İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 53 / 73

  • CVE-2026-18824
    35İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · vios20 Ağu 2026

  • CVE-2026-18828
    30İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · vios20 Ağu 2026

  • CVE-2026-18832
    39İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · vios20 Ağu 2026

  • CVE-2026-18835
    39İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    KritikCVSS 9,9İstismar yokEPSS %0

    ibm · vios20 Ağu 2026

  • CVE-2026-18840
    31İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    YüksekCVSS 7,8İstismar yokEPSS %0

    ibm · vios20 Ağu 2026

  • CVE-2026-18842
    31İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    YüksekCVSS 7,8İstismar yokEPSS %0

    ibm · vios20 Ağu 2026

  • CVE-2026-19437
    39İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · vios20 Ağu 2026

  • CVE-2026-19442
    35İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · vios20 Ağu 2026

  • CVE-2026-19446
    30İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    YüksekCVSS 7,5İstismar yokEPSS %1

    ibm · vios20 Ağu 2026

  • CVE-2026-19448
    30İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · vios20 Ağu 2026

  • CVE-2026-19449
    35İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · vios20 Ağu 2026

  • CVE-2026-19783
    31İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    YüksekCVSS 7,8İstismar yokEPSS %0

    ibm · vios20 Ağu 2026

  • CVE-2026-46355
    28İzleyin

    BigBlueButton: Unauthenticated Session Hijack via Exposed /bigbluebutton/api/handleJoinExistingUser

    YüksekCVSS 7,1İstismar yokEPSS %0

    bigbluebutton · bigbluebutton20 Ağu 2026

  • CVE-2026-46682
    34İzleyin

    BigBlueButton: Blind SQL Injection AUTH (Moderator)

    YüksekCVSS 8,5İstismar yokEPSS %0

    bigbluebutton · bigbluebutton20 Ağu 2026

  • CVE-2026-49217
    30İzleyin

    Mailu missing authentication on PATCH /api/v1/token/<id>, which allows unauthenticated removal of IP restrictions

    YüksekCVSS 7,5İstismar yokEPSS %0

    mailu · mailu20 Ağu 2026

  • CVE-2026-55765
    34İzleyin

    CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve

    YüksekCVSS 8,5İstismar yokEPSS %0

    cloudnative-pg · cloudnative-pg20 Ağu 2026

  • CVE-2026-55769
    37İzleyin

    CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path`

    KritikCVSS 9,4İstismar yokEPSS %0

    cloudnative-pg · cloudnative-pg20 Ağu 2026

  • CVE-2026-70105
    30İzleyin

    Microsoft Word Information Disclosure Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    microsoft · microsoft 36520 Ağu 2026

  • CVE-2026-72818
    34İzleyin

    NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input

    YüksekCVSS 8,7İstismar yokEPSS %0

    nltk · nltk20 Ağu 2026

  • CVE-2026-77645
    36İzleyin

    Critical Remote Code Execution (RCE) vulnerability reported in Windchill

    KritikCVSS 9,2İstismar yokEPSS %0

    ptc · windchill pdmlink20 Ağu 2026

  • CVE-2026-77646
    30İzleyin

    Server Side Request Forgery (SSRF) vulnerability reported in Windchill

    YüksekCVSS 7,7İstismar yokEPSS %0

    ptc · windchill pdmlink20 Ağu 2026

  • GHSA-ghvf-qf6h-g8x5
    32İzleyin

    NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution

    YüksekCVSS 8,0İstismar yok

    npm · @nocobase/server20 Ağu 2026

  • GHSA-fm29-4mq3-phg6
    33İzleyin

    Winter: ImportExportController AJAX handlers bypass granular import/export permission gate

    YüksekCVSS 8,3İstismar yok

    Packagist · winter/wn-backend-module20 Ağu 2026

  • CVE-2026-77647
    60Bu hafta

    SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026.

    KritikCVSS 9,8SilahlaştırılmışEPSS %2

    spip · spip20 Ağu 2026

  • CVE-2026-66785
    34İzleyin

    Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack

    YüksekCVSS 8,7İstismar yokEPSS %0

    red hat · red hat advanced cluster management for kubernetes 2.1720 Ağu 2026

  • CVE-2026-66787
    34İzleyin

    Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice ip addresses

    YüksekCVSS 8,7İstismar yokEPSS %0

    red hat · red hat advanced cluster management for kubernetes 2.1720 Ağu 2026

  • CVE-2026-66788
    39İzleyin

    Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label

    KritikCVSS 9,9İstismar yokEPSS %0

    red hat · red hat advanced cluster management for kubernetes 2.1720 Ağu 2026

  • CVE-2026-72852
    34İzleyin

    darknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflow

    YüksekCVSS 8,5İstismar yokEPSS %0

    hank-ai · darknet20 Ağu 2026

  • CVE-2026-77148
    34İzleyin

    Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow

    YüksekCVSS 8,6İstismar yokEPSS %0

    comfast · cf-n1-s20 Ağu 2026

  • CVE-2026-16520
    34İzleyin

    Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genia

    YüksekCVSS 8,7İstismar yokEPSS %0

    genians · genian nac v4.020 Ağu 2026

  • CVE-2026-75910
    28İzleyin

    Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template

    YüksekCVSS 7,1İstismar yokEPSS %0

    aws · athena federated query clickhouse connector deployment template20 Ağu 2026

  • CVE-2026-43798
    39İzleyin

    A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and conten

    KritikCVSS 9,8İstismar yokEPSS %0

    apple · swiftnio ssh20 Ağu 2026

  • CVE-2026-53804
    34İzleyin

    OTRS Community Edition OS Command Injection via PGP Configuration

    YüksekCVSS 8,6İstismar yokEPSS %1

    centuran consulting · otrs community edition20 Ağu 2026

  • CVE-2026-71485
    36İzleyin

    Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends

    KritikCVSS 9,1İstismar yokEPSS %0

    centrifugal · centrifugo20 Ağu 2026

  • CVE-2026-73040
    34İzleyin

    Dockge Path Traversal via Unvalidated Stack Name Allows Arbitrary Compose and .env Disclosure and Arbitrary Directory Deletion

    YüksekCVSS 8,7İstismar yokEPSS %0

    louislam · dockge20 Ağu 2026

  • CVE-2026-74836
    34İzleyin

    HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit

    YüksekCVSS 8,7İstismar yokEPSS %0

    mtrudel · bandit20 Ağu 2026

  • CVE-2026-76017
    35İzleyin

    Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbo

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome20 Ağu 2026

  • CVE-2026-76018
    35İzleyin

    Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentiall

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome20 Ağu 2026

  • CVE-2026-76019
    32İzleyin

    Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer proce

    YüksekCVSS 8,1İstismar yokEPSS %0

    google · chrome20 Ağu 2026

  • CVE-2026-76020
    30İzleyin

    Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    YüksekCVSS 7,5İstismar yokEPSS %0

    google · chrome20 Ağu 2026

  • CVE-2026-76021
    35İzleyin

    Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome20 Ağu 2026

  • CVE-2026-76022
    35İzleyin

    Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome20 Ağu 2026

  • CVE-2026-76023
    35İzleyin

    Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised th

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome20 Ağu 2026

  • CVE-2026-77584
    32İzleyin

    Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams.

    YüksekCVSS 8,2İstismar yokEPSS %0

    torproject · tor20 Ağu 2026

  • CVE-2026-77587
    30İzleyin

    Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set w

    YüksekCVSS 7,5İstismar yokEPSS %0

    torproject · tor20 Ağu 2026

  • CVE-2026-77638
    36İzleyin

    Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersona

    KritikCVSS 9,0İstismar yokEPSS %0

    torproject · tor20 Ağu 2026

  • CVE-2026-77641
    32İzleyin

    tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails.

    YüksekCVSS 8,2İstismar yokEPSS %0

    torproject · tor20 Ağu 2026

  • CVE-2025-52182
    30İzleyin

    The Library Corporation LS2 Admin v5.7 to v5.8.0 was discovered to contain an information disclosure vulnerability.

    YüksekCVSS 7,5İstismar yokEPSS %0

    20 Ağu 2026

  • CVE-2026-49436
    29İzleyin

    LinkAce vulnerable to stored XSS via 'javascript:' URI in Bulk Link API

    YüksekCVSS 7,3İstismar yokEPSS %0

    kovah · linkace20 Ağu 2026

  • CVE-2026-55013
    28İzleyin

    Windows Remote Help Defense Spoofing Vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    microsoft · remote help20 Ağu 2026

  • CVE-2026-55893
    29İzleyin

    Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode

    YüksekCVSS 7,3İstismar yokEPSS %0

    capstone-engine · capstone20 Ağu 2026

  • CVE-2026-62834
    39İzleyin

    Azure Data Factory Elevation of Privilege Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    microsoft · azure data factory20 Ağu 2026

  • CVE-2026-63509
    35İzleyin

    Microsoft Fabric Elevation of Privilege Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    microsoft · fabric20 Ağu 2026

  • CVE-2026-64773
    30İzleyin

    An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount

    YüksekCVSS 7,5İstismar yokEPSS %0

    apple · container20 Ağu 2026

  • CVE-2026-65770
    40Planlayın

    Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

    KritikCVSS 10,0İstismar yokEPSS %1

    microsoft · azure managed instance for apache cassandra20 Ağu 2026

  • CVE-2026-65801
    40Planlayın

    Microsoft Exchange Online Elevation of Privilege Vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    microsoft · exchange online20 Ağu 2026

  • CVE-2026-65816
    40Planlayın

    Azure Arc Elevation of Privilege Vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    microsoft · azure web apps20 Ağu 2026

  • CVE-2026-66309
    36İzleyin

    Azure SQL Database Elevation of Privilege Vulnerability

    KritikCVSS 9,1İstismar yokEPSS %0

    microsoft · azure sql database20 Ağu 2026

  • CVE-2026-66800
    30İzleyin

    Azure Data Factory Information Disclosure Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    microsoft · azure data factory20 Ağu 2026

  • CVE-2026-68782
    39İzleyin

    Azure SQL Database Elevation of Privilege Vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    microsoft · azure sql database20 Ağu 2026

  • CVE-2026-68789
    39İzleyin

    Azure SQL Database Elevation of Privilege Vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    microsoft · azure sql database20 Ağu 2026

  • CVE-2026-69400
    38İzleyin

    Azure Logic Apps Elevation of Privilege Vulnerability

    KritikCVSS 9,6İstismar yokEPSS %0

    microsoft · azure logic apps20 Ağu 2026

  • CVE-2026-69419
    35İzleyin

    Azure Data Manager for Energy Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · azure data manager for energy20 Ağu 2026

  • CVE-2026-69519
    34İzleyin

    Azure Stack HCI Information Disclosure Vulnerability

    YüksekCVSS 8,6İstismar yokEPSS %1

    microsoft · azure stack hci20 Ağu 2026

  • CVE-2026-69543
    34İzleyin

    Azure Virtual Machines Elevation of Privilege Vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    microsoft · azure virtual machines20 Ağu 2026

  • CVE-2026-69555
    40Planlayın

    Azure Arc Elevation of Privilege Vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    microsoft · azure arc20 Ağu 2026

  • CVE-2026-69558
    34İzleyin

    Microsoft Partner Center Information Disclosure Vulnerability

    YüksekCVSS 8,6İstismar yokEPSS %0

    microsoft · partner center20 Ağu 2026

  • CVE-2026-69836
    40Planlayın

    Microsoft Entra ID Remote Code Execution Vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    microsoft · entra id20 Ağu 2026

  • CVE-2026-69851
    39İzleyin

    Microsoft Entra ID Elevation of Privilege Vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    microsoft · entra id20 Ağu 2026

  • CVE-2026-72843
    37İzleyin

    EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover

    KritikCVSS 9,3İstismar yokEPSS %0

    evershopcommerce · evershop20 Ağu 2026

  • CVE-2026-72848
    30İzleyin

    langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery

    YüksekCVSS 7,7İstismar yokEPSS %0

    langchain-ai · langchain-community20 Ağu 2026

  • CVE-2026-77642
    37İzleyin

    tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type

    KritikCVSS 9,3İstismar yokEPSS %0

    torproject · tor20 Ağu 2026

  • CVE-2026-77644
    37İzleyin

    Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition

    KritikCVSS 9,3İstismar yokEPSS %0

    ptc · windchill risk and reliability enterprise edition (formerly relex)20 Ağu 2026

  • CVE-2026-77113
    26İzleyin

    Path Traversal Vulnerability in apport-unpack

    OrtaCVSS 6,7Kavram kanıtıEPSS %0

    canonical · apport20 Ağu 2026

  • CVE-2026-65644
    30İzleyin

    Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6, 8.3.8, 8.2.8, 8.1.8, and 7.10.15 has a REST API endpoint POST /api/v1/live

    YüksekCVSS 7,5İstismar yokEPSS %0

    rocket.chat · rocket.chat21 Ağu 2026

  • CVE-2026-77649
    39İzleyin

    The internment crate 0.8.7 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a r

    KritikCVSS 9,8İstismar yokEPSS %0

    droundy · internment21 Ağu 2026

  • CVE-2026-77650
    39İzleyin

    The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it ha

    KritikCVSS 9,8İstismar yokEPSS %0

    droundy · append-only-vec21 Ağu 2026

  • CVE-2026-77651
    39İzleyin

    The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a ro

    KritikCVSS 9,8İstismar yokEPSS %0

    droundy · arrayref21 Ağu 2026

  • CVE-2026-76155
    37İzleyin

    Datiphy Data Management Center - Use of Default Credentials

    KritikCVSS 9,3İstismar yokEPSS %0

    datiphy inc. · data management center21 Ağu 2026

  • CVE-2026-76156
    37İzleyin

    Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command

    KritikCVSS 9,4İstismar yokEPSS %1

    datiphy inc. · data management center21 Ağu 2026

  • CVE-2026-76157
    35İzleyin

    Datiphy Data Management Center - Missing Authentication for Critical Function

    YüksekCVSS 8,8İstismar yokEPSS %0

    datiphy inc. · data management center21 Ağu 2026

  • CVE-2026-73267
    30İzleyin

    Clusterclaims-controller: managedcluster deletion keyed solely on clusterclaim.spec.namespace with no local ownership check

    YüksekCVSS 7,7İstismar yokEPSS %0

    red hat · multicluster engine for kubernetes 2.121 Ağu 2026

  • CVE-2026-76158
    37İzleyin

    Datiphy Data Management Center - External Control of File Name or Path

    KritikCVSS 9,3İstismar yokEPSS %0

    datiphy inc. · data management center21 Ağu 2026

  • CVE-2026-18409
    28İzleyin

    WPForms Pro <= 2.0.0.2 - Unauthenticated Stored Cross-Site Scripting via Single Line Text and Paragraph Text Field Values

    YüksekCVSS 7,2İstismar yokEPSS %0

    wpforms · wpforms pro21 Ağu 2026

  • CVE-2026-45199
    31İzleyin

    GPU DDK - rgxfw_to_ptr() does not reject FW private data pointers

    YüksekCVSS 7,8İstismar yokEPSS %0

    imagination technologies · graphics ddk21 Ağu 2026

  • CVE-2026-45201
    31İzleyin

    GPU DDK - Incorrect page size validation in PhysmemNewRamBackedPMR could lead to OOB read and/or write of arbitrary physical memory

    YüksekCVSS 7,8İstismar yokEPSS %0

    imagination technologies · graphics ddk21 Ağu 2026

  • CVE-2026-13736
    21İzleyin

    NewPath WildApricotPress Add-on – Member Directory <= 1.0.0 - Unauthenticated Member PII Disclosure via REST API

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    unknown · newpath wildapricotpress add-on21 Ağu 2026

  • CVE-2026-16576
    28İzleyin

    Dokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST API

    YüksekCVSS 7,2İstismar yokEPSS %0

    unknown · dokan: ai powered woocommerce multivendor marketplace solution21 Ağu 2026

  • CVE-2026-18781
    32İzleyin

    Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass

    YüksekCVSS 8,1İstismar yokEPSS %0

    unknown · drag and drop multiple file upload for contact form 721 Ağu 2026

  • CVE-2026-75796
    28İzleyin

    AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools

    YüksekCVSS 7,2İstismar yokEPSS %0

    unknown · ai engine21 Ağu 2026

  • CVE-2026-16323
    30İzleyin

    Authentication Bypass via Execution After Redirect in FuyaSoft's Architect Panel Web Management Panel

    YüksekCVSS 7,5İstismar yokEPSS %0

    fuyaweb internet and informatics services · architectpanel web admin panel21 Ağu 2026

  • CVE-2026-77264
    39İzleyin

    Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure

    KritikCVSS 9,8İstismar yokEPSS %0

    101gen · automation web platform – notifications and otp for woocommerce, advanced country code21 Ağu 2026

  • CVE-2026-47359
    36İzleyin

    Apache CloudStack: OS Command Injection due to unsanitized mount command

    YüksekCVSS 8,8İstismar yokEPSS %2

    apache · cloudstack21 Ağu 2026

  • CVE-2026-50112
    35İzleyin

    Apache CloudStack: RCE and SSRF in direct download, metalink and NFS templates

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · cloudstack21 Ağu 2026

  • CVE-2026-50222
    30İzleyin

    Apache CloudStack: Improper access control in Userdata reference APIs

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · cloudstack21 Ağu 2026

  • CVE-2026-59085
    36İzleyin

    Apache CloudStack: Server-Side Request Forgery (SSRF) vulnerability in webhook module

    KritikCVSS 9,1İstismar yokEPSS %0

    apache · cloudstack21 Ağu 2026

  • CVE-2026-59655
    30İzleyin

    Apache CloudStack: Unauthenticated OAuth provider client-secret disclosure

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · cloudstack21 Ağu 2026

  • CVE-2026-59657
    30İzleyin

    Apache CloudStack: Sensitive Information Disclosure via Cleartext Storage in AsyncJob

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · cloudstack21 Ağu 2026

  • CVE-2026-59780
    30İzleyin

    Apache CloudStack: LDAP provider configuration disclosure

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · cloudstack21 Ağu 2026

  • CVE-2026-59799
    35İzleyin

    Apache CloudStack: Missing Privilege Check in Two-Factor Authentication Disable Flow

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · cloudstack21 Ağu 2026