Yayın tarihine göre
Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları
7.294 kayıt · 20 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 5 / 73
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2017-20242İstismar yok | Keysight IxChariot Endpoint stack-based buffer overflowkeysight · ixchariot · CWE-121 | Kritik9,3 | — | %1,2 | 4 Ağu 2026 |
39İzleyin | CVE-2026-0163Kavram kanıtı | In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free.google · android · CWE-416 | Kritik9,8 | — | %0,3 | 4 Ağu 2026 |
28İzleyin | CVE-2026-13229İstismar yok | Zammad 7.0.1 - Improper authorization in ticket article attachment cloningzammad · zammad · CWE-862 | Yüksek7,1 | — | %0,4 | 4 Ağu 2026 |
33İzleyin | CVE-2026-47764İstismar yok | pdm: Path traversal in wheel installation via overridden write_to_fspdm-project · pdm · CWE-22 | Yüksek8,4 | — | %0,1 | 4 Ağu 2026 |
33İzleyin | CVE-2026-47781İstismar yok | pdm: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsingpdm-project · pdm · CWE-94 | Yüksek8,4 | — | %0,1 | 4 Ağu 2026 |
37İzleyin | CVE-2026-49435İstismar yok | Keysight IxChariot-related products stack-based buffer overflowkeysight · hawkeye · CWE-121 | Kritik9,3 | — | %1,4 | 4 Ağu 2026 |
28İzleyin | CVE-2026-68743İstismar yok | Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1fedoraproject · sssd · CWE-125 | Yüksek7,1 | — | %0,1 | 4 Ağu 2026 |
28İzleyin | CVE-2026-69702İstismar yok | SnailJob 1.7.0 Denial of Service via FuryUtil.deserialize OOMaizuda · snailjob (snail-job) · CWE-789 | Yüksek7,1 | — | %0,5 | 4 Ağu 2026 |
37İzleyin | CVE-2026-69703İstismar yok | Atlas-Livre Unauthenticated Access via Admin Controllers Missing Exitmaximeamini · atals-livre · CWE-306 | Kritik9,3 | — | %0,5 | 4 Ağu 2026 |
28İzleyin | CVE-2026-69704İstismar yok | Atals-Livre SQL Injection via Unsanitized GET Parameter in supp()maximeamini · atals-livre · CWE-89 | Yüksek7,0 | — | %0,3 | 4 Ağu 2026 |
28İzleyin | CVE-2026-70471İstismar yok | Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosureflowiseai · flowise · CWE-863 | Yüksek7,1 | — | %0,4 | 4 Ağu 2026 |
28İzleyin | CVE-2026-70472İstismar yok | Flowise: Cross-workspace credential IDOR in openai-assistants-vector-storeflowiseai · flowise · CWE-285 | Yüksek7,1 | — | %0,5 | 4 Ağu 2026 |
33İzleyin | CVE-2026-70473İstismar yok | Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert historyflowiseai · flowise · CWE-200 | Yüksek8,3 | — | %0,4 | 4 Ağu 2026 |
30İzleyin | CVE-2026-70474İstismar yok | Flowise: Cross-Workspace OAuth2 Credential Metadata Leakflowiseai · flowise · CWE-863 | Yüksek7,6 | — | %0,4 | 4 Ağu 2026 |
28İzleyin | CVE-2026-16792İstismar yok | Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestratorlenovo · xclarity orchestrator · CWE-295 | Yüksek7,0 | — | %0,1 | 4 Ağu 2026 |
34İzleyin | CVE-2026-16793İstismar yok | Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestratorlenovo · xclarity orchestrator · CWE-20 | Yüksek8,7 | — | %0,5 | 4 Ağu 2026 |
34İzleyin | CVE-2026-18656İstismar yok | Executable Resolution from Untrusted Project Directory in Kiro IDE on Windowsamazon · kiro ide · CWE-427 | Yüksek8,5 | — | %0,2 | 4 Ağu 2026 |
34İzleyin | CVE-2026-18657İstismar yok | Executable Resolution from Untrusted Project Directory in Kiro CLI on Windowsamazon · kiro cli · CWE-427 | Yüksek8,5 | — | %0,2 | 4 Ağu 2026 |
28İzleyin | CVE-2026-47682İstismar yok | CVAT: Missing path-containment validation in multiple entry points allows arbitrary path writescvat-ai · cvat · CWE-22 | Yüksek7,1 | — | %0,4 | 4 Ağu 2026 |
28İzleyin | CVE-2026-70475İstismar yok | Flowise: Missing Authorization on Execution Update Endpointflowiseai · flowise · CWE-862 | Yüksek7,1 | — | %0,4 | 4 Ağu 2026 |
33İzleyin | CVE-2026-70476İstismar yok | Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulationflowiseai · flowise · CWE-284 | Yüksek8,3 | — | %0,5 | 4 Ağu 2026 |
38İzleyin | CVE-2026-70477İstismar yok | Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerabilityflowiseai · flowise · CWE-94 | Kritik9,5 | — | %0,8 | 4 Ağu 2026 |
36İzleyin | CVE-2026-70478İstismar yok | Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected serviceflowiseai · flowise · CWE-200 | Kritik9,2 | — | %0,6 | 4 Ağu 2026 |
30İzleyin | CVE-2026-70479İstismar yok | Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loaderopenwebui · open webui · CWE-918 | Yüksek7,7 | — | %0,4 | 4 Ağu 2026 |
21İzleyin | CVE-2026-70481Kavram kanıtı | Open WebUI: Any member with write access to a standard channel can edit or delete other members' messagesopenwebui · open webui · CWE-284 | Orta5,4 | — | %0,4 | 4 Ağu 2026 |
35İzleyin | CVE-2026-70482İstismar yok | Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any clientopenwebui · open webui · CWE-287 | Yüksek8,8 | — | %0,5 | 4 Ağu 2026 |
28İzleyin | CVE-2026-70485İstismar yok | Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLsopenwebui · open webui · CWE-918 | Yüksek7,1 | — | %0,3 | 4 Ağu 2026 |
37İzleyin | CVE-2026-70552İstismar yok | MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.phpmaxsite · maxsite cms · CWE-306 | Kritik9,3 | — | %0,8 | 4 Ağu 2026 |
37İzleyin | CVE-2026-70553Kavram kanıtı | MaxSite CMS Unauthenticated RCE via Install Endpointmaxsite · maxsite cms · CWE-94 | Kritik9,3 | — | %1,2 | 4 Ağu 2026 |
28İzleyin | CVE-2026-13227İstismar yok | ERPNext v16.25.0 - Improper authorization in Prospect opportunities APIfrappe · erpnext · CWE-862 | Yüksek7,1 | — | %0,4 | 4 Ağu 2026 |
30İzleyin | CVE-2026-18811İstismar yok | H3C NX15 esps add command injectionh3c · nx15 · CWE-74 | Yüksek7,3 | — | %3,5 | 4 Ağu 2026 |
30İzleyin | CVE-2026-18812İstismar yok | H3C NX15 esps esps.ipv6.wan command injectionh3c · nx15 · CWE-74 | Yüksek7,3 | — | %3,5 | 4 Ağu 2026 |
30İzleyin | CVE-2026-18813İstismar yok | H3C NX15 esps delete command injectionh3c · nx15 · CWE-74 | Yüksek7,3 | — | %3,5 | 4 Ağu 2026 |
39İzleyin | CVE-2026-45538İstismar yok | OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name Copyopensips · opensips · CWE-121 | Kritik9,8 | — | %0,8 | 4 Ağu 2026 |
33İzleyin | CVE-2026-51400İstismar yok | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within fivim · vim · CWE-401 | Yüksek8,4 | — | %0,1 | 4 Ağu 2026 |
30İzleyin | CVE-2026-51401İstismar yok | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within fivim · vim · CWE-94 | Yüksek7,7 | — | %0,2 | 4 Ağu 2026 |
34İzleyin | CVE-2026-65986İstismar yok | CVAT has stored XSS via annotation guide assetscvat-ai · cvat · CWE-79 | Yüksek8,5 | — | %0,4 | 4 Ağu 2026 |
30İzleyin | CVE-2026-66901İstismar yok | Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated URLs taken from the credentials JSONcjcollier · google::auth · CWE-201 | Yüksek7,5 | — | %0,5 | 4 Ağu 2026 |
39İzleyin | CVE-2026-66902İstismar yok | Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system callcjcollier · google::auth · CWE-78 | Kritik9,8 | — | %0,7 | 4 Ağu 2026 |
36İzleyin | CVE-2026-67979İstismar yok | Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute aCWE-284 | Kritik9,1 | — | %0,4 | 4 Ağu 2026 |
32İzleyin | CVE-2026-70494İstismar yok | Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolderopenwebui · open webui · CWE-862 | Yüksek8,1 | — | %0,5 | 4 Ağu 2026 |
37İzleyin | CVE-2026-70554İstismar yok | MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookiemaxsite · maxsite cms · CWE-502 | Kritik9,3 | — | %1,2 | 4 Ağu 2026 |
40Planlayın | CVE-2025-29296İstismar yok | H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic RCWE-77 | Kritik9,8 | — | %2,2 | 4 Ağu 2026 |
32İzleyin | GHSA-88pr-878c-24wfİstismar yok | Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys npm · flowise-components · CWE-22 | Yüksek8,0 | — | — | 4 Ağu 2026 |
34İzleyin | CVE-2026-18830Kavram kanıtı | Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness APIaws · amazon bedrock agentcore harness · CWE-1287 | Yüksek8,6 | — | %0,5 | 4 Ağu 2026 |
30İzleyin | CVE-2026-18814İstismar yok | H3C NX15 esps reload.reload_config command injectionh3c · nx15 · CWE-74 | Yüksek7,3 | — | %3,5 | 4 Ağu 2026 |
34İzleyin | CVE-2026-45084İstismar yok | OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type stateopensips · opensips · CWE-476 | Yüksek8,7 | — | %0,6 | 4 Ağu 2026 |
36İzleyin | CVE-2026-45100İstismar yok | OpenSIPS: Buffer Overflow in Base64 Encode Transformationopensips · opensips · CWE-120 | Kritik9,1 | — | %0,8 | 4 Ağu 2026 |
30İzleyin | CVE-2026-45103İstismar yok | OpenSIPS: SIP Message Smuggling via TCP Content-Length Integer Overflowopensips · opensips · CWE-190 | Yüksek7,5 | — | %0,5 | 4 Ağu 2026 |
30İzleyin | CVE-2026-67855İstismar yok | open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UA_ENABLE_GDS_PUSHMANAGEMENT is enabled.CWE-400 | Yüksek7,5 | — | %0,5 | 4 Ağu 2026 |
30İzleyin | CVE-2026-67856İstismar yok | An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscription, CreateMonitorCWE-400 | Yüksek7,5 | — | %0,7 | 4 Ağu 2026 |
30İzleyin | CVE-2026-67857İstismar yok | open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray() in src/client/ua_client_connect.c.CWE-125 | Yüksek7,5 | — | %0,6 | 4 Ağu 2026 |
30İzleyin | CVE-2026-67858İstismar yok | Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled throCWE-120 | Yüksek7,5 | — | %0,8 | 4 Ağu 2026 |
30İzleyin | CVE-2026-67859İstismar yok | Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling.CWE-120 | Yüksek7,5 | — | %0,8 | 4 Ağu 2026 |
30İzleyin | CVE-2026-67860İstismar yok | open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memCWE-122 | Yüksek7,5 | — | %0,4 | 4 Ağu 2026 |
30İzleyin | CVE-2026-67861İstismar yok | An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the UA_Client_getRemoteDataTypes componenCWE-400 | Yüksek7,5 | — | %0,7 | 4 Ağu 2026 |
30İzleyin | CVE-2026-67862İstismar yok | open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src/client/ua_client_highlevel.c.CWE-400 | Yüksek7,5 | — | %0,5 | 4 Ağu 2026 |
34İzleyin | CVE-2026-70619İstismar yok | Odysseus Missing Admin Authorization via Embedding Endpoint Routesodysseus-dev · odysseus · CWE-862 | Yüksek8,7 | — | %0,6 | 4 Ağu 2026 |
36İzleyin | CVE-2026-45537İstismar yok | OpenSIPS: Global Buffer Overflow in construct_uriopensips · opensips · CWE-120 | Kritik9,1 | — | %0,6 | 4 Ağu 2026 |
34İzleyin | CVE-2026-45809İstismar yok | OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URIopensips · opensips · CWE-121 | Yüksek8,7 | — | %0,6 | 4 Ağu 2026 |
34İzleyin | CVE-2026-46334İstismar yok | OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS SDP cloningopensips · opensips · CWE-20 | Yüksek8,7 | — | %0,6 | 4 Ağu 2026 |
29İzleyin | CVE-2026-18895İstismar yok | UTT HiPER 1250GW APSecurity_5g strcpy stack-based overflowutt · hiper 1250gw · CWE-119 | Yüksek7,4 | — | %0,8 | 4 Ağu 2026 |
29İzleyin | CVE-2026-18897İstismar yok | UTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflowutt · hiper 1250gw · CWE-119 | Yüksek7,4 | — | %0,8 | 4 Ağu 2026 |
30İzleyin | CVE-2026-18907Kavram kanıtı | PathTravelsal Vulnerability in com.talpa.hibrowsertecno mobile · hi browser · CWE-23 | Yüksek7,5 | — | %0,9 | 4 Ağu 2026 |
29İzleyin | CVE-2026-18898İstismar yok | UTT HiPER 1200GW ConfigAdvideo strcpy stack-based overflowutt · hiper 1200gw · CWE-119 | Yüksek7,4 | — | %0,8 | 5 Ağu 2026 |
30İzleyin | CVE-2026-18900İstismar yok | H3C NX15 Backend RPC esps file.exec os command injectionh3c · nx15 · CWE-77 | Yüksek7,3 | — | %3,8 | 5 Ağu 2026 |
29İzleyin | CVE-2026-18901İstismar yok | H3C NX15 Web API esps service.add routineh3c · nx15 · CWE-749 | Yüksek7,3 | — | %0,8 | 5 Ağu 2026 |
30İzleyin | CVE-2026-15918İstismar yok | VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injectione4jvikwp · vikappointments services booking calendar · CWE-89 | Yüksek7,5 | — | %0,5 | 5 Ağu 2026 |
28İzleyin | CVE-2026-16143İstismar yok | VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site Scriptinge4jvikwp · vikrentitems flexible rental management system · CWE-79 | Yüksek7,2 | — | %0,4 | 5 Ağu 2026 |
35İzleyin | CVE-2026-18322Kavram kanıtı | Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administratorsupsysticcom · smart popup by supsystic · CWE-269 | Yüksek8,8 | — | %0,5 | 5 Ağu 2026 |
30İzleyin | CVE-2026-18902İstismar yok | H3C NX15 esps repeaterproc command injectionh3c · nx15 · CWE-74 | Yüksek7,3 | — | %3,8 | 5 Ağu 2026 |
28İzleyin | CVE-2026-55707İstismar yok | In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets.openstack · neutron · CWE-863 | Yüksek7,1 | — | %0,4 | 5 Ağu 2026 |
30İzleyin | CVE-2026-66257İstismar yok | Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustionapache · qpid proton-j · CWE-770 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
30İzleyin | CVE-2026-66273İstismar yok | Apache Qpid Proton-J: Type size/count handling can lead to excessive allocation pre-authenticationapache · qpid proton-j · CWE-789 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
33İzleyin | CVE-2026-66839İstismar yok | NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428).integrated systems technologies, inc. · netkids imark · CWE-428 | Yüksek8,4 | — | %0,1 | 5 Ağu 2026 |
30İzleyin | CVE-2026-67465İstismar yok | Apache Qpid Proton Dotnet: Unbounded symbol value caching can lead to pre-authentication resource exhaustionapache · qpid proton-dotnet · CWE-770 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
30İzleyin | CVE-2026-67551İstismar yok | Apache Qpid Proton Dotnet: Type size/count handling can lead to excessive allocation pre-authenticationapache · qpid proton-dotnet · CWE-789 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
30İzleyin | CVE-2026-67588İstismar yok | Apache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authentication resource exhaustionapache · qpid protonj2 · CWE-770 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
30İzleyin | CVE-2026-67589İstismar yok | Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authenticationapache · qpid protonj2 · CWE-789 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
30İzleyin | CVE-2026-68060İstismar yok | Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authenticationapache · qpid broker-j · CWE-770 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
30İzleyin | CVE-2026-68074İstismar yok | Apache Qpid Broker-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustionapache · qpid broker-j · CWE-770 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
34İzleyin | CVE-2026-71190İstismar yok | In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtrackiopenstack · swift · CWE-1333 | Yüksek8,7 | — | %0,8 | 5 Ağu 2026 |
35İzleyin | CVE-2026-8761İstismar yok | Dokan <= 5.0.2 - Missing Authorization to Authenticated (Vendor+) Privilege Escalationdokaninc · dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy · CWE-862 | Yüksek8,8 | — | %0,6 | 5 Ağu 2026 |
37İzleyin | CVE-2026-9273İstismar yok | Membership Plugin – Kadence Memberships <= 4.0.0 - Unauthenticated Password Reset Link Poisoning to Account Takeoverstellarwp · membership plugin – kadence memberships · CWE-640 | Kritik9,3 | — | %0,5 | 5 Ağu 2026 |
32İzleyin | CVE-2026-14553İstismar yok | Zportals < 6.3.4 - Subscriber+ Arbitrary File Uploadunknown · zportals · CWE-434 | Yüksek8,1 | — | %0,6 | 5 Ağu 2026 |
36İzleyin | CVE-2026-15210İstismar yok | Login/Signup with Phone Number, OTP Verification < 1.8.71 - Unauthenticated Account Takeover via OTP Brute Forceunknown · otp login with phone number, otp verification · CWE-287 | Kritik9,1 | — | %0,4 | 5 Ağu 2026 |
32İzleyin | CVE-2026-15230İstismar yok | YayPricing < 3.5.7 - Subscriber+ Pricing Configuration Modification and Coupon Code Disclosureunknown · yaypricing · CWE-284 | Yüksek8,1 | — | %0,3 | 5 Ağu 2026 |
36İzleyin | CVE-2026-15360İstismar yok | Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_argsunknown · ajax load more · CWE-89 | Kritik9,1 | — | %0,4 | 5 Ağu 2026 |
30İzleyin | CVE-2026-15372İstismar yok | WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via Passkeys Providerunknown · wp 2fa · CWE-287 | Yüksek7,5 | — | %0,5 | 5 Ağu 2026 |
30İzleyin | CVE-2026-16036İstismar yok | miniOrange 2FA < 6.2.7 - 2FA Bypass via Password-Only Second-Factor Rebindingunknown · miniorange 2fa · CWE-287 | Yüksek7,5 | — | %0,4 | 5 Ağu 2026 |
30İzleyin | CVE-2026-16055İstismar yok | Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_loginunknown · contest gallery · CWE-287 | Yüksek7,5 | — | %0,4 | 5 Ağu 2026 |
30İzleyin | CVE-2026-16561İstismar yok | Sunshine Photo Cart < 3.6.12 - Unauthenticated Private Gallery Comment Disclosureunknown · sunshine photo cart · CWE-862 | Yüksek7,5 | — | %0,4 | 5 Ağu 2026 |
30İzleyin | CVE-2026-16573İstismar yok | Bit Form < 3.2.0 - Unauthenticated Stored XSS via SVG Signature Uploadunknown · bit form · CWE-79 | Yüksek7,5 | — | %0,3 | 5 Ağu 2026 |
30İzleyin | CVE-2026-16602İstismar yok | Content Protector (Passster) < 4.3.6 - Unauthenticated Non-Public Post Content Disclosure via Captcha REST Endpointunknown · passster · CWE-200 | Yüksek7,5 | — | %0,4 | 5 Ağu 2026 |
30İzleyin | CVE-2026-16603İstismar yok | Content Protector (Passster) < 4.3.6 - Unauthenticated Category-Locked Content Disclosure via Core REST APIunknown · passster · CWE-200 | Yüksek7,5 | — | %0,4 | 5 Ağu 2026 |
30İzleyin | CVE-2026-16604İstismar yok | Content Protector (Passster) < 4.3.6 - Unauthenticated Protected Content Disclosure via Content-Lock Block data-content Attributeunknown · passster · CWE-200 | Yüksek7,5 | — | %0,4 | 5 Ağu 2026 |
28İzleyin | CVE-2026-16605İstismar yok | MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing Authorizationunknown · multivendorx · CWE-862 | Yüksek7,2 | — | %0,4 | 5 Ağu 2026 |
30İzleyin | CVE-2026-16736İstismar yok | User Registration & Membership < 5.2.6 - Unauthenticated Account Creation While Registration Disabledunknown · user registration & membership · CWE-284 | Yüksek7,5 | — | %0,4 | 5 Ağu 2026 |
40Planlayın | CVE-2026-16940İstismar yok | Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversalunknown · custom fields · CWE-22 | Kritik10,0 | — | %0,5 | 5 Ağu 2026 |
30İzleyin | CVE-2026-66274İstismar yok | Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflowapache · qpid proton-j · CWE-674 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
- CVE-2017-2024237İzleyin
Keysight IxChariot Endpoint stack-based buffer overflow
KritikCVSS 9,3İstismar yokEPSS %1keysight · ixchariot4 Ağu 2026
- CVE-2026-016339İzleyin
In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free.
KritikCVSS 9,8Kavram kanıtıEPSS %0google · android4 Ağu 2026
- CVE-2026-1322928İzleyin
Zammad 7.0.1 - Improper authorization in ticket article attachment cloning
YüksekCVSS 7,1İstismar yokEPSS %0zammad · zammad4 Ağu 2026
- CVE-2026-4776433İzleyin
pdm: Path traversal in wheel installation via overridden write_to_fs
YüksekCVSS 8,4İstismar yokEPSS %0pdm-project · pdm4 Ağu 2026
- CVE-2026-4778133İzleyin
pdm: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing
YüksekCVSS 8,4İstismar yokEPSS %0pdm-project · pdm4 Ağu 2026
- CVE-2026-4943537İzleyin
Keysight IxChariot-related products stack-based buffer overflow
KritikCVSS 9,3İstismar yokEPSS %1keysight · hawkeye4 Ağu 2026
- CVE-2026-6874328İzleyin
Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
YüksekCVSS 7,1İstismar yokEPSS %0fedoraproject · sssd4 Ağu 2026
- CVE-2026-6970228İzleyin
SnailJob 1.7.0 Denial of Service via FuryUtil.deserialize OOM
YüksekCVSS 7,1İstismar yokEPSS %0aizuda · snailjob (snail-job)4 Ağu 2026
- CVE-2026-6970337İzleyin
Atlas-Livre Unauthenticated Access via Admin Controllers Missing Exit
KritikCVSS 9,3İstismar yokEPSS %0maximeamini · atals-livre4 Ağu 2026
- CVE-2026-6970428İzleyin
Atals-Livre SQL Injection via Unsanitized GET Parameter in supp()
YüksekCVSS 7,0İstismar yokEPSS %0maximeamini · atals-livre4 Ağu 2026
- CVE-2026-7047128İzleyin
Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
YüksekCVSS 7,1İstismar yokEPSS %0flowiseai · flowise4 Ağu 2026
- CVE-2026-7047228İzleyin
Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
YüksekCVSS 7,1İstismar yokEPSS %0flowiseai · flowise4 Ağu 2026
- CVE-2026-7047333İzleyin
Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history
YüksekCVSS 8,3İstismar yokEPSS %0flowiseai · flowise4 Ağu 2026
- CVE-2026-7047430İzleyin
Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
YüksekCVSS 7,6İstismar yokEPSS %0flowiseai · flowise4 Ağu 2026
- CVE-2026-1679228İzleyin
Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator
YüksekCVSS 7,0İstismar yokEPSS %0lenovo · xclarity orchestrator4 Ağu 2026
- CVE-2026-1679334İzleyin
Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator
YüksekCVSS 8,7İstismar yokEPSS %0lenovo · xclarity orchestrator4 Ağu 2026
- CVE-2026-1865634İzleyin
Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows
YüksekCVSS 8,5İstismar yokEPSS %0amazon · kiro ide4 Ağu 2026
- CVE-2026-1865734İzleyin
Executable Resolution from Untrusted Project Directory in Kiro CLI on Windows
YüksekCVSS 8,5İstismar yokEPSS %0amazon · kiro cli4 Ağu 2026
- CVE-2026-4768228İzleyin
CVAT: Missing path-containment validation in multiple entry points allows arbitrary path writes
YüksekCVSS 7,1İstismar yokEPSS %0cvat-ai · cvat4 Ağu 2026
- CVE-2026-7047528İzleyin
Flowise: Missing Authorization on Execution Update Endpoint
YüksekCVSS 7,1İstismar yokEPSS %0flowiseai · flowise4 Ağu 2026
- CVE-2026-7047633İzleyin
Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
YüksekCVSS 8,3İstismar yokEPSS %0flowiseai · flowise4 Ağu 2026
- CVE-2026-7047738İzleyin
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
KritikCVSS 9,5İstismar yokEPSS %0flowiseai · flowise4 Ağu 2026
- CVE-2026-7047836İzleyin
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
KritikCVSS 9,2İstismar yokEPSS %0flowiseai · flowise4 Ağu 2026
- CVE-2026-7047930İzleyin
Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader
YüksekCVSS 7,7İstismar yokEPSS %0openwebui · open webui4 Ağu 2026
- CVE-2026-7048121İzleyin
Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
OrtaCVSS 5,4Kavram kanıtıEPSS %0openwebui · open webui4 Ağu 2026
- CVE-2026-7048235İzleyin
Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
YüksekCVSS 8,8İstismar yokEPSS %0openwebui · open webui4 Ağu 2026
- CVE-2026-7048528İzleyin
Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
YüksekCVSS 7,1İstismar yokEPSS %0openwebui · open webui4 Ağu 2026
- CVE-2026-7055237İzleyin
MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php
KritikCVSS 9,3İstismar yokEPSS %0maxsite · maxsite cms4 Ağu 2026
- CVE-2026-7055337İzleyin
MaxSite CMS Unauthenticated RCE via Install Endpoint
KritikCVSS 9,3Kavram kanıtıEPSS %1maxsite · maxsite cms4 Ağu 2026
- CVE-2026-1322728İzleyin
ERPNext v16.25.0 - Improper authorization in Prospect opportunities API
YüksekCVSS 7,1İstismar yokEPSS %0frappe · erpnext4 Ağu 2026
- CVE-2026-1881130İzleyin
H3C NX15 esps add command injection
YüksekCVSS 7,3İstismar yokEPSS %3h3c · nx154 Ağu 2026
- CVE-2026-1881230İzleyin
H3C NX15 esps esps.ipv6.wan command injection
YüksekCVSS 7,3İstismar yokEPSS %3h3c · nx154 Ağu 2026
- CVE-2026-1881330İzleyin
H3C NX15 esps delete command injection
YüksekCVSS 7,3İstismar yokEPSS %3h3c · nx154 Ağu 2026
- CVE-2026-4553839İzleyin
OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name Copy
KritikCVSS 9,8İstismar yokEPSS %0opensips · opensips4 Ağu 2026
- CVE-2026-5140033İzleyin
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within fi
YüksekCVSS 8,4İstismar yokEPSS %0vim · vim4 Ağu 2026
- CVE-2026-5140130İzleyin
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within fi
YüksekCVSS 7,7İstismar yokEPSS %0vim · vim4 Ağu 2026
- CVE-2026-6598634İzleyin
CVAT has stored XSS via annotation guide assets
YüksekCVSS 8,5İstismar yokEPSS %0cvat-ai · cvat4 Ağu 2026
- CVE-2026-6690130İzleyin
Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated URLs taken from the credentials JSON
YüksekCVSS 7,5İstismar yokEPSS %0cjcollier · google::auth4 Ağu 2026
- CVE-2026-6690239İzleyin
Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call
KritikCVSS 9,8İstismar yokEPSS %0cjcollier · google::auth4 Ağu 2026
- CVE-2026-6797936İzleyin
Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execute a
KritikCVSS 9,1İstismar yokEPSS %04 Ağu 2026
- CVE-2026-7049432İzleyin
Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder
YüksekCVSS 8,1İstismar yokEPSS %0openwebui · open webui4 Ağu 2026
- CVE-2026-7055437İzleyin
MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie
KritikCVSS 9,3İstismar yokEPSS %1maxsite · maxsite cms4 Ağu 2026
- CVE-2025-2929640Planlayın
H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R
KritikCVSS 9,8İstismar yokEPSS %24 Ağu 2026
- GHSA-88pr-878c-24wf32İzleyin
Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys
YüksekCVSS 8,0İstismar yoknpm · flowise-components4 Ağu 2026
- CVE-2026-1883034İzleyin
Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API
YüksekCVSS 8,6Kavram kanıtıEPSS %0aws · amazon bedrock agentcore harness4 Ağu 2026
- CVE-2026-1881430İzleyin
H3C NX15 esps reload.reload_config command injection
YüksekCVSS 7,3İstismar yokEPSS %3h3c · nx154 Ağu 2026
- CVE-2026-4508434İzleyin
OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type state
YüksekCVSS 8,7İstismar yokEPSS %0opensips · opensips4 Ağu 2026
- CVE-2026-4510036İzleyin
OpenSIPS: Buffer Overflow in Base64 Encode Transformation
KritikCVSS 9,1İstismar yokEPSS %0opensips · opensips4 Ağu 2026
- CVE-2026-4510330İzleyin
OpenSIPS: SIP Message Smuggling via TCP Content-Length Integer Overflow
YüksekCVSS 7,5İstismar yokEPSS %0opensips · opensips4 Ağu 2026
- CVE-2026-6785530İzleyin
open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UA_ENABLE_GDS_PUSHMANAGEMENT is enabled.
YüksekCVSS 7,5İstismar yokEPSS %04 Ağu 2026
- CVE-2026-6785630İzleyin
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscription, CreateMonitor
YüksekCVSS 7,5İstismar yokEPSS %04 Ağu 2026
- CVE-2026-6785730İzleyin
open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray() in src/client/ua_client_connect.c.
YüksekCVSS 7,5İstismar yokEPSS %04 Ağu 2026
- CVE-2026-6785830İzleyin
Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled thro
YüksekCVSS 7,5İstismar yokEPSS %04 Ağu 2026
- CVE-2026-6785930İzleyin
Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling.
YüksekCVSS 7,5İstismar yokEPSS %04 Ağu 2026
- CVE-2026-6786030İzleyin
open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the mem
YüksekCVSS 7,5İstismar yokEPSS %04 Ağu 2026
- CVE-2026-6786130İzleyin
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the UA_Client_getRemoteDataTypes componen
YüksekCVSS 7,5İstismar yokEPSS %04 Ağu 2026
- CVE-2026-6786230İzleyin
open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src/client/ua_client_highlevel.c.
YüksekCVSS 7,5İstismar yokEPSS %04 Ağu 2026
- CVE-2026-7061934İzleyin
Odysseus Missing Admin Authorization via Embedding Endpoint Routes
YüksekCVSS 8,7İstismar yokEPSS %0odysseus-dev · odysseus4 Ağu 2026
- CVE-2026-4553736İzleyin
OpenSIPS: Global Buffer Overflow in construct_uri
KritikCVSS 9,1İstismar yokEPSS %0opensips · opensips4 Ağu 2026
- CVE-2026-4580934İzleyin
OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URI
YüksekCVSS 8,7İstismar yokEPSS %0opensips · opensips4 Ağu 2026
- CVE-2026-4633434İzleyin
OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS SDP cloning
YüksekCVSS 8,7İstismar yokEPSS %0opensips · opensips4 Ağu 2026
- CVE-2026-1889529İzleyin
UTT HiPER 1250GW APSecurity_5g strcpy stack-based overflow
YüksekCVSS 7,4İstismar yokEPSS %0utt · hiper 1250gw4 Ağu 2026
- CVE-2026-1889729İzleyin
UTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflow
YüksekCVSS 7,4İstismar yokEPSS %0utt · hiper 1250gw4 Ağu 2026
- CVE-2026-1890730İzleyin
PathTravelsal Vulnerability in com.talpa.hibrowser
YüksekCVSS 7,5Kavram kanıtıEPSS %0tecno mobile · hi browser4 Ağu 2026
- CVE-2026-1889829İzleyin
UTT HiPER 1200GW ConfigAdvideo strcpy stack-based overflow
YüksekCVSS 7,4İstismar yokEPSS %0utt · hiper 1200gw5 Ağu 2026
- CVE-2026-1890030İzleyin
H3C NX15 Backend RPC esps file.exec os command injection
YüksekCVSS 7,3İstismar yokEPSS %3h3c · nx155 Ağu 2026
- CVE-2026-1890129İzleyin
H3C NX15 Web API esps service.add routine
YüksekCVSS 7,3İstismar yokEPSS %0h3c · nx155 Ağu 2026
- CVE-2026-1591830İzleyin
VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection
YüksekCVSS 7,5İstismar yokEPSS %0e4jvikwp · vikappointments services booking calendar5 Ağu 2026
- CVE-2026-1614328İzleyin
VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting
YüksekCVSS 7,2İstismar yokEPSS %0e4jvikwp · vikrentitems flexible rental management system5 Ağu 2026
- CVE-2026-1832235İzleyin
Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administrator
YüksekCVSS 8,8Kavram kanıtıEPSS %0supsysticcom · smart popup by supsystic5 Ağu 2026
- CVE-2026-1890230İzleyin
H3C NX15 esps repeaterproc command injection
YüksekCVSS 7,3İstismar yokEPSS %3h3c · nx155 Ağu 2026
- CVE-2026-5570728İzleyin
In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets.
YüksekCVSS 7,1İstismar yokEPSS %0openstack · neutron5 Ağu 2026
- CVE-2026-6625730İzleyin
Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
YüksekCVSS 7,5İstismar yokEPSS %0apache · qpid proton-j5 Ağu 2026
- CVE-2026-6627330İzleyin
Apache Qpid Proton-J: Type size/count handling can lead to excessive allocation pre-authentication
YüksekCVSS 7,5İstismar yokEPSS %0apache · qpid proton-j5 Ağu 2026
- CVE-2026-6683933İzleyin
NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428).
YüksekCVSS 8,4İstismar yokEPSS %0integrated systems technologies, inc. · netkids imark5 Ağu 2026
- CVE-2026-6746530İzleyin
Apache Qpid Proton Dotnet: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
YüksekCVSS 7,5İstismar yokEPSS %0apache · qpid proton-dotnet5 Ağu 2026
- CVE-2026-6755130İzleyin
Apache Qpid Proton Dotnet: Type size/count handling can lead to excessive allocation pre-authentication
YüksekCVSS 7,5İstismar yokEPSS %0apache · qpid proton-dotnet5 Ağu 2026
- CVE-2026-6758830İzleyin
Apache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
YüksekCVSS 7,5İstismar yokEPSS %0apache · qpid protonj25 Ağu 2026
- CVE-2026-6758930İzleyin
Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authentication
YüksekCVSS 7,5İstismar yokEPSS %0apache · qpid protonj25 Ağu 2026
- CVE-2026-6806030İzleyin
Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication
YüksekCVSS 7,5İstismar yokEPSS %0apache · qpid broker-j5 Ağu 2026
- CVE-2026-6807430İzleyin
Apache Qpid Broker-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
YüksekCVSS 7,5İstismar yokEPSS %0apache · qpid broker-j5 Ağu 2026
- CVE-2026-7119034İzleyin
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracki
YüksekCVSS 8,7İstismar yokEPSS %0openstack · swift5 Ağu 2026
- CVE-2026-876135İzleyin
Dokan <= 5.0.2 - Missing Authorization to Authenticated (Vendor+) Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %0dokaninc · dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy5 Ağu 2026
- CVE-2026-927337İzleyin
Membership Plugin – Kadence Memberships <= 4.0.0 - Unauthenticated Password Reset Link Poisoning to Account Takeover
KritikCVSS 9,3İstismar yokEPSS %0stellarwp · membership plugin – kadence memberships5 Ağu 2026
- CVE-2026-1455332İzleyin
Zportals < 6.3.4 - Subscriber+ Arbitrary File Upload
YüksekCVSS 8,1İstismar yokEPSS %0unknown · zportals5 Ağu 2026
- CVE-2026-1521036İzleyin
Login/Signup with Phone Number, OTP Verification < 1.8.71 - Unauthenticated Account Takeover via OTP Brute Force
KritikCVSS 9,1İstismar yokEPSS %0unknown · otp login with phone number, otp verification5 Ağu 2026
- CVE-2026-1523032İzleyin
YayPricing < 3.5.7 - Subscriber+ Pricing Configuration Modification and Coupon Code Disclosure
YüksekCVSS 8,1İstismar yokEPSS %0unknown · yaypricing5 Ağu 2026
- CVE-2026-1536036İzleyin
Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_args
KritikCVSS 9,1İstismar yokEPSS %0unknown · ajax load more5 Ağu 2026
- CVE-2026-1537230İzleyin
WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via Passkeys Provider
YüksekCVSS 7,5İstismar yokEPSS %0unknown · wp 2fa5 Ağu 2026
- CVE-2026-1603630İzleyin
miniOrange 2FA < 6.2.7 - 2FA Bypass via Password-Only Second-Factor Rebinding
YüksekCVSS 7,5İstismar yokEPSS %0unknown · miniorange 2fa5 Ağu 2026
- CVE-2026-1605530İzleyin
Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login
YüksekCVSS 7,5İstismar yokEPSS %0unknown · contest gallery5 Ağu 2026
- CVE-2026-1656130İzleyin
Sunshine Photo Cart < 3.6.12 - Unauthenticated Private Gallery Comment Disclosure
YüksekCVSS 7,5İstismar yokEPSS %0unknown · sunshine photo cart5 Ağu 2026
- CVE-2026-1657330İzleyin
Bit Form < 3.2.0 - Unauthenticated Stored XSS via SVG Signature Upload
YüksekCVSS 7,5İstismar yokEPSS %0unknown · bit form5 Ağu 2026
- CVE-2026-1660230İzleyin
Content Protector (Passster) < 4.3.6 - Unauthenticated Non-Public Post Content Disclosure via Captcha REST Endpoint
YüksekCVSS 7,5İstismar yokEPSS %0unknown · passster5 Ağu 2026
- CVE-2026-1660330İzleyin
Content Protector (Passster) < 4.3.6 - Unauthenticated Category-Locked Content Disclosure via Core REST API
YüksekCVSS 7,5İstismar yokEPSS %0unknown · passster5 Ağu 2026
- CVE-2026-1660430İzleyin
Content Protector (Passster) < 4.3.6 - Unauthenticated Protected Content Disclosure via Content-Lock Block data-content Attribute
YüksekCVSS 7,5İstismar yokEPSS %0unknown · passster5 Ağu 2026
- CVE-2026-1660528İzleyin
MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing Authorization
YüksekCVSS 7,2İstismar yokEPSS %0unknown · multivendorx5 Ağu 2026
- CVE-2026-1673630İzleyin
User Registration & Membership < 5.2.6 - Unauthenticated Account Creation While Registration Disabled
YüksekCVSS 7,5İstismar yokEPSS %0unknown · user registration & membership5 Ağu 2026
- CVE-2026-1694040Planlayın
Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal
KritikCVSS 10,0İstismar yokEPSS %0unknown · custom fields5 Ağu 2026
- CVE-2026-6627430İzleyin
Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow
YüksekCVSS 7,5İstismar yokEPSS %0apache · qpid proton-j5 Ağu 2026