İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 36 / 73

  • CVE-2026-50774
    39İzleyin

    An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-50775
    39İzleyin

    A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafte

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-50776
    31İzleyin

    Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to obtain sensitive information and

    YüksekCVSS 7,5İstismar yokEPSS %1

    17 Ağu 2026

  • CVE-2026-74238
    34İzleyin

    TIER IV Nebula 1.2.0 Heap Out-of-Bounds Read via VLP32 UDP Decoder

    YüksekCVSS 8,7İstismar yokEPSS %0

    tier4 · nebula17 Ağu 2026

  • CVE-2026-19478
    54Planlayın

    Improper Control of Generation of Code ('Code Injection') in GitLab

    KritikCVSS 9,1Kavram kanıtıEPSS %60

    gitlab · gitlab17 Ağu 2026

  • CVE-2026-19650
    28İzleyin

    Cross-Site Request Forgery (CSRF) in GitLab

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    gitlab · gitlab17 Ağu 2026

  • CVE-2026-52886
    20İzleyin

    Notepad++: session.xml backupFilePath starts_with Bypass

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    notepad-plus-plus · notepad-plus-plus17 Ağu 2026

  • CVE-2026-54758
    31İzleyin

    Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrs

    YüksekCVSS 7,8İstismar yokEPSS %0

    notepad-plus-plus · notepad-plus-plus17 Ağu 2026

  • CVE-2026-57233
    32İzleyin

    Notepad++: Path Traversal (Zip Slip) in WinGup Plugin Extraction

    YüksekCVSS 8,1İstismar yokEPSS %0

    notepad-plus-plus · notepad-plus-plus17 Ağu 2026

  • CVE-2026-57485
    34İzleyin

    Stirling-PDF: Internal Service Account API Key Disclosure via Pipeline Endpoint

    YüksekCVSS 8,5İstismar yokEPSS %0

    stirling-tools · stirling-pdf17 Ağu 2026

  • CVE-2026-67678
    39İzleyin

    File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-68004
    39İzleyin

    An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization,

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    17 Ağu 2026

  • CVE-2026-68005
    30İzleyin

    An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the h

    YüksekCVSS 7,5İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-70495
    35İzleyin

    Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat advanced cluster management for kubernetes 2.1117 Ağu 2026

  • CVE-2026-71472
    36İzleyin

    Acm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_mem

    KritikCVSS 9,1İstismar yokEPSS %0

    red hat · red hat advanced cluster management for kubernetes 2.1117 Ağu 2026

  • CVE-2026-71553
    28İzleyin

    ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS

    YüksekCVSS 7,1İstismar yokEPSS %0

    apostrophecms · apostrophe17 Ağu 2026

  • CVE-2025-27621
    30İzleyin

    UpTrain has a Constant Default API Key

    YüksekCVSS 7,7İstismar yokEPSS %0

    uptrain-ai · uptrain17 Ağu 2026

  • CVE-2025-27770
    29İzleyin

    UpTrain vulnerable to Remote code execution at `/create_project`

    YüksekCVSS 7,4İstismar yokEPSS %0

    uptrain-ai · uptrain17 Ağu 2026

  • CVE-2025-27771
    29İzleyin

    Uptrain vulnerable to remote code execution via `/add_prompts` endpoint

    YüksekCVSS 7,4İstismar yokEPSS %0

    uptrain-ai · uptrain17 Ağu 2026

  • CVE-2025-27772
    29İzleyin

    Uptrain vulnerable to remote code execution via `/new_run` endpoint

    YüksekCVSS 7,4İstismar yokEPSS %0

    uptrain-ai · uptrain17 Ağu 2026

  • CVE-2026-19589
    28İzleyin

    Packer vulnerable to arbitrary file write via crafted plugin archive during installation

    YüksekCVSS 7,1İstismar yokEPSS %0

    hashicorp · packer17 Ağu 2026

  • CVE-2026-34398
    31İzleyin

    FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench

    YüksekCVSS 7,8İstismar yokEPSS %0

    freecad · freecad17 Ağu 2026

  • CVE-2026-34399
    31İzleyin

    FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page

    YüksekCVSS 7,8İstismar yokEPSS %0

    freecad · freecad17 Ağu 2026

  • CVE-2026-34789
    28İzleyin

    FreeCAD: Arbitrary code execution via unsandboxed PyImport_ImportModule in PropertyPythonObject::Restore

    YüksekCVSS 7,0İstismar yokEPSS %0

    freecad · freecad17 Ağu 2026

  • CVE-2026-35219
    28İzleyin

    Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

    YüksekCVSS 7,1İstismar yokEPSS %0

    budibase · budibase17 Ağu 2026

  • CVE-2026-39254
    39İzleyin

    Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dy

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-39255
    39İzleyin

    Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dy

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-40506
    28İzleyin

    OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.php

    YüksekCVSS 7,0İstismar yokEPSS %0

    openemr · openemr17 Ağu 2026

  • CVE-2026-47683
    34İzleyin

    vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike

    YüksekCVSS 8,7İstismar yokEPSS %0

    patriksimek · vm217 Ağu 2026

  • CVE-2026-47686
    39İzleyin

    vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCE

    KritikCVSS 9,9İstismar yokEPSS %0

    patriksimek · vm217 Ağu 2026

  • CVE-2026-47698
    39İzleyin

    vm2: Sandbox Breakout Using Dangerous Host Proto Mutators

    KritikCVSS 9,8İstismar yokEPSS %0

    patriksimek · vm217 Ağu 2026

  • CVE-2026-54356
    28İzleyin

    Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    budibase · budibase17 Ağu 2026

  • CVE-2026-63409
    32İzleyin

    Deskflow: Odd-length DSOP options vector causes out-of-bounds read in Deskflow client

    YüksekCVSS 8,2İstismar yokEPSS %0

    deskflow · deskflow17 Ağu 2026

  • CVE-2026-64657
    33İzleyin

    Budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL

    YüksekCVSS 8,4İstismar yokEPSS %0

    budibase · budibase17 Ağu 2026

  • CVE-2026-65640
    36İzleyin

    WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher.

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    wordpress · wordpress17 Ağu 2026

  • CVE-2026-65822
    30İzleyin

    ERPNext: SQL Injection in "Inactive Customers" report via unvalidated `doctype` filter

    YüksekCVSS 7,6İstismar yokEPSS %0

    frappe · erpnext17 Ağu 2026

  • CVE-2026-65832
    32İzleyin

    Deskflow - Unauthenticated server-controlled out-of-bounds read in ServerProxy::setOptions / translateKey modifier-table indexing

    YüksekCVSS 8,2İstismar yokEPSS %0

    deskflow · deskflow17 Ağu 2026

  • CVE-2026-65974
    39İzleyin

    ERPNext: Server-Side Template Injection leading to Remote Code Execution

    KritikCVSS 9,9İstismar yokEPSS %1

    frappe · erpnext17 Ağu 2026

  • CVE-2026-67917
    39İzleyin

    zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality.

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-67926
    39İzleyin

    An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-67965
    39İzleyin

    An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login function

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-67966
    39İzleyin

    Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root sh

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-67967
    39İzleyin

    Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code.

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-71518
    34İzleyin

    Typemill < 2.26.0 Authorization Bypass via Media File Download Route

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    typemill · typemill17 Ağu 2026

  • CVE-2026-73410
    34İzleyin

    Budibase: SSRF via DNS rebinding in the REST datasource integration

    YüksekCVSS 8,5İstismar yokEPSS %0

    budibase · budibase17 Ağu 2026

  • CVE-2026-75103
    34İzleyin

    Crawlab Missing Authorization on Password Change Endpoint Allows Account Takeover

    YüksekCVSS 8,7İstismar yokEPSS %0

    crawlab-team · crawlab17 Ağu 2026

  • CVE-2026-75105
    34İzleyin

    phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter

    YüksekCVSS 8,7İstismar yokEPSS %0

    phpipam · phpipam17 Ağu 2026

  • CVE-2026-75109
    28İzleyin

    Determined Missing Authorization Check on Generic Task Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    determined-ai · determined17 Ağu 2026

  • CVE-2026-75110
    37İzleyin

    MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET

    KritikCVSS 9,3İstismar yokEPSS %0

    memtensor · memos17 Ağu 2026

  • CVE-2026-75111
    34İzleyin

    Evidently UI Path Traversal via Dataset Materialization Filename

    YüksekCVSS 8,7İstismar yokEPSS %0

    evidentlyai · evidently17 Ağu 2026

  • CVE-2026-75479
    34İzleyin

    JimuReport Unauthenticated Report Listing and Share Token Disclosure

    YüksekCVSS 8,7İstismar yokEPSS %0

    jeecgboot · jimureport17 Ağu 2026

  • CVE-2026-75480
    28İzleyin

    OpenViking Debug Vector Endpoints Multi-tenant Data Exposure

    YüksekCVSS 7,1İstismar yokEPSS %0

    volcengine · openviking17 Ağu 2026

  • CVE-2026-75481
    34İzleyin

    SkyPilot Authentication Bypass via Service Account Role Escalation

    YüksekCVSS 8,7İstismar yokEPSS %0

    skypilot-org · skypilot17 Ağu 2026

  • CVE-2026-75482
    34İzleyin

    SWE-agent Trajectory Inspector Path Traversal File Disclosure

    YüksekCVSS 8,7İstismar yokEPSS %0

    swe-agent · swe-agent17 Ağu 2026

  • CVE-2026-75531
    28İzleyin

    Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora

    YüksekCVSS 7,0İstismar yokEPSS %0

    pandora-analysis · pandora17 Ağu 2026

  • GHSA-fhgh-wq4q-r37x
    31İzleyin

    uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set

    YüksekCVSS 7,8İstismar yok

    Go · gitlab.com/uniget-org/cli17 Ağu 2026

  • CVE-2026-42163
    39İzleyin

    Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-43794
    35İzleyin

    A memory corruption issue was addressed with improved memory handling.

    YüksekCVSS 8,8İstismar yokEPSS %0

    apple · safari17 Ağu 2026

  • CVE-2026-45790
    32İzleyin

    Dokploy: Invitation Role Escalation Allows Organization Takeover

    YüksekCVSS 8,0İstismar yokEPSS %0

    dokploy · dokploy17 Ağu 2026

  • CVE-2026-51977
    36İzleyin

    An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privilege

    KritikCVSS 9,1İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-56677
    34İzleyin

    9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint

    YüksekCVSS 8,6İstismar yokEPSS %0

    decolua · 9router17 Ağu 2026

  • CVE-2026-64788
    21İzleyin

    The issue was addressed with improved memory handling.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    apple · ipados17 Ağu 2026

  • CVE-2026-65330
    26İzleyin

    The issue was addressed with improved memory handling.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    apple · ipados17 Ağu 2026

  • CVE-2026-65343
    30İzleyin

    A use after free issue was addressed with improved memory management.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    apple · ipados17 Ağu 2026

  • CVE-2026-65346
    35İzleyin

    An integer overflow was addressed with improved input validation.

    YüksekCVSS 8,8İstismar yokEPSS %0

    apple · ipados17 Ağu 2026

  • CVE-2026-65349
    26İzleyin

    An out-of-bounds read was addressed with improved input validation.

    OrtaCVSS 6,6Kavram kanıtıEPSS %0

    apple · ipados17 Ağu 2026

  • CVE-2026-65351
    17İzleyin

    This issue was addressed through improved state management.

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    apple · safari17 Ağu 2026

  • CVE-2026-67854
    39İzleyin

    SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-67868
    39İzleyin

    A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems process

    KritikCVSS 9,8İstismar yokEPSS %1

    17 Ağu 2026

  • CVE-2026-67918
    30İzleyin

    Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath fu

    YüksekCVSS 7,5İstismar yokEPSS %1

    17 Ağu 2026

  • CVE-2026-67960
    39İzleyin

    An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentControll

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-69148
    28İzleyin

    MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

    YüksekCVSS 7,1İstismar yokEPSS %0

    mlflow · mlflow17 Ağu 2026

  • CVE-2026-71424
    38İzleyin

    Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers

    KritikCVSS 9,6İstismar yokEPSS %0

    onyx-dot-app · onyx17 Ağu 2026

  • CVE-2026-9816
    33İzleyin

    Insufficient server-side validation of board member role fields permits privilege escalation

    YüksekCVSS 8,3İstismar yokEPSS %0

    mattermost · mattermost server17 Ağu 2026

  • CVE-2026-66792
    39İzleyin

    Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters

    KritikCVSS 9,9İstismar yokEPSS %0

    red hat · multicluster global hub 1.4.917 Ağu 2026

  • CVE-2026-38165
    39İzleyin

    A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows at

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    17 Ağu 2026

  • CVE-2026-42162
    36İzleyin

    Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an

    KritikCVSS 9,1İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-42164
    39İzleyin

    Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-67919
    39İzleyin

    An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPl

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    17 Ağu 2026

  • CVE-2026-67961
    31İzleyin

    An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.

    YüksekCVSS 7,8İstismar yokEPSS %0

    17 Ağu 2026

  • CVE-2026-66795
    39İzleyin

    Managedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke→hub cluster-admin)

    KritikCVSS 9,9İstismar yokEPSS %0

    red hat · multicluster engine for kubernetes 2.117 Ağu 2026

  • CVE-2026-75106
    37İzleyin

    OpnForm Editable Submission Secret Derivation via Empty Hashids Salt

    KritikCVSS 9,3İstismar yokEPSS %0

    opnform · opnform17 Ağu 2026

  • CVE-2026-64849
    70Bu hafta

    MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %9

    lfprojects · mlflow17 Ağu 2026

  • CVE-2026-75094
    35İzleyin

    COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection

    YüksekCVSS 8,5İstismar yokEPSS %3

    comfast · cf-n1-s17 Ağu 2026

  • CVE-2026-11801
    30İzleyin

    WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    gwin · wpadverts – classifieds plugin17 Ağu 2026

  • CVE-2026-15748
    41Planlayın

    Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    wpmudev · forminator forms – contact form, payment form & custom form builder18 Ağu 2026

  • CVE-2026-75091
    28İzleyin

    Quill Forms <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting

    YüksekCVSS 7,2İstismar yokEPSS %0

    mdmag · quill forms | conversational multi step forms, surveys & quizzes18 Ağu 2026

  • CVE-2026-15371
    32İzleyin

    Velociraptor Stored XSS in URL column types

    YüksekCVSS 8,1İstismar yokEPSS %0

    rapid7 · velociraptor18 Ağu 2026

  • CVE-2026-34884
    39İzleyin

    Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server

    KritikCVSS 9,8İstismar yokEPSS %0

    apache · skywalking mcp18 Ağu 2026

  • CVE-2026-75626
    37İzleyin

    SpiderFoot Stored Cross-Site Scripting via Correlation Titles

    KritikCVSS 9,3İstismar yokEPSS %0

    smicallef · spiderfoot18 Ağu 2026

  • CVE-2026-75627
    37İzleyin

    Bastillion Authentication Bypass via Path-Prefix Routing Mismatch

    KritikCVSS 9,3İstismar yokEPSS %0

    bastillion-io · bastillion18 Ağu 2026

  • CVE-2026-15585
    30İzleyin

    Path Traversal in AKIN Software's Wolvox9 ERP

    YüksekCVSS 7,5İstismar yokEPSS %0

    akin software computer import export industry and trade ltd. · akinsoft wolvox9 erp / kontrolpanel.exe18 Ağu 2026

  • CVE-2026-74904
    34İzleyin

    SiYuan before v3.7.4 Missing Authorization via block API

    YüksekCVSS 8,7İstismar yokEPSS %0

    siyuan-note · siyuan18 Ağu 2026

  • CVE-2026-74906
    34İzleyin

    SiYuan before v3.7.4 Incorrect Authorization via Publish Access

    YüksekCVSS 8,7İstismar yokEPSS %0

    siyuan-note · siyuan18 Ağu 2026

  • CVE-2026-75829
    34İzleyin

    grav-plugin-api before 1.0.15 Twig SSTI via translate endpoint

    YüksekCVSS 8,6İstismar yokEPSS %0

    getgrav · grav18 Ağu 2026

  • CVE-2026-75830
    28İzleyin

    grav-plugin-api before 1.0.15 Path Traversal via batchCopy

    YüksekCVSS 7,1İstismar yokEPSS %0

    getgrav · grav18 Ağu 2026

  • CVE-2026-75832
    37İzleyin

    Grav API Plugin before 1.0.14 Authorization Bypass

    KritikCVSS 9,3İstismar yokEPSS %0

    getgrav · grav18 Ağu 2026

  • CVE-2026-75833
    34İzleyin

    Grav API Plugin Open Redirect via Backslash Bypass

    YüksekCVSS 8,6İstismar yokEPSS %0

    getgrav · grav18 Ağu 2026

  • CVE-2026-75835
    37İzleyin

    Grav API Plugin before 1.0.14 Missing Authorization

    KritikCVSS 9,3İstismar yokEPSS %0

    getgrav · grav18 Ağu 2026

  • CVE-2026-75836
    34İzleyin

    Grav API Plugin before 1.0.14 Missing Authorization

    YüksekCVSS 8,7İstismar yokEPSS %0

    getgrav · grav18 Ağu 2026