Yayın tarihine göre
Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları
7.295 kayıt · 20 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 49 / 73
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
33İzleyin | CVE-2026-18848İstismar yok | Power System Cross-Site Request Forgery (CSRF)ibm · power system e1080 \(9080-hex\) firmware · CWE-352 | Yüksek8,3 | — | %0,1 | 19 Ağu 2026 |
39İzleyin | CVE-2026-70496İstismar yok | Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestworkred hat · red hat advanced cluster management for kubernetes 2.11 · CWE-250 | Kritik9,9 | — | %0,5 | 19 Ağu 2026 |
28İzleyin | CVE-2026-75618İstismar yok | RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101tp-link · tapo c100 firmware · CWE-476 | Yüksek7,1 | — | %0,3 | 19 Ağu 2026 |
30İzleyin | GHSA-298h-jpq4-m665İstismar yok | Duplicate Advisory: GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooksPyPI · gitpython · CWE-88 | Yüksek7,5 | — | — | 19 Ağu 2026 |
32İzleyin | GHSA-3vrx-526r-64rmİstismar yok | Duplicate Advisory: GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPPyPI · gitpython · CWE-22 | Yüksek8,2 | — | — | 19 Ağu 2026 |
32İzleyin | GHSA-7jx3-jqcp-hhgcİstismar yok | Duplicate Advisory: GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overPyPI · gitpython · CWE-88 | Yüksek8,1 | — | — | 19 Ağu 2026 |
35İzleyin | GHSA-wv46-xpj8-pw53İstismar yok | Duplicate Advisory: GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables commaPyPI · gitpython · CWE-88 | Yüksek8,8 | — | — | 19 Ağu 2026 |
32İzleyin | CVE-2026-16661İstismar yok | Power System Integer Overflowibm · power system s1122 \(9824-22a\) firmware · CWE-190 | Yüksek8,2 | — | %0,1 | 19 Ağu 2026 |
32İzleyin | CVE-2026-16707İstismar yok | Power System Out-of-bounds Readibm · power system s1122 \(9824-22a\) firmware · CWE-125 | Yüksek8,2 | — | %0,1 | 19 Ağu 2026 |
37İzleyin | CVE-2026-16822İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-295 | Kritik9,3 | — | %0,2 | 19 Ağu 2026 |
30İzleyin | CVE-2026-16824İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-400 | Yüksek7,5 | — | %0,5 | 19 Ağu 2026 |
30İzleyin | CVE-2026-16831İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-400 | Yüksek7,5 | — | %0,5 | 19 Ağu 2026 |
39İzleyin | CVE-2026-16834İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-190 | Kritik9,8 | — | %0,6 | 19 Ağu 2026 |
30İzleyin | CVE-2026-16836İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-400 | Yüksek7,5 | — | %0,5 | 19 Ağu 2026 |
30İzleyin | CVE-2026-16837İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-400 | Yüksek7,5 | — | %0,3 | 19 Ağu 2026 |
28İzleyin | CVE-2026-16838İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-367 | Yüksek7,0 | — | %0,0 | 19 Ağu 2026 |
37İzleyin | CVE-2026-16839İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-125 | Kritik9,4 | — | %0,5 | 19 Ağu 2026 |
39İzleyin | CVE-2026-16840İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-787 | Kritik9,8 | — | %0,7 | 19 Ağu 2026 |
35İzleyin | CVE-2026-16841İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-787 | Yüksek8,8 | — | %0,4 | 19 Ağu 2026 |
35İzleyin | CVE-2026-16842İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-78 | Yüksek8,8 | — | %0,5 | 19 Ağu 2026 |
35İzleyin | CVE-2026-16844İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-78 | Yüksek8,8 | — | %0,5 | 19 Ağu 2026 |
39İzleyin | CVE-2026-16845İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-787 | Kritik9,8 | — | %0,8 | 19 Ağu 2026 |
35İzleyin | CVE-2026-16847İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-787 | Yüksek8,8 | — | %0,4 | 19 Ağu 2026 |
35İzleyin | CVE-2026-16848İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-78 | Yüksek8,8 | — | %0,5 | 19 Ağu 2026 |
35İzleyin | CVE-2026-16850İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-269 | Yüksek8,8 | — | %1,4 | 19 Ağu 2026 |
29İzleyin | CVE-2026-16851İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-416 | Yüksek7,4 | — | %0,3 | 19 Ağu 2026 |
30İzleyin | CVE-2026-16852İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-190 | Yüksek7,5 | — | %0,5 | 19 Ağu 2026 |
32İzleyin | CVE-2026-16857İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-287 | Yüksek8,2 | — | %0,5 | 19 Ağu 2026 |
39İzleyin | CVE-2026-16862İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-787 | Kritik9,8 | — | %0,8 | 19 Ağu 2026 |
39İzleyin | CVE-2026-16864İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-787 | Kritik9,8 | — | %0,8 | 19 Ağu 2026 |
35İzleyin | CVE-2026-16865İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-78 | Yüksek8,8 | — | %0,7 | 19 Ağu 2026 |
31İzleyin | CVE-2026-16869İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-426 | Yüksek7,8 | — | %0,1 | 19 Ağu 2026 |
39İzleyin | CVE-2026-16872İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-121 | Kritik9,8 | — | %0,8 | 19 Ağu 2026 |
31İzleyin | CVE-2026-16873İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-787 | Yüksek7,8 | — | %0,1 | 19 Ağu 2026 |
31İzleyin | CVE-2026-16874İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-269 | Yüksek7,8 | — | %0,1 | 19 Ağu 2026 |
31İzleyin | CVE-2026-16875İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-78 | Yüksek7,8 | — | %0,2 | 19 Ağu 2026 |
35İzleyin | CVE-2026-16877İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-121 | Yüksek8,8 | — | %0,7 | 19 Ağu 2026 |
39İzleyin | CVE-2026-16882İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-78 | Kritik9,8 | — | %0,8 | 19 Ağu 2026 |
39İzleyin | CVE-2026-16885İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-121 | Kritik9,8 | — | %0,8 | 19 Ağu 2026 |
39İzleyin | CVE-2026-16894İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-787 | Kritik9,8 | — | %0,8 | 19 Ağu 2026 |
35İzleyin | CVE-2026-16901İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-787 | Yüksek8,8 | — | %0,4 | 19 Ağu 2026 |
38İzleyin | CVE-2026-16903İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-787 | Kritik9,6 | — | %0,4 | 19 Ağu 2026 |
35İzleyin | CVE-2026-16909İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-128 | Yüksek8,8 | — | %0,4 | 19 Ağu 2026 |
35İzleyin | CVE-2026-16911İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-121 | Yüksek8,8 | — | %0,7 | 19 Ağu 2026 |
39İzleyin | CVE-2026-16913İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-787 | Kritik9,8 | — | %0,8 | 19 Ağu 2026 |
39İzleyin | CVE-2026-16917İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-190 | Kritik9,8 | — | %0,7 | 19 Ağu 2026 |
39İzleyin | CVE-2026-16919İstismar yok | Vulnerabilities in IBM AIX and PowerVM VIOSibm · aix · CWE-843 | Kritik9,8 | — | %0,7 | 19 Ağu 2026 |
32İzleyin | CVE-2026-16933İstismar yok | Power System Integer Overflowibm · power system s1122 \(9824-22a\) firmware · CWE-190 | Yüksek8,2 | — | %0,1 | 19 Ağu 2026 |
29İzleyin | CVE-2026-17042İstismar yok | Power System Out-of-bounds Readibm · power system s922 \(9009-22g\) firmware · CWE-125 | Yüksek7,3 | — | %0,1 | 19 Ağu 2026 |
31İzleyin | CVE-2026-17063İstismar yok | Power System Incorrect Authorizationibm · power system s1122 \(9824-22a\) firmware · CWE-863 | Yüksek7,9 | — | %0,1 | 19 Ağu 2026 |
33İzleyin | CVE-2026-17091İstismar yok | Power System Integer Overflowibm · power system s1122 \(9824-22a\) firmware · CWE-190 | Yüksek8,4 | — | %0,1 | 19 Ağu 2026 |
35İzleyin | CVE-2026-17414İstismar yok | Power System Improper Input Validationibm · power system s1122 \(9824-22a\) firmware · CWE-20 | Yüksek8,8 | — | %0,1 | 19 Ağu 2026 |
35İzleyin | CVE-2026-18821İstismar yok | Power System Out-of-bounds Writeibm · power system s1122 \(9824-22a\) firmware · CWE-787 | Yüksek8,8 | — | %0,1 | 19 Ağu 2026 |
29İzleyin | CVE-2026-18871İstismar yok | Power System Buffer Overflowibm · power system s1122 \(9824-22a\) firmware · CWE-121 | Yüksek7,3 | — | %0,1 | 19 Ağu 2026 |
39İzleyin | CVE-2026-19505İstismar yok | RDK-B WebUI improper cryptographic signature verification vulnerabilityrdk · rdk-b webui · CWE-347 | Kritik9,8 | — | %0,3 | 19 Ağu 2026 |
32İzleyin | CVE-2026-19506İstismar yok | RDK-B WebUI race condition vulnerabilityrdk · rdk-b webui · CWE-362 | Yüksek8,1 | — | %0,3 | 19 Ağu 2026 |
30İzleyin | CVE-2026-19507İstismar yok | RDK WebUI uncontrolled resource consumptionrdk · rdk-b webui · CWE-400 | Yüksek7,5 | — | %0,4 | 19 Ağu 2026 |
39İzleyin | CVE-2026-19508İstismar yok | RDK WebUI heap-based buffer overflow vulnerabilityrdk · rdk-b webui · CWE-119 | Kritik9,8 | — | %0,8 | 19 Ağu 2026 |
40Planlayın | CVE-2026-22306İstismar yok | Critical flaw impacting OZOLS ERP's automatic update channelozols grupa · ozols · CWE-319 | Kritik10,0 | — | %0,2 | 19 Ağu 2026 |
38İzleyin | CVE-2026-55085İstismar yok | Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-liteether · etherpad · CWE-79 | Kritik9,6 | — | %0,4 | 19 Ağu 2026 |
24İzleyin | CVE-2026-55087Kavram kanıtı | Etherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect)ether · etherpad · CWE-79 | Orta6,1 | — | %0,5 | 19 Ağu 2026 |
39İzleyin | CVE-2026-55089İstismar yok | Etherpad: JWT `admin` claim presence-only check lets non-admin OAuth users invoke every Etherpad HTTP API endpointether · etherpad · CWE-863 | Kritik9,9 | — | %0,4 | 19 Ağu 2026 |
30İzleyin | CVE-2026-62317İstismar yok | Logto: ReDoS via unescaped user input in email subaddressing regex (blockSubaddressing)logto-io · logto · CWE-1333 | Yüksek7,5 | — | %0,7 | 19 Ağu 2026 |
34İzleyin | CVE-2026-63188İstismar yok | logto-tunnel serves files outside --experience-path via path traversallogto-io · logto · CWE-22 | Yüksek8,7 | — | %0,5 | 19 Ağu 2026 |
34İzleyin | CVE-2026-63722İstismar yok | ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.phpicecoder · icecoder · CWE-306 | Yüksek8,7 | — | %1,3 | 19 Ağu 2026 |
34İzleyin | CVE-2026-68558İstismar yok | Wekan: SSRF filter bypass via DNS-resolving hostname in outgoing webhooks (incomplete fix of CVE-2026-53446)wekan · wekan · CWE-918 | Yüksek8,5 | — | %0,3 | 19 Ağu 2026 |
30İzleyin | CVE-2026-68560İstismar yok | Wekan:hell Injection in External Antivirus Scanner Path via asyncExecwekan · wekan · CWE-78 | Yüksek7,7 | — | %0,5 | 19 Ağu 2026 |
35İzleyin | CVE-2026-68561İstismar yok | Wekan: a low-privilege board member escalates to board admin and takes over a private board via the `sort` collection-allow rulewekan · wekan · CWE-269 | Yüksek8,8 | — | %0,5 | 19 Ağu 2026 |
34İzleyin | CVE-2026-68899İstismar yok | Wekan: File Upload MIME Type Validation Bypass — Stored XSS via Missing System Binary Fallbackwekan · wekan · CWE-434 | Yüksek8,7 | — | %0,5 | 19 Ağu 2026 |
30İzleyin | CVE-2026-68900İstismar yok | Wekan: Stored XSS in HTML board exports through a card-title second parsewekan · wekan · CWE-79 | Yüksek7,6 | — | %0,3 | 19 Ağu 2026 |
28İzleyin | CVE-2026-75593İstismar yok | BuildKit: Malicious client can bypass destination directory validation on local sources uploadmoby · buildkit · CWE-22 | Yüksek7,2 | — | %0,5 | 19 Ağu 2026 |
35İzleyin | CVE-2026-76647İstismar yok | Leantime JSON-RPC API contains a missing authorization vulnerabilityleantime · json-rpc api · CWE-200 | Yüksek8,8 | — | %0,5 | 19 Ağu 2026 |
35İzleyin | CVE-2026-12522İstismar yok | Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fieldszephyrproject · zephyr · CWE-787 | Yüksek8,8 | — | %0,3 | 19 Ağu 2026 |
32İzleyin | CVE-2026-12633İstismar yok | Out-of-bounds write in IPv6 6LoWPAN Context Option handling via unauthenticated Router Advertisementzephyrproject · zephyr · CWE-787 | Yüksek8,1 | — | %0,3 | 19 Ağu 2026 |
32İzleyin | CVE-2026-17015İstismar yok | IBM i Denial of Serviceibm · i · CWE-125 | Yüksek8,1 | — | %0,3 | 19 Ağu 2026 |
32İzleyin | CVE-2026-18544İstismar yok | Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReferenceibm · portieris · CWE-862 | Yüksek8,1 | — | %0,4 | 19 Ağu 2026 |
35İzleyin | CVE-2026-53542İstismar yok | Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hoststermix-ssh · termix · CWE-78 | Yüksek8,8 | — | %0,6 | 19 Ağu 2026 |
39İzleyin | CVE-2026-53545İstismar yok | Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injectiontermix-ssh · termix · CWE-78 | Kritik9,8 | — | %0,7 | 19 Ağu 2026 |
38İzleyin | CVE-2026-53546İstismar yok | Termix: Missing authorization in SSH host credential resolution exposes stored credentialstermix-ssh · termix · CWE-639 | Kritik9,6 | — | %0,4 | 19 Ağu 2026 |
35İzleyin | CVE-2026-53547İstismar yok | Termix: Account Takeover via Global Settings Disclosuretermix-ssh · termix · CWE-862 | Yüksek8,8 | — | %0,5 | 19 Ağu 2026 |
38İzleyin | CVE-2026-53548İstismar yok | Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other userstermix-ssh · termix · CWE-285 | Kritik9,6 | — | %0,4 | 19 Ağu 2026 |
30İzleyin | CVE-2026-53549İstismar yok | Termix: Server-Side Request Forgery via Proxy Connectivity Testtermix-ssh · termix · CWE-918 | Yüksek7,7 | — | %0,4 | 19 Ağu 2026 |
28İzleyin | CVE-2026-54491İstismar yok | Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch pathskoel · koel · CWE-918 | Yüksek7,1 | — | %0,3 | 19 Ağu 2026 |
30İzleyin | CVE-2026-54493İstismar yok | Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stationskoel · koel · CWE-918 | Yüksek7,7 | — | %0,4 | 19 Ağu 2026 |
34İzleyin | CVE-2026-61556İstismar yok | LiquidJS: An infinite loop vulnerability in `strip_html` filterharttle · liquidjs · CWE-835 | Yüksek8,7 | — | %0,5 | 19 Ağu 2026 |
28İzleyin | CVE-2026-62727İstismar yok | Windows Telephony Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-362 | Yüksek7,0 | — | %0,2 | 19 Ağu 2026 |
28İzleyin | CVE-2026-68553İstismar yok | Coturn: Format String Injection via TURN USERNAME/REALM into hiredis Redis Commandcoturn · coturn · CWE-134 | Yüksek7,1 | — | %0,4 | 19 Ağu 2026 |
30İzleyin | CVE-2026-69222İstismar yok | LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the processharttle · liquidjs · CWE-400 | Yüksek7,5 | — | %0,6 | 19 Ağu 2026 |
36İzleyin | CVE-2026-75595İstismar yok | Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContextnetty · netty · CWE-754 | Kritik9,1 | — | %0,2 | 19 Ağu 2026 |
34İzleyin | CVE-2026-75596İstismar yok | Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsingnetty · netty · CWE-407 | Yüksek8,7 | — | %0,3 | 19 Ağu 2026 |
35İzleyin | CVE-2026-75616Kavram kanıtı | Command Injection in Router Web Management Interfacetp-link · archer c20 firmware · CWE-78 | Yüksek8,5 | — | %2,8 | 19 Ağu 2026 |
32İzleyin | CVE-2026-76139İstismar yok | Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentialsred hat · red hat advanced cluster management for kubernetes 2.11 · CWE-829 | Yüksek8,0 | — | %0,7 | 19 Ağu 2026 |
8İzleyin | CVE-2026-76576İstismar yok | yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversalyangzongzhuan · ruoyi-vue · CWE-22 | Düşük2,1 | — | %0,4 | 19 Ağu 2026 |
34İzleyin | CVE-2026-76584İstismar yok | TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflowtrendnet · tv-ip751wic · CWE-119 | Yüksek8,6 | — | %0,8 | 19 Ağu 2026 |
30İzleyin | CVE-2024-13942İstismar yok | Rockchip RK3588s Secure BootROM TOCTOU (time-of-check to time-of-use) vulnerability leading to arbitrary code execution with highest privilegesrockchip · rk3588s · CWE-367 | Yüksek7,6 | — | %0,2 | 19 Ağu 2026 |
37İzleyin | CVE-2025-14600İstismar yok | Admin Account Takeover via Path Traversal in vsDeskvsdesk · vsdesk · CWE-305 | Kritik9,3 | — | %0,5 | 19 Ağu 2026 |
35İzleyin | CVE-2025-14603İstismar yok | Use of user input in raw SQL queries in vsDesk leading to blind SQL injectionvsdesk · vsdesk | Yüksek8,8 | — | %0,3 | 19 Ağu 2026 |
34İzleyin | CVE-2026-55193İstismar yok | FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_fragfreerdp · freerdp · CWE-122 | Yüksek8,7 | — | %0,4 | 19 Ağu 2026 |
28İzleyin | CVE-2026-76251İstismar yok | Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloudsplunk · splunk · CWE-862 | Yüksek7,1 | — | %0,2 | 19 Ağu 2026 |
35İzleyin | CVE-2026-76253İstismar yok | Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprisesplunk · splunk · CWE-269 | Yüksek8,8 | — | %0,4 | 19 Ağu 2026 |
- CVE-2026-1884833İzleyin
Power System Cross-Site Request Forgery (CSRF)
YüksekCVSS 8,3İstismar yokEPSS %0ibm · power system e1080 \(9080-hex\) firmware19 Ağu 2026
- CVE-2026-7049639İzleyin
Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestwork
KritikCVSS 9,9İstismar yokEPSS %0red hat · red hat advanced cluster management for kubernetes 2.1119 Ağu 2026
- CVE-2026-7561828İzleyin
RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101
YüksekCVSS 7,1İstismar yokEPSS %0tp-link · tapo c100 firmware19 Ağu 2026
- GHSA-298h-jpq4-m66530İzleyin
Duplicate Advisory: GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks
YüksekCVSS 7,5İstismar yokPyPI · gitpython19 Ağu 2026
- GHSA-3vrx-526r-64rm32İzleyin
Duplicate Advisory: GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitP
YüksekCVSS 8,2İstismar yokPyPI · gitpython19 Ağu 2026
- GHSA-7jx3-jqcp-hhgc32İzleyin
Duplicate Advisory: GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file over
YüksekCVSS 8,1İstismar yokPyPI · gitpython19 Ağu 2026
- GHSA-wv46-xpj8-pw5335İzleyin
Duplicate Advisory: GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables comma
YüksekCVSS 8,8İstismar yokPyPI · gitpython19 Ağu 2026
- CVE-2026-1666132İzleyin
Power System Integer Overflow
YüksekCVSS 8,2İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1670732İzleyin
Power System Out-of-bounds Read
YüksekCVSS 8,2İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1682237İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,3İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1682430İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 7,5İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1683130İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 7,5İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1683439İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,8İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1683630İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 7,5İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1683730İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 7,5İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1683828İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 7,0İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1683937İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,4İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1684039İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,8İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1684135İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 8,8İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1684235İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 8,8İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1684435İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 8,8İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1684539İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,8İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1684735İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 8,8İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1684835İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 8,8İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1685035İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 8,8İstismar yokEPSS %1ibm · aix19 Ağu 2026
- CVE-2026-1685129İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 7,4İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1685230İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 7,5İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1685732İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 8,2İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1686239İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,8İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1686439İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1686535İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 8,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1686931İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 7,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1687239İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1687331İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 7,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1687431İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 7,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1687531İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 7,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1687735İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 8,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1688239İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1688539İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1689439İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1690135İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 8,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1690338İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,6İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1690935İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 8,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1691135İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
YüksekCVSS 8,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1691339İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1691739İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,8İstismar yokEPSS %0ibm · vios19 Ağu 2026
- CVE-2026-1691939İzleyin
Vulnerabilities in IBM AIX and PowerVM VIOS
KritikCVSS 9,8İstismar yokEPSS %0ibm · aix19 Ağu 2026
- CVE-2026-1693332İzleyin
Power System Integer Overflow
YüksekCVSS 8,2İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1704229İzleyin
Power System Out-of-bounds Read
YüksekCVSS 7,3İstismar yokEPSS %0ibm · power system s922 \(9009-22g\) firmware19 Ağu 2026
- CVE-2026-1706331İzleyin
Power System Incorrect Authorization
YüksekCVSS 7,9İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1709133İzleyin
Power System Integer Overflow
YüksekCVSS 8,4İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1741435İzleyin
Power System Improper Input Validation
YüksekCVSS 8,8İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1882135İzleyin
Power System Out-of-bounds Write
YüksekCVSS 8,8İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1887129İzleyin
Power System Buffer Overflow
YüksekCVSS 7,3İstismar yokEPSS %0ibm · power system s1122 \(9824-22a\) firmware19 Ağu 2026
- CVE-2026-1950539İzleyin
RDK-B WebUI improper cryptographic signature verification vulnerability
KritikCVSS 9,8İstismar yokEPSS %0rdk · rdk-b webui19 Ağu 2026
- CVE-2026-1950632İzleyin
RDK-B WebUI race condition vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0rdk · rdk-b webui19 Ağu 2026
- CVE-2026-1950730İzleyin
RDK WebUI uncontrolled resource consumption
YüksekCVSS 7,5İstismar yokEPSS %0rdk · rdk-b webui19 Ağu 2026
- CVE-2026-1950839İzleyin
RDK WebUI heap-based buffer overflow vulnerability
KritikCVSS 9,8İstismar yokEPSS %0rdk · rdk-b webui19 Ağu 2026
- CVE-2026-2230640Planlayın
Critical flaw impacting OZOLS ERP's automatic update channel
KritikCVSS 10,0İstismar yokEPSS %0ozols grupa · ozols19 Ağu 2026
- CVE-2026-5508538İzleyin
Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-lite
KritikCVSS 9,6İstismar yokEPSS %0ether · etherpad19 Ağu 2026
- CVE-2026-5508724İzleyin
Etherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect)
OrtaCVSS 6,1Kavram kanıtıEPSS %0ether · etherpad19 Ağu 2026
- CVE-2026-5508939İzleyin
Etherpad: JWT `admin` claim presence-only check lets non-admin OAuth users invoke every Etherpad HTTP API endpoint
KritikCVSS 9,9İstismar yokEPSS %0ether · etherpad19 Ağu 2026
- CVE-2026-6231730İzleyin
Logto: ReDoS via unescaped user input in email subaddressing regex (blockSubaddressing)
YüksekCVSS 7,5İstismar yokEPSS %0logto-io · logto19 Ağu 2026
- CVE-2026-6318834İzleyin
logto-tunnel serves files outside --experience-path via path traversal
YüksekCVSS 8,7İstismar yokEPSS %0logto-io · logto19 Ağu 2026
- CVE-2026-6372234İzleyin
ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php
YüksekCVSS 8,7İstismar yokEPSS %1icecoder · icecoder19 Ağu 2026
- CVE-2026-6855834İzleyin
Wekan: SSRF filter bypass via DNS-resolving hostname in outgoing webhooks (incomplete fix of CVE-2026-53446)
YüksekCVSS 8,5İstismar yokEPSS %0wekan · wekan19 Ağu 2026
- CVE-2026-6856030İzleyin
Wekan:hell Injection in External Antivirus Scanner Path via asyncExec
YüksekCVSS 7,7İstismar yokEPSS %0wekan · wekan19 Ağu 2026
- CVE-2026-6856135İzleyin
Wekan: a low-privilege board member escalates to board admin and takes over a private board via the `sort` collection-allow rule
YüksekCVSS 8,8İstismar yokEPSS %0wekan · wekan19 Ağu 2026
- CVE-2026-6889934İzleyin
Wekan: File Upload MIME Type Validation Bypass — Stored XSS via Missing System Binary Fallback
YüksekCVSS 8,7İstismar yokEPSS %0wekan · wekan19 Ağu 2026
- CVE-2026-6890030İzleyin
Wekan: Stored XSS in HTML board exports through a card-title second parse
YüksekCVSS 7,6İstismar yokEPSS %0wekan · wekan19 Ağu 2026
- CVE-2026-7559328İzleyin
BuildKit: Malicious client can bypass destination directory validation on local sources upload
YüksekCVSS 7,2İstismar yokEPSS %0moby · buildkit19 Ağu 2026
- CVE-2026-7664735İzleyin
Leantime JSON-RPC API contains a missing authorization vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0leantime · json-rpc api19 Ağu 2026
- CVE-2026-1252235İzleyin
Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields
YüksekCVSS 8,8İstismar yokEPSS %0zephyrproject · zephyr19 Ağu 2026
- CVE-2026-1263332İzleyin
Out-of-bounds write in IPv6 6LoWPAN Context Option handling via unauthenticated Router Advertisement
YüksekCVSS 8,1İstismar yokEPSS %0zephyrproject · zephyr19 Ağu 2026
- CVE-2026-1701532İzleyin
IBM i Denial of Service
YüksekCVSS 8,1İstismar yokEPSS %0ibm · i19 Ağu 2026
- CVE-2026-1854432İzleyin
Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference
YüksekCVSS 8,1İstismar yokEPSS %0ibm · portieris19 Ağu 2026
- CVE-2026-5354235İzleyin
Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hosts
YüksekCVSS 8,8İstismar yokEPSS %0termix-ssh · termix19 Ağu 2026
- CVE-2026-5354539İzleyin
Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection
KritikCVSS 9,8İstismar yokEPSS %0termix-ssh · termix19 Ağu 2026
- CVE-2026-5354638İzleyin
Termix: Missing authorization in SSH host credential resolution exposes stored credentials
KritikCVSS 9,6İstismar yokEPSS %0termix-ssh · termix19 Ağu 2026
- CVE-2026-5354735İzleyin
Termix: Account Takeover via Global Settings Disclosure
YüksekCVSS 8,8İstismar yokEPSS %0termix-ssh · termix19 Ağu 2026
- CVE-2026-5354838İzleyin
Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other users
KritikCVSS 9,6İstismar yokEPSS %0termix-ssh · termix19 Ağu 2026
- CVE-2026-5354930İzleyin
Termix: Server-Side Request Forgery via Proxy Connectivity Test
YüksekCVSS 7,7İstismar yokEPSS %0termix-ssh · termix19 Ağu 2026
- CVE-2026-5449128İzleyin
Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths
YüksekCVSS 7,1İstismar yokEPSS %0koel · koel19 Ağu 2026
- CVE-2026-5449330İzleyin
Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stations
YüksekCVSS 7,7İstismar yokEPSS %0koel · koel19 Ağu 2026
- CVE-2026-6155634İzleyin
LiquidJS: An infinite loop vulnerability in `strip_html` filter
YüksekCVSS 8,7İstismar yokEPSS %0harttle · liquidjs19 Ağu 2026
- CVE-2026-6272728İzleyin
Windows Telephony Service Elevation of Privilege Vulnerability
YüksekCVSS 7,0İstismar yokEPSS %0microsoft · windows 10 160719 Ağu 2026
- CVE-2026-6855328İzleyin
Coturn: Format String Injection via TURN USERNAME/REALM into hiredis Redis Command
YüksekCVSS 7,1İstismar yokEPSS %0coturn · coturn19 Ağu 2026
- CVE-2026-6922230İzleyin
LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process
YüksekCVSS 7,5İstismar yokEPSS %0harttle · liquidjs19 Ağu 2026
- CVE-2026-7559536İzleyin
Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext
KritikCVSS 9,1İstismar yokEPSS %0netty · netty19 Ağu 2026
- CVE-2026-7559634İzleyin
Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing
YüksekCVSS 8,7İstismar yokEPSS %0netty · netty19 Ağu 2026
- CVE-2026-7561635İzleyin
Command Injection in Router Web Management Interface
YüksekCVSS 8,5Kavram kanıtıEPSS %2tp-link · archer c20 firmware19 Ağu 2026
- CVE-2026-7613932İzleyin
Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials
YüksekCVSS 8,0İstismar yokEPSS %0red hat · red hat advanced cluster management for kubernetes 2.1119 Ağu 2026
- CVE-2026-765768İzleyin
yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal
DüşükCVSS 2,1İstismar yokEPSS %0yangzongzhuan · ruoyi-vue19 Ağu 2026
- CVE-2026-7658434İzleyin
TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow
YüksekCVSS 8,6İstismar yokEPSS %0trendnet · tv-ip751wic19 Ağu 2026
- CVE-2024-1394230İzleyin
Rockchip RK3588s Secure BootROM TOCTOU (time-of-check to time-of-use) vulnerability leading to arbitrary code execution with highest privileges
YüksekCVSS 7,6İstismar yokEPSS %0rockchip · rk3588s19 Ağu 2026
- CVE-2025-1460037İzleyin
Admin Account Takeover via Path Traversal in vsDesk
KritikCVSS 9,3İstismar yokEPSS %0vsdesk · vsdesk19 Ağu 2026
- CVE-2025-1460335İzleyin
Use of user input in raw SQL queries in vsDesk leading to blind SQL injection
YüksekCVSS 8,8İstismar yokEPSS %0vsdesk · vsdesk19 Ağu 2026
- CVE-2026-5519334İzleyin
FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag
YüksekCVSS 8,7İstismar yokEPSS %0freerdp · freerdp19 Ağu 2026
- CVE-2026-7625128İzleyin
Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud
YüksekCVSS 7,1İstismar yokEPSS %0splunk · splunk19 Ağu 2026
- CVE-2026-7625335İzleyin
Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise
YüksekCVSS 8,8İstismar yokEPSS %0splunk · splunk19 Ağu 2026