Yayın tarihine göre
Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları
7.294 kayıt · 20 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 48 / 73
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
29İzleyin | CVE-2026-52834İstismar yok | jxl-oxide: Out-of-bounds writes due to integer overflow in jxl-grid on 32-bit platformstirr-c · jxl-oxide · CWE-122 | Yüksek7,3 | — | %0,1 | 19 Ağu 2026 |
39İzleyin | CVE-2026-52889İstismar yok | Formie: Server-Side Template Injection in Formie Hidden field defaultsverbb · formie · CWE-1336 | Kritik9,8 | — | %1,2 | 19 Ağu 2026 |
39İzleyin | CVE-2026-53451İstismar yok | Ground Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code executionsgoudelis · ground-station · CWE-22 | Kritik9,8 | — | %1,0 | 19 Ağu 2026 |
31İzleyin | CVE-2026-53477İstismar yok | Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.dell · command update · CWE-367 | Yüksek7,8 | — | %0,1 | 19 Ağu 2026 |
29İzleyin | CVE-2026-56797İstismar yok | Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.dell · command update · CWE-367 | Yüksek7,3 | — | %0,1 | 19 Ağu 2026 |
29İzleyin | CVE-2026-58562İstismar yok | Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.dell · command update · CWE-862 | Yüksek7,3 | — | %0,1 | 19 Ağu 2026 |
31İzleyin | CVE-2026-58564İstismar yok | Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability.dell · command update · CWE-276 | Yüksek7,8 | — | %0,1 | 19 Ağu 2026 |
35İzleyin | CVE-2026-58565İstismar yok | Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.dell · command update · CWE-862 | Yüksek8,8 | — | %0,1 | 19 Ağu 2026 |
35İzleyin | CVE-2026-71176İstismar yok | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Indell · openmanage enterprise · CWE-89 | Yüksek8,8 | — | %0,4 | 19 Ağu 2026 |
37İzleyin | CVE-2026-71960Kavram kanıtı | Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTTshenzhen cudy technology co., ltd. · wr3000 2.0 · CWE-798 | Kritik9,3 | — | %0,5 | 19 Ağu 2026 |
35İzleyin | CVE-2026-71961İstismar yok | Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handlershenzhen cudy technology co., ltd. · wr3000 2.0 · CWE-78 | Yüksek8,7 | — | %2,7 | 19 Ağu 2026 |
40Planlayın | CVE-2026-75949İstismar yok | Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3cmsjunkie.com · j-businessdirectory extension for joomla · CWE-434 | Kritik10,0 | — | %0,4 | 19 Ağu 2026 |
30İzleyin | CVE-2026-75953İstismar yok | Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3cmsjunkie.com · j-businessdirectory extension for joomla · CWE-201 | Yüksek7,5 | — | %0,4 | 19 Ağu 2026 |
37İzleyin | CVE-2026-75954İstismar yok | Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3cmsjunkie.com · j-businessdirectory extension for joomla · CWE-89 | Kritik9,3 | — | %0,3 | 19 Ağu 2026 |
34İzleyin | CVE-2026-75956İstismar yok | Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3cmsjunkie.com · j-businessdirectory extension for joomla · CWE-770 | Yüksek8,7 | — | %0,4 | 19 Ağu 2026 |
30İzleyin | CVE-2026-16819İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-367 | Yüksek7,7 | — | %0,1 | 19 Ağu 2026 |
28İzleyin | CVE-2026-18430İstismar yok | HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reasonhumhub · humhub · CWE-79 | Yüksek7,2 | — | %0,5 | 19 Ağu 2026 |
30İzleyin | CVE-2026-44252İstismar yok | Wazuh Manager dapi RBAC Bypass Allows Privilege Escalationwazuh · wazuh · CWE-863 | Yüksek7,7 | — | %0,5 | 19 Ağu 2026 |
30İzleyin | CVE-2026-46343İstismar yok | Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()wazuh · wazuh · CWE-22 | Yüksek7,5 | — | %0,4 | 19 Ağu 2026 |
35İzleyin | CVE-2026-62666İstismar yok | Grav API Plugin: non-super api.users.write manager -> super-admin via createApiKey (incomplete fix of CVE-2026-59190); + 2FA strip of supergetgrav · grav-plugin-api · CWE-639 | Yüksek8,8 | — | %0,6 | 19 Ağu 2026 |
32İzleyin | CVE-2026-62667İstismar yok | Grav API Plugin : API Key 'scopes' Never Enforced - Delegated Least-Privilege Keys Carry Full User ACLgetgrav · grav-plugin-api · CWE-862 | Yüksek8,1 | — | %0,4 | 19 Ağu 2026 |
37İzleyin | CVE-2026-62668İstismar yok | Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocolsgetgrav · grav · CWE-918 | Kritik9,4 | — | %0,4 | 19 Ağu 2026 |
29İzleyin | CVE-2026-62669İstismar yok | Grav Login Plugin: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challengegetgrav · grav · CWE-287 | Yüksek7,4 | — | %0,5 | 19 Ağu 2026 |
32İzleyin | CVE-2026-62673İstismar yok | Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystemsgetgrav · grav · CWE-178 | Yüksek8,2 | — | %0,5 | 19 Ağu 2026 |
32İzleyin | CVE-2026-63407İstismar yok | Grav API Plugin: CORS 'Access-Control-Allow-Origin: *' on Authenticated API Responsesgetgrav · grav-plugin-api · CWE-942 | Yüksek8,2 | — | %0,3 | 19 Ağu 2026 |
30İzleyin | CVE-2026-63408İstismar yok | Grav API Plugin: JWT Access Token Accepted via `?token=` URL Query Parametergetgrav · grav-plugin-api · CWE-598 | Yüksek7,5 | — | %0,4 | 19 Ağu 2026 |
34İzleyin | CVE-2026-64850İstismar yok | Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()getgrav · grav · CWE-94 | Yüksek8,7 | — | %0,4 | 19 Ağu 2026 |
34İzleyin | CVE-2026-64851İstismar yok | Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlersgetgrav · grav-plugin-shortcode-core · CWE-79 | Yüksek8,5 | — | %0,4 | 19 Ağu 2026 |
34İzleyin | CVE-2026-64852İstismar yok | Grav API Plugin: Missing authorization on API-key generate/revoke lets any admin.login user forge keys for any accountgetgrav · grav-plugin-api · CWE-862 | Yüksek8,7 | — | %0,4 | 19 Ağu 2026 |
74Bu hafta | CVE-2026-19490Silahlaştırılmış | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490citrix · netscaler application delivery controller · CWE-288 | Kritik9,3 | KEV | %23,1 | 19 Ağu 2026 |
40Planlayın | CVE-2026-67364İstismar yok | Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2balbooa.com · balbooa forms extension for joomla · CWE-94 | Kritik10,0 | — | %0,4 | 19 Ağu 2026 |
40Planlayın | CVE-2026-20030İstismar yok | Cisco Crosswork Security Hardening Release: August 2026cisco · cisco crosswork planning · CWE-89 | Kritik10,0 | — | %0,5 | 19 Ağu 2026 |
39İzleyin | CVE-2026-20231İstismar yok | Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilitiescisco · cisco secure workload · CWE-74 | Kritik9,9 | — | %0,5 | 19 Ağu 2026 |
40Planlayın | CVE-2026-20315İstismar yok | Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilitiescisco · cisco secure workload · CWE-284 | Kritik10,0 | — | %0,4 | 19 Ağu 2026 |
40Planlayın | CVE-2026-20317İstismar yok | Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilitiescisco · cisco secure workload · CWE-287 | Kritik10,0 | — | %0,5 | 19 Ağu 2026 |
38İzleyin | CVE-2026-20318İstismar yok | Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilitiescisco · cisco secure workload · CWE-20 | Kritik9,6 | — | %0,4 | 19 Ağu 2026 |
30İzleyin | CVE-2026-20319İstismar yok | Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilitiescisco · cisco secure workload · CWE-119 | Yüksek7,5 | — | %0,4 | 19 Ağu 2026 |
30İzleyin | CVE-2026-20320İstismar yok | A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read secisco · cisco broadworks · CWE-611 | Yüksek7,5 | — | %0,4 | 19 Ağu 2026 |
40Planlayın | CVE-2026-20357İstismar yok | Cisco Crosswork Security Hardening Release: August 2026cisco · cisco crosswork planning · CWE-306 | Kritik10,0 | — | %0,6 | 19 Ağu 2026 |
40Planlayın | CVE-2026-20358İstismar yok | Cisco Crosswork Security Hardening Release: August 2026cisco · cisco crosswork planning · CWE-73 | Kritik10,0 | — | %0,4 | 19 Ağu 2026 |
39İzleyin | CVE-2026-20359İstismar yok | Cisco Crosswork Security Hardening Release: August 2026cisco · cisco crosswork planning · CWE-522 | Kritik9,9 | — | %0,4 | 19 Ağu 2026 |
32İzleyin | CVE-2026-41424İstismar yok | Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpointwazuh · wazuh · CWE-863 | Yüksek8,2 | — | %0,4 | 19 Ağu 2026 |
33İzleyin | CVE-2026-44901İstismar yok | Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerabilitywazuh · wazuh · CWE-502 | Yüksek8,4 | — | %0,7 | 19 Ağu 2026 |
30İzleyin | CVE-2026-45798İstismar yok | Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: fieldwazuh · wazuh · CWE-121 | Yüksek7,5 | — | %0,9 | 19 Ağu 2026 |
36İzleyin | CVE-2026-48024İstismar yok | Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh managerwazuh · wazuh · CWE-22 | Kritik9,1 | — | %0,7 | 19 Ağu 2026 |
36İzleyin | CVE-2026-48162İstismar yok | Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh managerwazuh · wazuh · CWE-73 | Kritik9,1 | — | %0,6 | 19 Ağu 2026 |
36İzleyin | CVE-2026-49441İstismar yok | Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh managerwazuh · wazuh · CWE-73 | Kritik9,1 | — | %0,7 | 19 Ağu 2026 |
28İzleyin | CVE-2026-50173İstismar yok | Flow-Like: Azure invoke presign grants app content write SAS to ExecuteEvents-only usersrheosoph · flow-like · CWE-863 | Yüksek7,2 | — | %0,6 | 19 Ağu 2026 |
36İzleyin | CVE-2026-71470İstismar yok | Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating sared hat · red hat advanced cluster management for kubernetes 2.11 · CWE-913 | Kritik9,1 | — | %0,7 | 19 Ağu 2026 |
67Bu hafta | CVE-2026-72529Silahlaştırılmış | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X ttrueconf · trueconf server · CWE-306 | Kritik9,3 | KEV | %1,4 | 19 Ağu 2026 |
69Bu hafta | CVE-2026-72530Silahlaştırılmış | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X ttrueconf · trueconf server · CWE-94 | Kritik9,5 | KEV | %1,6 | 19 Ağu 2026 |
34İzleyin | CVE-2026-75141İstismar yok | FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxingffmpeg · ffmpeg · CWE-122 | Yüksek8,5 | — | %0,1 | 19 Ağu 2026 |
34İzleyin | CVE-2026-75142İstismar yok | FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.cffmpeg · ffmpeg · CWE-121 | Yüksek8,5 | — | %0,1 | 19 Ağu 2026 |
37İzleyin | CVE-2026-75143İstismar yok | FFmpeg Heap Buffer Overflow via RIST Protocol Readerffmpeg · ffmpeg · CWE-122 | Kritik9,3 | — | %0,7 | 19 Ağu 2026 |
34İzleyin | CVE-2026-75144İstismar yok | FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizerffmpeg · ffmpeg · CWE-122 | Yüksek8,5 | — | %0,1 | 19 Ağu 2026 |
28İzleyin | CVE-2026-75146İstismar yok | FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.cffmpeg · ffmpeg · CWE-125 | Yüksek7,2 | — | %0,2 | 19 Ağu 2026 |
28İzleyin | CVE-2026-17183İstismar yok | CVE-2026-17183 CVE Recordgrafana · grafana oss · CWE-863 | Yüksek7,1 | — | %0,3 | 19 Ağu 2026 |
32İzleyin | CVE-2026-19234İstismar yok | Power System Buffer Overflowibm · power system s1122 \(9824-22a\) firmware · CWE-121 | Yüksek8,2 | — | %0,1 | 19 Ağu 2026 |
30İzleyin | CVE-2026-19875İstismar yok | Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflowlangflow · langflow · CWE-306 | Yüksek7,5 | — | %0,5 | 19 Ağu 2026 |
37İzleyin | CVE-2026-32475Kavram kanıtı | WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerabilityelementor · elementor pro · CWE-434 | Kritik9,0 | — | %1,9 | 19 Ağu 2026 |
34İzleyin | CVE-2026-55191İstismar yok | FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocationfreerdp · freerdp · CWE-122 | Yüksek8,7 | — | %0,8 | 19 Ağu 2026 |
28İzleyin | CVE-2026-55192İstismar yok | FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatchfreerdp · freerdp · CWE-125 | Yüksek7,2 | — | %0,4 | 19 Ağu 2026 |
34İzleyin | CVE-2026-55194İstismar yok | FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatchfreerdp · freerdp · CWE-122 | Yüksek8,7 | — | %0,6 | 19 Ağu 2026 |
28İzleyin | CVE-2026-55564İstismar yok | FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragmentsfreerdp · freerdp · CWE-125 | Yüksek7,1 | — | %0,4 | 19 Ağu 2026 |
34İzleyin | CVE-2026-61518İstismar yok | ISPConfig Authenticated SQL Injection via Remote API primary_id Parameterispconfig · ispconfig3 · CWE-89 | Yüksek8,7 | — | %0,4 | 19 Ağu 2026 |
28İzleyin | CVE-2026-62680İstismar yok | Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $reforval-labs · orval · CWE-22 | Yüksek7,1 | — | %0,4 | 19 Ağu 2026 |
37İzleyin | CVE-2026-62681İstismar yok | Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)orval-labs · orval · CWE-94 | Kritik9,3 | — | %0,6 | 19 Ağu 2026 |
37İzleyin | CVE-2026-62682İstismar yok | Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)orval-labs · orval · CWE-94 | Kritik9,3 | — | %0,6 | 19 Ağu 2026 |
30İzleyin | CVE-2026-63633İstismar yok | FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→clientfreerdp · freerdp · CWE-122 | Yüksek7,7 | — | %0,6 | 19 Ağu 2026 |
28İzleyin | CVE-2026-63652İstismar yok | FreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDUfreerdp · freerdp · CWE-415 | Yüksek7,1 | — | %0,5 | 19 Ağu 2026 |
33İzleyin | CVE-2024-58376İstismar yok | Renovate 37.158.0 before 37.199.0 Command Injection via helmv3renovatebot · renovate · CWE-78 | Yüksek8,4 | — | %0,6 | 19 Ağu 2026 |
34İzleyin | CVE-2026-67581İstismar yok | On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replayzenhive · machine payments protocol · CWE-294 | Yüksek8,7 | — | %0,5 | 19 Ağu 2026 |
37İzleyin | CVE-2026-71864İstismar yok | Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod clientorval-labs · orval · CWE-94 | Kritik9,3 | — | %0,6 | 19 Ağu 2026 |
37İzleyin | CVE-2026-71865İstismar yok | Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cliorval-labs · orval · CWE-94 | Kritik9,3 | — | %0,6 | 19 Ağu 2026 |
37İzleyin | CVE-2026-71866İstismar yok | Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod clientorval-labs · orval · CWE-89 | Kritik9,3 | — | %0,6 | 19 Ağu 2026 |
37İzleyin | CVE-2026-71867İstismar yok | Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generatororval-labs · orval · CWE-89 | Kritik9,3 | — | %0,6 | 19 Ağu 2026 |
37İzleyin | CVE-2026-71868İstismar yok | Orval: Import-time RCE via enum-typed default -> zod module-level template literalorval-labs · orval · CWE-94 | Kritik9,3 | — | %0,6 | 19 Ağu 2026 |
37İzleyin | CVE-2026-71869İstismar yok | Orval: Import-time RCE via array-items default -> zod module-level template literalorval-labs · orval · CWE-94 | Kritik9,3 | — | %0,6 | 19 Ağu 2026 |
37İzleyin | CVE-2026-71871İstismar yok | Orval: Import-time RCE via header-parameter default -> zod module-level template literalorval-labs · orval · CWE-94 | Kritik9,3 | — | %0,6 | 19 Ağu 2026 |
37İzleyin | CVE-2026-72716İstismar yok | Orval: Import-time RCE via query-parameter default -> zod module-level template literalorval-labs · orval · CWE-1336 | Kritik9,3 | — | %0,6 | 19 Ağu 2026 |
37İzleyin | CVE-2026-72717İstismar yok | Orval: Import-time RCE via schema default -> zod module-level template literalorval-labs · orval · CWE-94 | Kritik9,3 | — | %0,6 | 19 Ağu 2026 |
32İzleyin | CVE-2026-73136İstismar yok | Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replayzenhive · machine payments protocol · CWE-294 | Yüksek8,2 | — | %0,5 | 19 Ağu 2026 |
33İzleyin | CVE-2026-73541İstismar yok | Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drainzenhive · machine payments protocol · CWE-770 | Yüksek8,3 | — | %0,5 | 19 Ağu 2026 |
34İzleyin | CVE-2026-75149İstismar yok | marimo < 0.23.15 Code Injection via MCP Server Configurationmarimo-team · marimo · CWE-94 | Yüksek8,7 | — | %0,9 | 19 Ağu 2026 |
31İzleyin | CVE-2026-43961İstismar yok | Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code executionvim · vim · CWE-94 | Yüksek7,8 | — | %0,2 | 19 Ağu 2026 |
37İzleyin | CVE-2026-75916İstismar yok | SiYuan XSS-to-RCE via unescaped block metadata in hint popupsiyuan-note · siyuan · CWE-79 | Kritik9,3 | — | %0,2 | 19 Ağu 2026 |
37İzleyin | CVE-2026-75917İstismar yok | SiYuan before v3.7.4 XSS-to-RCE via pathName.tssiyuan-note · siyuan · CWE-79 | Kritik9,3 | — | %0,2 | 19 Ağu 2026 |
35İzleyin | CVE-2026-76208İstismar yok | phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAPphpmyfaq · phpmyfaq · CWE-778 | Yüksek8,8 | — | %0,4 | 19 Ağu 2026 |
27İzleyin | CVE-2026-76226İstismar yok | Renovate 43.65.0 before 43.102.11 Remote Code Execution via lockFileMaintenancerenovatebot · renovate · CWE-78 | Orta6,8 | — | %0,2 | 19 Ağu 2026 |
33İzleyin | CVE-2026-76228İstismar yok | Renovate before 42.68.5 Remote Code Execution via Gradle Wrapperrenovatebot · renovate · CWE-78 | Yüksek8,4 | — | %0,9 | 19 Ağu 2026 |
38İzleyin | CVE-2026-16687İstismar yok | Power System Buffer Overflowibm · power system e1180 \(9080-heu\) firmware · CWE-121 | Kritik9,6 | — | %0,3 | 19 Ağu 2026 |
30İzleyin | CVE-2026-16828İstismar yok | Power System Out-of-bounds Readibm · power system e1080 \(9080-hex\) firmware · CWE-125 | Yüksek7,6 | — | %0,2 | 19 Ağu 2026 |
33İzleyin | CVE-2026-16832İstismar yok | Power System Buffer Overflowibm · power system e1080 \(9080-hex\) firmware · CWE-121 | Yüksek8,4 | — | %0,3 | 19 Ağu 2026 |
38İzleyin | CVE-2026-16835İstismar yok | Power System Improper Certificate Validationibm · power system e1080 \(9080-hex\) firmware · CWE-295 | Kritik9,6 | — | %0,3 | 19 Ağu 2026 |
32İzleyin | CVE-2026-16930İstismar yok | Power System Missing Authorizationibm · power system e1180 \(9080-heu\) firmware · CWE-862 | Yüksek8,2 | — | %0,1 | 19 Ağu 2026 |
32İzleyin | CVE-2026-17093İstismar yok | Power System Buffer Overflowibm · power system s1122 \(9824-22a\) firmware · CWE-121 | Yüksek8,2 | — | %0,1 | 19 Ağu 2026 |
32İzleyin | CVE-2026-17100İstismar yok | Power System Out-of-bounds Writeibm · power system s1122 \(9824-22a\) firmware · CWE-787 | Yüksek8,2 | — | %0,1 | 19 Ağu 2026 |
32İzleyin | CVE-2026-17429İstismar yok | Power System Incorrect Authorizationibm · power system s1122 \(9824-22a\) firmware · CWE-863 | Yüksek8,1 | — | %0,1 | 19 Ağu 2026 |
32İzleyin | CVE-2026-17494İstismar yok | Power System Buffer Overflowibm · power system s1122 \(9824-22a\) firmware · CWE-121 | Yüksek8,2 | — | %0,1 | 19 Ağu 2026 |
39İzleyin | CVE-2026-18315Kavram kanıtı | TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameterthemetechmount · truebooker – appointment booking and scheduler system · CWE-639 | Kritik9,8 | — | %0,5 | 19 Ağu 2026 |
- CVE-2026-5283429İzleyin
jxl-oxide: Out-of-bounds writes due to integer overflow in jxl-grid on 32-bit platforms
YüksekCVSS 7,3İstismar yokEPSS %0tirr-c · jxl-oxide19 Ağu 2026
- CVE-2026-5288939İzleyin
Formie: Server-Side Template Injection in Formie Hidden field defaults
KritikCVSS 9,8İstismar yokEPSS %1verbb · formie19 Ağu 2026
- CVE-2026-5345139İzleyin
Ground Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code execution
KritikCVSS 9,8İstismar yokEPSS %1sgoudelis · ground-station19 Ağu 2026
- CVE-2026-5347731İzleyin
Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
YüksekCVSS 7,8İstismar yokEPSS %0dell · command update19 Ağu 2026
- CVE-2026-5679729İzleyin
Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
YüksekCVSS 7,3İstismar yokEPSS %0dell · command update19 Ağu 2026
- CVE-2026-5856229İzleyin
Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.
YüksekCVSS 7,3İstismar yokEPSS %0dell · command update19 Ağu 2026
- CVE-2026-5856431İzleyin
Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability.
YüksekCVSS 7,8İstismar yokEPSS %0dell · command update19 Ağu 2026
- CVE-2026-5856535İzleyin
Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · command update19 Ağu 2026
- CVE-2026-7117635İzleyin
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In
YüksekCVSS 8,8İstismar yokEPSS %0dell · openmanage enterprise19 Ağu 2026
- CVE-2026-7196037İzleyin
Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass via MQTT
KritikCVSS 9,3Kavram kanıtıEPSS %0shenzhen cudy technology co., ltd. · wr3000 2.019 Ağu 2026
- CVE-2026-7196135İzleyin
Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handler
YüksekCVSS 8,7İstismar yokEPSS %2shenzhen cudy technology co., ltd. · wr3000 2.019 Ağu 2026
- CVE-2026-7594940Planlayın
Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3
KritikCVSS 10,0İstismar yokEPSS %0cmsjunkie.com · j-businessdirectory extension for joomla19 Ağu 2026
- CVE-2026-7595330İzleyin
Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3
YüksekCVSS 7,5İstismar yokEPSS %0cmsjunkie.com · j-businessdirectory extension for joomla19 Ağu 2026
- CVE-2026-7595437İzleyin
Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3
KritikCVSS 9,3İstismar yokEPSS %0cmsjunkie.com · j-businessdirectory extension for joomla19 Ağu 2026
- CVE-2026-7595634İzleyin
Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3
YüksekCVSS 8,7İstismar yokEPSS %0cmsjunkie.com · j-businessdirectory extension for joomla19 Ağu 2026
- CVE-2026-1681930İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 7,7İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1843028İzleyin
HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reason
YüksekCVSS 7,2İstismar yokEPSS %0humhub · humhub19 Ağu 2026
- CVE-2026-4425230İzleyin
Wazuh Manager dapi RBAC Bypass Allows Privilege Escalation
YüksekCVSS 7,7İstismar yokEPSS %0wazuh · wazuh19 Ağu 2026
- CVE-2026-4634330İzleyin
Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()
YüksekCVSS 7,5İstismar yokEPSS %0wazuh · wazuh19 Ağu 2026
- CVE-2026-6266635İzleyin
Grav API Plugin: non-super api.users.write manager -> super-admin via createApiKey (incomplete fix of CVE-2026-59190); + 2FA strip of super
YüksekCVSS 8,8İstismar yokEPSS %0getgrav · grav-plugin-api19 Ağu 2026
- CVE-2026-6266732İzleyin
Grav API Plugin : API Key 'scopes' Never Enforced - Delegated Least-Privilege Keys Carry Full User ACL
YüksekCVSS 8,1İstismar yokEPSS %0getgrav · grav-plugin-api19 Ağu 2026
- CVE-2026-6266837İzleyin
Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocols
KritikCVSS 9,4İstismar yokEPSS %0getgrav · grav19 Ağu 2026
- CVE-2026-6266929İzleyin
Grav Login Plugin: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge
YüksekCVSS 7,4İstismar yokEPSS %0getgrav · grav19 Ağu 2026
- CVE-2026-6267332İzleyin
Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems
YüksekCVSS 8,2İstismar yokEPSS %0getgrav · grav19 Ağu 2026
- CVE-2026-6340732İzleyin
Grav API Plugin: CORS 'Access-Control-Allow-Origin: *' on Authenticated API Responses
YüksekCVSS 8,2İstismar yokEPSS %0getgrav · grav-plugin-api19 Ağu 2026
- CVE-2026-6340830İzleyin
Grav API Plugin: JWT Access Token Accepted via `?token=` URL Query Parameter
YüksekCVSS 7,5İstismar yokEPSS %0getgrav · grav-plugin-api19 Ağu 2026
- CVE-2026-6485034İzleyin
Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()
YüksekCVSS 8,7İstismar yokEPSS %0getgrav · grav19 Ağu 2026
- CVE-2026-6485134İzleyin
Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers
YüksekCVSS 8,5İstismar yokEPSS %0getgrav · grav-plugin-shortcode-core19 Ağu 2026
- CVE-2026-6485234İzleyin
Grav API Plugin: Missing authorization on API-key generate/revoke lets any admin.login user forge keys for any account
YüksekCVSS 8,7İstismar yokEPSS %0getgrav · grav-plugin-api19 Ağu 2026
- CVE-2026-1949074Bu hafta
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %23citrix · netscaler application delivery controller19 Ağu 2026
- CVE-2026-6736440Planlayın
Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2
KritikCVSS 10,0İstismar yokEPSS %0balbooa.com · balbooa forms extension for joomla19 Ağu 2026
- CVE-2026-2003040Planlayın
Cisco Crosswork Security Hardening Release: August 2026
KritikCVSS 10,0İstismar yokEPSS %0cisco · cisco crosswork planning19 Ağu 2026
- CVE-2026-2023139İzleyin
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %0cisco · cisco secure workload19 Ağu 2026
- CVE-2026-2031540Planlayın
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities
KritikCVSS 10,0İstismar yokEPSS %0cisco · cisco secure workload19 Ağu 2026
- CVE-2026-2031740Planlayın
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities
KritikCVSS 10,0İstismar yokEPSS %0cisco · cisco secure workload19 Ağu 2026
- CVE-2026-2031838İzleyin
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities
KritikCVSS 9,6İstismar yokEPSS %0cisco · cisco secure workload19 Ağu 2026
- CVE-2026-2031930İzleyin
Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilities
YüksekCVSS 7,5İstismar yokEPSS %0cisco · cisco secure workload19 Ağu 2026
- CVE-2026-2032030İzleyin
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read se
YüksekCVSS 7,5İstismar yokEPSS %0cisco · cisco broadworks19 Ağu 2026
- CVE-2026-2035740Planlayın
Cisco Crosswork Security Hardening Release: August 2026
KritikCVSS 10,0İstismar yokEPSS %0cisco · cisco crosswork planning19 Ağu 2026
- CVE-2026-2035840Planlayın
Cisco Crosswork Security Hardening Release: August 2026
KritikCVSS 10,0İstismar yokEPSS %0cisco · cisco crosswork planning19 Ağu 2026
- CVE-2026-2035939İzleyin
Cisco Crosswork Security Hardening Release: August 2026
KritikCVSS 9,9İstismar yokEPSS %0cisco · cisco crosswork planning19 Ağu 2026
- CVE-2026-4142432İzleyin
Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpoint
YüksekCVSS 8,2İstismar yokEPSS %0wazuh · wazuh19 Ağu 2026
- CVE-2026-4490133İzleyin
Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability
YüksekCVSS 8,4İstismar yokEPSS %0wazuh · wazuh19 Ağu 2026
- CVE-2026-4579830İzleyin
Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: field
YüksekCVSS 7,5İstismar yokEPSS %0wazuh · wazuh19 Ağu 2026
- CVE-2026-4802436İzleyin
Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager
KritikCVSS 9,1İstismar yokEPSS %0wazuh · wazuh19 Ağu 2026
- CVE-2026-4816236İzleyin
Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh manager
KritikCVSS 9,1İstismar yokEPSS %0wazuh · wazuh19 Ağu 2026
- CVE-2026-4944136İzleyin
Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh manager
KritikCVSS 9,1İstismar yokEPSS %0wazuh · wazuh19 Ağu 2026
- CVE-2026-5017328İzleyin
Flow-Like: Azure invoke presign grants app content write SAS to ExecuteEvents-only users
YüksekCVSS 7,2İstismar yokEPSS %0rheosoph · flow-like19 Ağu 2026
- CVE-2026-7147036İzleyin
Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating sa
KritikCVSS 9,1İstismar yokEPSS %0red hat · red hat advanced cluster management for kubernetes 2.1119 Ağu 2026
- CVE-2026-7252967Bu hafta
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %1trueconf · trueconf server19 Ağu 2026
- CVE-2026-7253069Bu hafta
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t
KritikCVSS 9,5KEVSilahlaştırılmışEPSS %1trueconf · trueconf server19 Ağu 2026
- CVE-2026-7514134İzleyin
FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing
YüksekCVSS 8,5İstismar yokEPSS %0ffmpeg · ffmpeg19 Ağu 2026
- CVE-2026-7514234İzleyin
FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.c
YüksekCVSS 8,5İstismar yokEPSS %0ffmpeg · ffmpeg19 Ağu 2026
- CVE-2026-7514337İzleyin
FFmpeg Heap Buffer Overflow via RIST Protocol Reader
KritikCVSS 9,3İstismar yokEPSS %0ffmpeg · ffmpeg19 Ağu 2026
- CVE-2026-7514434İzleyin
FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizer
YüksekCVSS 8,5İstismar yokEPSS %0ffmpeg · ffmpeg19 Ağu 2026
- CVE-2026-7514628İzleyin
FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.c
YüksekCVSS 7,2İstismar yokEPSS %0ffmpeg · ffmpeg19 Ağu 2026
- CVE-2026-1718328İzleyin
CVE-2026-17183 CVE Record
YüksekCVSS 7,1İstismar yokEPSS %0grafana · grafana oss19 Ağu 2026
- CVE-2026-1923432İzleyin
Power System Buffer Overflow
YüksekCVSS 8,2İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1987530İzleyin
Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflow
YüksekCVSS 7,5İstismar yokEPSS %0langflow · langflow19 Ağu 2026
- CVE-2026-3247537İzleyin
WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
KritikCVSS 9,0Kavram kanıtıEPSS %1elementor · elementor pro19 Ağu 2026
- CVE-2026-5519134İzleyin
FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation
YüksekCVSS 8,7İstismar yokEPSS %0freerdp · freerdp19 Ağu 2026
- CVE-2026-5519228İzleyin
FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch
YüksekCVSS 7,2İstismar yokEPSS %0freerdp · freerdp19 Ağu 2026
- CVE-2026-5519434İzleyin
FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch
YüksekCVSS 8,7İstismar yokEPSS %0freerdp · freerdp19 Ağu 2026
- CVE-2026-5556428İzleyin
FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp19 Ağu 2026
- CVE-2026-6151834İzleyin
ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter
YüksekCVSS 8,7İstismar yokEPSS %0ispconfig · ispconfig319 Ağu 2026
- CVE-2026-6268028İzleyin
Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref
YüksekCVSS 7,1İstismar yokEPSS %0orval-labs · orval19 Ağu 2026
- CVE-2026-6268137İzleyin
Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval19 Ağu 2026
- CVE-2026-6268237İzleyin
Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval19 Ağu 2026
- CVE-2026-6363330İzleyin
FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client
YüksekCVSS 7,7İstismar yokEPSS %0freerdp · freerdp19 Ağu 2026
- CVE-2026-6365228İzleyin
FreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDU
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp19 Ağu 2026
- CVE-2024-5837633İzleyin
Renovate 37.158.0 before 37.199.0 Command Injection via helmv3
YüksekCVSS 8,4İstismar yokEPSS %0renovatebot · renovate19 Ağu 2026
- CVE-2026-6758134İzleyin
On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay
YüksekCVSS 8,7İstismar yokEPSS %0zenhive · machine payments protocol19 Ağu 2026
- CVE-2026-7186437İzleyin
Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval19 Ağu 2026
- CVE-2026-7186537İzleyin
Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval19 Ağu 2026
- CVE-2026-7186637İzleyin
Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval19 Ağu 2026
- CVE-2026-7186737İzleyin
Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval19 Ağu 2026
- CVE-2026-7186837İzleyin
Orval: Import-time RCE via enum-typed default -> zod module-level template literal
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval19 Ağu 2026
- CVE-2026-7186937İzleyin
Orval: Import-time RCE via array-items default -> zod module-level template literal
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval19 Ağu 2026
- CVE-2026-7187137İzleyin
Orval: Import-time RCE via header-parameter default -> zod module-level template literal
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval19 Ağu 2026
- CVE-2026-7271637İzleyin
Orval: Import-time RCE via query-parameter default -> zod module-level template literal
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval19 Ağu 2026
- CVE-2026-7271737İzleyin
Orval: Import-time RCE via schema default -> zod module-level template literal
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval19 Ağu 2026
- CVE-2026-7313632İzleyin
Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay
YüksekCVSS 8,2İstismar yokEPSS %0zenhive · machine payments protocol19 Ağu 2026
- CVE-2026-7354133İzleyin
Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain
YüksekCVSS 8,3İstismar yokEPSS %0zenhive · machine payments protocol19 Ağu 2026
- CVE-2026-7514934İzleyin
marimo < 0.23.15 Code Injection via MCP Server Configuration
YüksekCVSS 8,7İstismar yokEPSS %0marimo-team · marimo19 Ağu 2026
- CVE-2026-4396131İzleyin
Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
YüksekCVSS 7,8İstismar yokEPSS %0vim · vim19 Ağu 2026
- CVE-2026-7591637İzleyin
SiYuan XSS-to-RCE via unescaped block metadata in hint popup
KritikCVSS 9,3İstismar yokEPSS %0siyuan-note · siyuan19 Ağu 2026
- CVE-2026-7591737İzleyin
SiYuan before v3.7.4 XSS-to-RCE via pathName.ts
KritikCVSS 9,3İstismar yokEPSS %0siyuan-note · siyuan19 Ağu 2026
- CVE-2026-7620835İzleyin
phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP
YüksekCVSS 8,8İstismar yokEPSS %0phpmyfaq · phpmyfaq19 Ağu 2026
- CVE-2026-7622627İzleyin
Renovate 43.65.0 before 43.102.11 Remote Code Execution via lockFileMaintenance
OrtaCVSS 6,8İstismar yokEPSS %0renovatebot · renovate19 Ağu 2026
- CVE-2026-7622833İzleyin
Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper
YüksekCVSS 8,4İstismar yokEPSS %0renovatebot · renovate19 Ağu 2026
- CVE-2026-1668738İzleyin
Power System Buffer Overflow
KritikCVSS 9,6İstismar yokEPSS %0ibm · power system e1180 \(9080-heu\) firmware19 Ağu 2026
- CVE-2026-1682830İzleyin
Power System Out-of-bounds Read
YüksekCVSS 7,6İstismar yokEPSS %0ibm · power system e1080 \(9080-hex\) firmware19 Ağu 2026
- CVE-2026-1683233İzleyin
Power System Buffer Overflow
YüksekCVSS 8,4İstismar yokEPSS %0ibm · power system e1080 \(9080-hex\) firmware19 Ağu 2026
- CVE-2026-1683538İzleyin
Power System Improper Certificate Validation
KritikCVSS 9,6İstismar yokEPSS %0ibm · power system e1080 \(9080-hex\) firmware19 Ağu 2026
- CVE-2026-1693032İzleyin
Power System Missing Authorization
YüksekCVSS 8,2İstismar yokEPSS %0ibm · power system e1180 \(9080-heu\) firmware19 Ağu 2026
- CVE-2026-1709332İzleyin
Power System Buffer Overflow
YüksekCVSS 8,2İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1710032İzleyin
Power System Out-of-bounds Write
YüksekCVSS 8,2İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1742932İzleyin
Power System Incorrect Authorization
YüksekCVSS 8,1İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1749432İzleyin
Power System Buffer Overflow
YüksekCVSS 8,2İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1831539İzleyin
TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter
KritikCVSS 9,8Kavram kanıtıEPSS %0themetechmount · truebooker – appointment booking and scheduler system19 Ağu 2026