetes manifests

    YüksekCVSS 7,7İstismar yokEPSS %0

    openshift-metal3 · fakefish17 Ağu 2026

  • CVE-2026-40144
    29İzleyin

    Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)

    YüksekCVSS 7,3İstismar yokEPSS %0

    beyondtrust · endpoint privilege management (windows deployments)17 Ağu 2026

  • CVE-2026-55674
    37İzleyin

    Discourse: Cache poisoning/XSS via color scheme cookies

    KritikCVSS 9,3İstismar yokEPSS %0

    discourse · discourse17 Ağu 2026

  • CVE-2026-64859
    36İzleyin

    New API: User List API Leaks Root User Access Token Leading to Privilege Escalation

    KritikCVSS 9,1İstismar yokEPSS %0

    quantumnous · new-api17 Ağu 2026

  • CVE-2026-64868
    30İzleyin

    New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging

    YüksekCVSS 7,5İstismar yokEPSS %0

    quantumnous · new-api17 Ağu 2026

  • CVE-2026-71479
    36İzleyin

    New API: Integer overflow in quota billing yields negative charges (self-crediting)

    KritikCVSS 9,1İstismar yokEPSS %0

    quantumnous · new-api17 Ağu 2026

  • CVE-2026-73646
    30İzleyin

    PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

    YüksekCVSS 7,5İstismar yokEPSS %0

    postcss · postcss17 Ağu 2026

  • CVE-2026-75044
    32İzleyin

    In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbit

    YüksekCVSS 8,1İstismar yokEPSS %0

    jetbrains · youtrack17 Ağu 2026

  • CVE-2026-75045
    36İzleyin

    In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via sha

    KritikCVSS 9,1İstismar yokEPSS %0

    jetbrains · youtrack17 Ağu 2026

  • CVE-2026-75048
    32İzleyin

    In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible

    YüksekCVSS 8,2İstismar yokEPSS %0

    jetbrains · youtrack17 Ağu 2026

  • CVE-2026-75051
    32İzleyin

    In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible

    YüksekCVSS 8,1İstismar yokEPSS %0

    jetbrains · youtrack17 Ağu 2026

  • CVE-2026-75056
    31İzleyin

    In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible

    YüksekCVSS 7,8İstismar yokEPSS %0

    jetbrains · intellij idea17 Ağu 2026

  • CVE-2026-75060
    33İzleyin

    In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools

    YüksekCVSS 8,4İstismar yokEPSS %0

    jetbrains · pycharm17 Ağu 2026

  • CVE-2026-40145
    28İzleyin

    Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility

    YüksekCVSS 7,1İstismar yokEPSS %0

    beyondtrust · endpoint privilege management (windows deployment)17 Ağu 2026

  • CVE-2026-61666
    35İzleyin

    websocket-driver: Denial of service via malformed Host header

    YüksekCVSS 8,9İstismar yokEPSS %0

    faye · websocket-driver-ruby17 Ağu 2026

  • CVE-2026-68518
    35İzleyin

    Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction

    YüksekCVSS 8,8İstismar yokEPSS %0

    nicolargo · glances17 Ağu 2026

  • CVE-2026-9771
    35İzleyin

    Missing device-pointer validation in flash_copy() syscall allows userspace privilege escalation

    YüksekCVSS 8,8İstismar yokEPSS %0

    zephyrproject · zephyr17 Ağu 2026

  • CVE-2026-33437
    32İzleyin

    Stirling PDF: Stored XSS in Info Summary

    YüksekCVSS 8,1İstismar yokEPSS %0

    stirling-tools · stirling-pdf17 Ağu 2026

  • CVE-2026-46345
    33İzleyin

    compliance-trestle - jinja has an Arbitrary File Write via Path Traversal

    YüksekCVSS 8,4İstismar yokEPSS %0

    oscal-compass · compliance-trestle17 Ağu 2026

  • CVE-2026-50768
    35İzleyin

    File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code

    YüksekCVSS 8,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-50769
    39İzleyin

    The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-50770
    39İzleyin

    An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request.

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-50772
    39İzleyin

    An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-51346
    36İzleyin

    SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obta

    KritikCVSS 9,1İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-54284
    34İzleyin

    sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger

    YüksekCVSS 8,7İstismar yokEPSS %0

    andialbrecht · sqlparse17 Ağu 2026

  • CVE-2026-59893
    30İzleyin

    sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)

    YüksekCVSS 7,5İstismar yokEPSS %0

    andialbrecht · sqlparse17 Ağu 2026

  • CVE-2026-59902
    30İzleyin

    Netty: Memory Exhaustion in SctpMessageCompletionHandler

    YüksekCVSS 7,5İstismar yokEPSS %0

    netty · netty17 Ağu 2026

  • CVE-2026-59903
    30İzleyin

    Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    netty · netty17 Ağu 2026

  • CVE-2026-62982
    35İzleyin

    Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    nicolargo · glances17 Ağu 2026

  • CVE-2026-68519
    28İzleyin

    Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)

    YüksekCVSS 7,1İstismar yokEPSS %0

    nicolargo · glances17 Ağu 2026

  • CVE-2026-71491
    34İzleyin

    sqlparse: Quadratic O(n²) DoS in group_comments

    YüksekCVSS 8,7İstismar yokEPSS %0

    andialbrecht · sqlparse17 Ağu 2026

  • CVE-2026-71979
    34İzleyin

    INDI indiserver 2.2.4.2 Stack Buffer Overflow via XML Tag Parsing

    YüksekCVSS 8,7İstismar yokEPSS %0

    indilib · indi17 Ağu 2026

  • CVE-2026-71980
    34İzleyin

    Belledonne Communications bcg729 1.1.2 Out-of-Bounds Read via decodeSIDframe()

    YüksekCVSS 8,7İstismar yokEPSS %0

    belledonnecommunications · bcg72917 Ağu 2026

  • CVE-2026-73522
    35İzleyin

    COVESA Open1722 0.9.2 Stack Buffer Overflow via avtp_to_can() in acf-can-listener

    YüksekCVSS 8,7İstismar yokEPSS %3

    covesa · open172217 Ağu 2026

  • CVE-2026-73523
    34İzleyin

    COVESA Open1722 0.9.2 Stack Memory Disclosure via acf-can-listener.c Integer Truncation

    YüksekCVSS 8,7İstismar yokEPSS %0

    covesa · open172217 Ağu 2026

  • CVE-2026-74253
    40Planlayın

    Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0

    KritikCVSS 10,0İstismar yokEPSS %0

    regularlabs.com · sourcerer extension for joomla17 Ağu 2026

  • CVE-2026-74254
    37İzleyin

    Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5

    KritikCVSS 9,3İstismar yokEPSS %0

    joomlack.fr · page builder ck extension for joomla17 Ağu 2026

  • CVE-2026-15218
    31İzleyin

    Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation

    YüksekCVSS 7,9İstismar yokEPSS %0

    red hat · red hat openshift ai 3.417 Ağu 2026

  • CVE-2026-12553
    35İzleyin

    HP Web Jetadmin (WJA) - Potential Arbitrary File Read/Write

    YüksekCVSS 8,9İstismar yokEPSS %0

    hp inc. · web jetadmin17 Ağu 2026

  • CVE-2026-45698
    30İzleyin

    Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir()

    YüksekCVSS 7,5İstismar yokEPSS %0

    netatalk · netatalk17 Ağu 2026

  • CVE-2026-50773
    31İzleyin

    An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll

    YüksekCVSS 7,8İstismar yokEPSS %0

    17 Ağu 2026