İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 4 / 73

  • CVE-2026-6837
    28İzleyin

    A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    zyxel · wax650s firmware3 Ağu 2026

  • CVE-2026-8508
    26İzleyin

    An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 cou

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    zyxel · wax650s firmware3 Ağu 2026

  • CVE-2026-14818
    28İzleyin

    A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 throu

    YüksekCVSS 7,2İstismar yokEPSS %0

    zyxel · atp series firmware4 Ağu 2026

  • CVE-2026-16881
    34İzleyin

    A code injection vulnerability exists in the LINE Android app prior to version 26.7.2.

    YüksekCVSS 8,7İstismar yokEPSS %0

    ly corporation · line client for android4 Ağu 2026

  • CVE-2026-15958
    37İzleyin

    Easy Dropbox Integration < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX

    KritikCVSS 9,3İstismar yokEPSS %0

    unknown · easy integration for dropbox4 Ağu 2026

  • CVE-2026-16618
    39İzleyin

    ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · improve seo4 Ağu 2026

  • CVE-2026-16623
    32İzleyin

    Create Block Theme < 2.10.0 - Admin+ PHP Code Injection via Pattern Save (Multisite)

    YüksekCVSS 8,0İstismar yokEPSS %0

    unknown · create block theme4 Ağu 2026

  • CVE-2026-42169
    31İzleyin

    Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)

    YüksekCVSS 7,8İstismar yokEPSS %0

    redhat · enterprise linux4 Ağu 2026

  • CVE-2026-18753
    36İzleyin

    Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-ASManager)

    KritikCVSS 9,1İstismar yokEPSS %0

    geovision inc. · gv-as1620 (as-manager)4 Ağu 2026

  • CVE-2026-18754
    36İzleyin

    Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-Cloud)

    KritikCVSS 9,1İstismar yokEPSS %0

    geovision inc. · gv-as1620 (gv-cloud)4 Ağu 2026

  • CVE-2026-18755
    29İzleyin

    GV-ASManager DLL hijacking vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    geovision inc. · gv-asmanager4 Ağu 2026

  • CVE-2026-18759
    34İzleyin

    An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.

    YüksekCVSS 8,5İstismar yokEPSS %0

    asustor inc. · abp4 Ağu 2026

  • CVE-2026-67243
    34İzleyin

    freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability.

    YüksekCVSS 8,6İstismar yokEPSS %0

    refirio · freo24 Ağu 2026

  • CVE-2026-14175
    39İzleyin

    Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources

    KritikCVSS 9,8İstismar yokEPSS %0

    bilin software and informatics consultancy inc. · humanist digital human resources4 Ağu 2026

  • CVE-2026-14804
    36İzleyin

    Hardcoded Cryptographic Key in Bilin Software's HUMANIST Digital Human Resources

    KritikCVSS 9,1İstismar yokEPSS %0

    bilin software and informatics consultancy inc. · humanist digital human resources4 Ağu 2026

  • CVE-2026-14838
    29İzleyin

    Session Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human Resources

    YüksekCVSS 7,4İstismar yokEPSS %0

    bilin software and informatics consultancy inc. · humanist digital human resources4 Ağu 2026

  • CVE-2026-15721
    39İzleyin

    Query Console SQL Injection Leading to Sensitive Data Disclosure in Bilin Software's HUMANIST Digital Human Resources

    KritikCVSS 9,8İstismar yokEPSS %0

    bilin software and informatics consultancy inc. · humanist digital human resources4 Ağu 2026

  • CVE-2026-64561
    35İzleyin

    KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    linux · linux4 Ağu 2026

  • CVE-2026-64562
    35İzleyin

    KVM: nVMX: Hide shadow VMCS right after VMCLEAR

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux4 Ağu 2026

  • CVE-2026-64563
    31İzleyin

    rhashtable: clear stale iter->p on table restart

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux4 Ağu 2026

  • CVE-2026-64564
    39İzleyin

    sctp: don't free the ASCONF's own transport in DEL-IP processing

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    linux · linux4 Ağu 2026

  • CVE-2026-10050
    34İzleyin

    Digest authentication lossy encoding

    YüksekCVSS 8,7İstismar yokEPSS %0

    eclipse · jetty4 Ağu 2026

  • CVE-2026-10709
    31İzleyin

    FBX BinaryReadSectionHeader Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK

    YüksekCVSS 7,8İstismar yokEPSS %0

    autodesk · fbx software development kit4 Ağu 2026

  • CVE-2026-10710
    31İzleyin

    FBX ExtractDrive Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK

    YüksekCVSS 7,8İstismar yokEPSS %0

    autodesk · fbx software development kit4 Ağu 2026

  • CVE-2026-18806
    28İzleyin

    Arbitrary Block Device Write via Missing Validation in TÜBİTAK BİLGEM's pardus-image-writer

    YüksekCVSS 7,1İstismar yokEPSS %0

    tübi̇tak bi̇lgem software technologies research institute · pardus-image-writer4 Ağu 2026

  • CVE-2026-58080
    35İzleyin

    In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`.

    YüksekCVSS 8,8İstismar yokEPSS %0

    eclipse · milo4 Ağu 2026

  • CVE-2026-60007
    36İzleyin

    In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding a

    KritikCVSS 9,1İstismar yokEPSS %0

    eclipse · milo4 Ağu 2026

  • CVE-2026-62927
    34İzleyin

    In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculati

    YüksekCVSS 8,7İstismar yokEPSS %0

    eclipse · milo4 Ağu 2026

  • CVE-2026-63252
    34İzleyin

    In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel

    YüksekCVSS 8,7İstismar yokEPSS %0

    eclipse · milo4 Ağu 2026

  • CVE-2026-70369
    35İzleyin

    Koha - SQL Injection in reports/acquisitions_stats.pl

    YüksekCVSS 8,8İstismar yokEPSS %0

    koha community · koha4 Ağu 2026

  • CVE-2026-70370
    35İzleyin

    Koha - SQL Injection in reports/catalogue_stats.pl

    YüksekCVSS 8,8İstismar yokEPSS %0

    koha community · koha4 Ağu 2026

  • CVE-2026-70371
    35İzleyin

    Koha - SQL Injection in reports/issues_avg_stats.pl

    YüksekCVSS 8,8İstismar yokEPSS %0

    koha community · koha4 Ağu 2026

  • CVE-2026-70372
    35İzleyin

    Koha - SQL Injection in reports/bor_issues_top.pl

    YüksekCVSS 8,8İstismar yokEPSS %0

    koha community · koha4 Ağu 2026

  • CVE-2026-70373
    35İzleyin

    Koha - SQL Injection in reports/issues_stats.pl

    YüksekCVSS 8,8İstismar yokEPSS %0

    koha community · koha4 Ağu 2026

  • CVE-2026-17070
    35İzleyin

    Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS

    YüksekCVSS 8,8İstismar yokEPSS %0

    havelsan inc. · liman mys4 Ağu 2026

  • CVE-2026-18650
    35İzleyin

    Missing Authorization Leading to Root Code Execution in HAVELSAN's Liman MYS

    YüksekCVSS 8,8İstismar yokEPSS %0

    havelsan inc. · liman mys4 Ağu 2026

  • CVE-2026-61514
    37İzleyin

    Puwell IP Camera 2.x - 4.x Unauthenticated Access via TCP Port 23456

    KritikCVSS 9,3İstismar yokEPSS %0

    puwell technology inc. · ip camera4 Ağu 2026

  • CVE-2026-61515
    38İzleyin

    Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell

    KritikCVSS 9,3İstismar yokEPSS %2

    puwell technology inc. · ip camera4 Ağu 2026

  • CVE-2026-67195
    34İzleyin

    Perspective 5.0.0 RCE via eval() Expression Injection

    YüksekCVSS 8,7İstismar yokEPSS %1

    perspective-dev · perspective4 Ağu 2026

  • CVE-2026-67198
    34İzleyin

    Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcher

    YüksekCVSS 8,7İstismar yokEPSS %0

    perspective-dev · perspective4 Ağu 2026

  • CVE-2026-67199
    28İzleyin

    Perspective 5.0.0 DoS via Loop Expression Evaluation

    YüksekCVSS 7,1İstismar yokEPSS %0

    perspective-dev · perspective4 Ağu 2026

  • CVE-2026-67200
    34İzleyin

    Perspective 5.0.0 Path Traversal via cwd_static_file_handler

    YüksekCVSS 8,7İstismar yokEPSS %0

    perspective-dev · perspective4 Ağu 2026

  • CVE-2026-67618
    28İzleyin

    marimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata

    YüksekCVSS 7,1İstismar yokEPSS %0

    marimo-team · marimo4 Ağu 2026

  • CVE-2026-68494
    34İzleyin

    jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)

    YüksekCVSS 8,7İstismar yokEPSS %0

    fasterxml · jackson-core4 Ağu 2026

  • CVE-2026-69250
    34İzleyin

    Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration

    YüksekCVSS 8,5İstismar yokEPSS %0

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-69251
    37İzleyin

    Flowise RCE via TypeORM DataSource

    KritikCVSS 9,0Kavram kanıtıEPSS %2

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-18801
    37İzleyin

    Stored Clickhouse SQL Injection Through Customer Usage Attribution

    KritikCVSS 9,3İstismar yokEPSS %0

    openmeter · openmeter4 Ağu 2026

  • CVE-2026-21366
    31İzleyin

    Integer Overflow or Wraparound in Data Network Stack & Connectivity

    YüksekCVSS 7,8İstismar yokEPSS %0

    qualcomm · lemans au lgit firmware4 Ağu 2026

  • CVE-2026-24079
    32İzleyin

    Missing Authentication for Critical Function in Data Modem

    YüksekCVSS 8,1İstismar yokEPSS %0

    qualcomm · ar8035 firmware4 Ağu 2026

  • CVE-2026-24080
    31İzleyin

    Buffer Copy Without Checking Size of Input in Biometrics

    YüksekCVSS 7,8İstismar yokEPSS %0

    qualcomm · qam8295p firmware4 Ağu 2026

  • CVE-2026-24083
    31İzleyin

    Untrusted Pointer Dereference in Automotive Security

    YüksekCVSS 7,8İstismar yokEPSS %0

    qualcomm · qam8295p firmware4 Ağu 2026

  • CVE-2026-24084
    30İzleyin

    Insecure Security Identifier Mechanism in Multi-Mode Call Processor

    YüksekCVSS 7,5İstismar yokEPSS %0

    qualcomm · sdx57m firmware4 Ağu 2026

  • CVE-2026-25288
    29İzleyin

    Buffer Over-read in WLAN Firmware

    YüksekCVSS 7,4İstismar yokEPSS %0

    qualcomm · orne firmware4 Ağu 2026

  • CVE-2026-25289
    38İzleyin

    Stack-based Buffer Overflow in WLAN Firmware

    KritikCVSS 9,6İstismar yokEPSS %0

    qualcomm · sm7550p firmware4 Ağu 2026

  • CVE-2026-25292
    30İzleyin

    Improper Validation of Syntactic Correctness of Input in Automotive Linux OS

    YüksekCVSS 7,6İstismar yokEPSS %0

    qualcomm · sm6225p firmware4 Ağu 2026

  • CVE-2026-69098
    37İzleyin

    kotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure Deserialization

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    cinnamon · kotaemon4 Ağu 2026

  • CVE-2026-69100
    34İzleyin

    LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Execution

    YüksekCVSS 8,7İstismar yokEPSS %1

    dromara · lamp-cloud4 Ağu 2026

  • CVE-2026-69110
    37İzleyin

    OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music

    KritikCVSS 9,3İstismar yokEPSS %0

    microck · opencode-studio4 Ağu 2026

  • CVE-2026-69252
    28İzleyin

    Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization

    YüksekCVSS 7,2İstismar yokEPSS %0

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-69253
    36İzleyin

    Flowise Sandbox Escape to RCE

    KritikCVSS 9,0İstismar yokEPSS %0

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-69254
    37İzleyin

    Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

    KritikCVSS 9,4İstismar yokEPSS %0

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-15307
    34İzleyin

    Server-side file-write and request forgery via spatial lookups

    YüksekCVSS 8,7İstismar yokEPSS %1

    djangoproject · django4 Ağu 2026

  • CVE-2026-15314
    28İzleyin

    Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110

    YüksekCVSS 7,1İstismar yokEPSS %0

    tp-link · tapo p110 firmware4 Ağu 2026

  • CVE-2026-18787
    30İzleyin

    GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection

    YüksekCVSS 7,4İstismar yokEPSS %3

    gl.inet · ax18004 Ağu 2026

  • CVE-2026-48121
    26İzleyin

    @langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access

    OrtaCVSS 6,7Kavram kanıtıEPSS %0

    langchain-ai · langgraphjs4 Ağu 2026

  • CVE-2026-56848
    30İzleyin

    A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_mem_recv()` is execut

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    nodejs · node4 Ağu 2026

  • CVE-2026-58067
    34İzleyin

    A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service.

    YüksekCVSS 8,7İstismar yokEPSS %0

    veeam · service provider console4 Ağu 2026

  • CVE-2026-58071
    32İzleyin

    A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administ

    YüksekCVSS 8,2İstismar yokEPSS %0

    veeam · service provider console4 Ağu 2026

  • CVE-2026-58072
    36İzleyin

    A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execu

    KritikCVSS 9,0İstismar yokEPSS %0

    veeam · service provider console4 Ağu 2026

  • CVE-2026-58073
    38İzleyin

    A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's

    KritikCVSS 9,5Kavram kanıtıEPSS %0

    veeam · service provider console4 Ağu 2026

  • CVE-2026-58074
    34İzleyin

    A vulnerability allowing a high-privileged user to execute arbitrary code on the server.

    YüksekCVSS 8,6İstismar yokEPSS %0

    veeam · one4 Ağu 2026

  • CVE-2026-58075
    34İzleyin

    A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privil

    YüksekCVSS 8,7İstismar yokEPSS %0

    veeam · one4 Ağu 2026

  • CVE-2026-63455
    39İzleyin

    Authentication bypass via spoofed HTTP headers Orchestrator REST API

    KritikCVSS 9,8İstismar yokEPSS %0

    hewlett packard enterprise (hpe) · edgeconnect sd-wan orchestrator4 Ağu 2026

  • CVE-2026-63456
    39İzleyin

    Authentication bypass via spoofed HTTP headers Orchestrator REST API

    KritikCVSS 9,8İstismar yokEPSS %0

    hewlett packard enterprise (hpe) · edgeconnect sd-wan orchestrator4 Ağu 2026

  • CVE-2026-64631
    34İzleyin

    A vulnerability allowing a low-privileged user to inject SQL and extract database contents.

    YüksekCVSS 8,6İstismar yokEPSS %0

    veeam · one4 Ağu 2026

  • CVE-2026-64633
    40Planlayın

    A vulnerability allowing remote unauthenticated code execution on the agent host.

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    veeam · one4 Ağu 2026

  • CVE-2026-64634
    33İzleyin

    A vulnerability allowing local privilege escalation to the Reporter service context.

    YüksekCVSS 8,4İstismar yokEPSS %0

    veeam · one4 Ağu 2026

  • CVE-2026-69255
    36İzleyin

    Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified

    KritikCVSS 9,2İstismar yokEPSS %0

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-69256
    37İzleyin

    Flowise: Remote Code Execution Vulnerability in CSVAgent

    KritikCVSS 9,4İstismar yokEPSS %1

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-69257
    30İzleyin

    Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses

    YüksekCVSS 7,6İstismar yokEPSS %0

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-69258
    35İzleyin

    Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API

    YüksekCVSS 8,8İstismar yokEPSS %0

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-69259
    37İzleyin

    Flowise RCE via SQLite Record Manager Node

    KritikCVSS 9,4İstismar yokEPSS %0

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-69262
    28İzleyin

    Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type

    YüksekCVSS 7,1İstismar yokEPSS %0

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-69263
    34İzleyin

    Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-24253
    32İzleyin

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write.

    YüksekCVSS 8,2İstismar yokEPSS %0

    nvidia · dynamo4 Ağu 2026

  • CVE-2026-24254
    39İzleyin

    NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write.

    KritikCVSS 9,8İstismar yokEPSS %0

    nvidia · dynamo4 Ağu 2026

  • CVE-2026-24255
    30İzleyin

    NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submit

    YüksekCVSS 7,5İstismar yokEPSS %0

    nvidia · dynamo4 Ağu 2026

  • CVE-2026-47487
    28İzleyin

    NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, wr

    YüksekCVSS 7,1İstismar yokEPSS %0

    nvidia · triton inference server4 Ağu 2026

  • CVE-2026-47612
    30İzleyin

    NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathnam

    YüksekCVSS 7,5İstismar yokEPSS %0

    nvidia · dynamo4 Ağu 2026

  • CVE-2026-47613
    30İzleyin

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause improper limitation of a pathname to a restricted directory by

    YüksekCVSS 7,5İstismar yokEPSS %0

    nvidia · dynamo4 Ağu 2026

  • CVE-2026-47614
    30İzleyin

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery.

    YüksekCVSS 7,5İstismar yokEPSS %0

    nvidia · dynamo4 Ağu 2026

  • CVE-2026-47615
    30İzleyin

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a mul

    YüksekCVSS 7,5İstismar yokEPSS %0

    nvidia · dynamo4 Ağu 2026

  • CVE-2026-47616
    30İzleyin

    NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery.

    YüksekCVSS 7,5İstismar yokEPSS %0

    nvidia · dynamo4 Ağu 2026

  • CVE-2026-47617
    30İzleyin

    NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via

    YüksekCVSS 7,5İstismar yokEPSS %0

    nvidia · dynamo4 Ağu 2026

  • CVE-2026-47618
    30İzleyin

    NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forg

    YüksekCVSS 7,5İstismar yokEPSS %0

    nvidia · dynamo4 Ağu 2026

  • CVE-2026-47619
    32İzleyin

    NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure.

    YüksekCVSS 8,1İstismar yokEPSS %0

    nvidia · dynamo4 Ağu 2026

  • CVE-2026-47623
    32İzleyin

    NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data.

    YüksekCVSS 8,2İstismar yokEPSS %0

    nvidia · dynamo4 Ağu 2026

  • CVE-2026-69264
    37İzleyin

    Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation

    KritikCVSS 9,4İstismar yokEPSS %1

    flowiseai · flowise4 Ağu 2026

  • CVE-2026-70470
    38İzleyin

    Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE

    KritikCVSS 9,5İstismar yokEPSS %0

    flowiseai · flowise4 Ağu 2026

  • CVE-2017-20241
    37İzleyin

    Keysight IxChariot Endpoint heap-based buffer overflow

    KritikCVSS 9,3İstismar yokEPSS %1

    keysight · ixchariot4 Ağu 2026