İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.296 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 54 / 73

  • CVE-2026-61397
    30İzleyin

    Apache CloudStack: OAuth2 Token Cross-Request Leak

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · cloudstack21 Ağu 2026

  • CVE-2026-61398
    36İzleyin

    Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI

    KritikCVSS 9,1İstismar yokEPSS %0

    apache · cloudstack21 Ağu 2026

  • CVE-2026-61400
    36İzleyin

    Apache CloudStack: Get and Run Diagnostics Command Injection

    YüksekCVSS 8,8İstismar yokEPSS %2

    apache · cloudstack21 Ağu 2026

  • CVE-2026-62440
    36İzleyin

    Apache CloudStack: Improper access control in Kubernetes Service (CKS) cluster manipulation

    KritikCVSS 9,1İstismar yokEPSS %0

    apache · cloudstack21 Ağu 2026

  • CVE-2026-63046
    35İzleyin

    Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · inlong21 Ağu 2026

  • CVE-2026-66722
    28İzleyin

    Apache CloudStack: ProjectRole & ProjectRolePermission authorization issue

    YüksekCVSS 7,2İstismar yokEPSS %0

    apache · cloudstack21 Ağu 2026

  • CVE-2026-68745
    32İzleyin

    Apache CloudStack: SAML2 Signature Validation Silently Skipped for Cert-less IdP

    YüksekCVSS 8,1İstismar yokEPSS %0

    apache · cloudstack21 Ağu 2026

  • CVE-2026-47827
    30İzleyin

    CVE-2026-47827 – BOSH CLI Powershell Injection

    YüksekCVSS 7,5İstismar yokEPSS %1

    cloud foundry foundation · bosh cli21 Ağu 2026

  • CVE-2026-77751
    35İzleyin

    Path Traversal in MISP Object Template Resolution During STIX Import and Export in misp-stix library

    YüksekCVSS 8,8İstismar yokEPSS %0

    misp · misp-stix21 Ağu 2026

  • CVE-2026-77755
    34İzleyin

    Denial of Service in MISP-STIX Import via Malformed or Oversized STIX Documents in misp-stix library

    YüksekCVSS 8,7İstismar yokEPSS %0

    misp · misp-stix21 Ağu 2026

  • CVE-2026-14208
    29İzleyin

    Local Privilege Escalation via Insecure DLL Permissions in Remote Utilities Host <=7.7.3.0

    YüksekCVSS 7,3İstismar yokEPSS %0

    remote utilities pte. ltd. · remote utilities host21 Ağu 2026

  • CVE-2026-77086
    37İzleyin

    SiYuan before v3.7.4 Path Traversal via packageName

    KritikCVSS 9,4İstismar yokEPSS %1

    siyuan-note · siyuan21 Ağu 2026

  • CVE-2026-77683
    35İzleyin

    Comfast CF-N1-S mbox-config system command injection

    YüksekCVSS 8,6İstismar yokEPSS %2

    comfast · cf-n1-s21 Ağu 2026

  • CVE-2026-77763
    28İzleyin

    JuiceFS Local Filestore Backend Joins Object Keys onto the Storage Root Without a Containment Check, Allowing Writes Outside the Configured Directory

    YüksekCVSS 7,1İstismar yokEPSS %0

    juicedata · juicefs21 Ağu 2026

  • CVE-2026-77767
    34İzleyin

    Reconmap Report Preview Endpoint Is Marked AllowAnonymous, Exposing Every Project and Client Organisation Without Authentication

    YüksekCVSS 8,7İstismar yokEPSS %0

    reconmap · reconmap21 Ağu 2026

  • CVE-2026-77768
    28İzleyin

    OpenPanel report.get Returns Any Report by Identifier Without Checking Project Access

    YüksekCVSS 7,1İstismar yokEPSS %0

    openpanel-dev · openpanel21 Ağu 2026

  • CVE-2026-77769
    28İzleyin

    OpenPanel report.list Queries Reports by an Unverified dashboardId, Crossing Organization Boundaries

    YüksekCVSS 7,1İstismar yokEPSS %0

    openpanel-dev · openpanel21 Ağu 2026

  • CVE-2026-59279
    30İzleyin

    Unbounded persistent session allocation via repeated initialize requests

    YüksekCVSS 7,5İstismar yokEPSS %0

    vmware · spring ai21 Ağu 2026

  • CVE-2026-59318
    39İzleyin

    DefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt Injection

    KritikCVSS 9,8İstismar yokEPSS %0

    vmware · spring ai21 Ağu 2026

  • CVE-2026-77759
    34İzleyin

    IDOR and missing authorization in the Prospero Flow CRM transaction API allow cross-tenant reading of financial records

    YüksekCVSS 8,7İstismar yokEPSS %0

    roskus · prospero flow crm21 Ağu 2026

  • CVE-2026-77775
    30İzleyin

    Headroom Proxy Sends Upstream Requests to a Client-Supplied Base URL Without Address Validation

    YüksekCVSS 7,7İstismar yokEPSS %0

    headroom labs · headroom21 Ağu 2026

  • CVE-2026-77776
    37İzleyin

    Headroom Proxy Treats the Client-Supplied x-headroom-user-id Header as an Authenticated Identity

    KritikCVSS 9,3İstismar yokEPSS %0

    headroom labs · headroom21 Ağu 2026

  • CVE-2026-75115
    28İzleyin

    Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40

    YüksekCVSS 7,0İstismar yokEPSS %0

    yootheme.com · yootheme pro extension for joomla21 Ağu 2026

  • CVE-2026-76612
    34İzleyin

    Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66

    YüksekCVSS 8,6İstismar yokEPSS %0

    yootheme.com · zoo extension for joomla21 Ağu 2026

  • CVE-2026-76613
    34İzleyin

    Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40

    YüksekCVSS 8,6İstismar yokEPSS %0

    yootheme.com · yootheme pro extension for joomla21 Ağu 2026

  • CVE-2026-75946
    32İzleyin

    OMEN Gaming Hub – Potential Escalation of Privilege & Information Disclosure

    YüksekCVSS 8,2İstismar yokEPSS %0

    hp inc · omen gaming hub21 Ağu 2026

  • CVE-2026-77806
    40Planlayın

    SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026.

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    spip · spip21 Ağu 2026

  • CVE-2026-48749
    39İzleyin

    Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image

    KritikCVSS 9,9İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-48750
    39İzleyin

    Incus has an arbitrary file write on host via `exec-output` symlink in crafted image

    KritikCVSS 9,9İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-48751
    39İzleyin

    Incus has a restricted project bypass leading to arbitrary command execution

    KritikCVSS 9,9İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-48752
    39İzleyin

    Incus has arbitrary file read+write on host via templates/ symlink in malicious image

    KritikCVSS 9,9İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-48753
    39İzleyin

    Incus has an arbitrary file write via path traversal in S3 multipart upload

    KritikCVSS 9,9İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-48755
    39İzleyin

    Incus has an argument injection in backup compression algorithm leading to AFW and ACE

    KritikCVSS 9,9İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-48769
    39İzleyin

    Incus has an arbitrary file write on its client due to trusted image hash

    KritikCVSS 9,9İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-55621
    30İzleyin

    Incus has a project restriction bypass for custom volume copy across projects

    YüksekCVSS 7,7İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-55622
    30İzleyin

    Incus has a project restriction bypass in instance copy across projects

    YüksekCVSS 7,7İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-62867
    39İzleyin

    Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution

    KritikCVSS 9,9İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-62940
    39İzleyin

    Incus has a project restriction bypass via instance migration config override

    KritikCVSS 9,9İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-62941
    39İzleyin

    Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge

    KritikCVSS 9,9İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-63125
    39İzleyin

    Incus vulnerable to root RCE via image backup.yaml symlink

    KritikCVSS 9,9İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-63343
    39İzleyin

    Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

    KritikCVSS 9,9İstismar yokEPSS %0

    lxc · incus21 Ağu 2026

  • CVE-2026-77087
    37İzleyin

    Paperclip before 0.3.1 Remote Code Execution via DNS Rebinding

    KritikCVSS 9,4İstismar yokEPSS %0

    paperclipai · paperclip21 Ağu 2026

  • CVE-2026-77812
    37İzleyin

    Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    dji · neo21 Ağu 2026

  • CVE-2026-77814
    34İzleyin

    Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator

    YüksekCVSS 8,7İstismar yokEPSS %0

    zanllp · infinite-image-browsing21 Ağu 2026

  • CVE-2026-77815
    34İzleyin

    Infinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories

    YüksekCVSS 8,7İstismar yokEPSS %0

    zanllp · infinite-image-browsing21 Ağu 2026

  • CVE-2026-22681
    33İzleyin

    OpenViking < 0.3.4 SSRF via /api/v1/resources

    YüksekCVSS 8,3İstismar yokEPSS %0

    volcengine · openviking21 Ağu 2026

  • CVE-2026-54789
    30İzleyin

    mod_auth_openidc has out-of-bounds read and write in state cookie parsing

    YüksekCVSS 7,5İstismar yokEPSS %0

    openidc · mod_auth_openidc21 Ağu 2026

  • CVE-2026-69502
    40Planlayın

    Azure SQL Database Elevation of Privilege Vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    microsoft · azure sql database21 Ağu 2026

  • CVE-2026-75932
    36İzleyin

    Jet Admin tenant isolation failure

    KritikCVSS 9,2İstismar yokEPSS %0

    jet admin · jet admin21 Ağu 2026

  • CVE-2026-75933
    34İzleyin

    Jet Admin Stored XSS

    YüksekCVSS 8,5İstismar yokEPSS %0

    jet admin · jet admin21 Ağu 2026

  • CVE-2026-74580
    35İzleyin

    vhost: reset the vring metadata cache on vring reconfiguration

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    linux · linux21 Ağu 2026

  • CVE-2026-74581
    39İzleyin

    net: ipv6: clear suppressed fib6 rule result

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux21 Ağu 2026

  • CVE-2026-74582
    31İzleyin

    packet: use consistent hard_header_len in non-ring send paths

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux21 Ağu 2026

  • CVE-2026-74583
    31İzleyin

    net/sched: cls_route: fix fastmap use-after-free on filter

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux21 Ağu 2026

  • CVE-2026-17250
    34İzleyin

    Authenticated Remote Code Execution via Stack-Based Buffer Overflow in Firmware Update Handling

    YüksekCVSS 8,5İstismar yokEPSS %0

    tp-link systems inc. · tl-mr6400 v7.021 Ağu 2026

  • CVE-2026-17251
    28İzleyin

    Unauthenticated Denial of Service via Null Pointer Dereference in HTTP Request Parsing

    YüksekCVSS 7,1İstismar yokEPSS %0

    tp-link systems inc. · tl-mr6400 v7.021 Ağu 2026

  • CVE-2026-17252
    28İzleyin

    Unauthenticated Denial of Service via Composed HTTP Parsing and Stack-Based Out-of-Bounds Write Vulnerability in TL-MR6400 Web Management Interface

    YüksekCVSS 7,1İstismar yokEPSS %0

    tp-link systems inc. · tl-mr6400 v7.021 Ağu 2026

  • CVE-2026-41449
    34İzleyin

    UAC < 3.3.0 Command Injection via run_command.sh

    YüksekCVSS 8,5İstismar yokEPSS %1

    tclahr · uac21 Ağu 2026

  • CVE-2026-41450
    34İzleyin

    UAC < 3.3.0 Command Injection via command_collector.sh

    YüksekCVSS 8,5İstismar yokEPSS %1

    tclahr · uac21 Ağu 2026

  • CVE-2026-41451
    34İzleyin

    UAC < 3.3.0 Command Injection via User Substitution in parse_artifact.sh

    YüksekCVSS 8,5İstismar yokEPSS %1

    tclahr · uac21 Ağu 2026

  • CVE-2026-55241
    30İzleyin

    Checkmate: Pre-auth Denial of Service via File Upload on Registration

    YüksekCVSS 7,5İstismar yokEPSS %0

    bluewave-labs · checkmate21 Ağu 2026

  • CVE-2026-62674
    36İzleyin

    Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE

    KritikCVSS 9,0İstismar yokEPSS %0

    omnigent-ai · omnigent21 Ağu 2026

  • CVE-2026-62675
    35İzleyin

    Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools

    YüksekCVSS 8,8İstismar yokEPSS %0

    omnigent-ai · omnigent21 Ağu 2026

  • CVE-2026-62676
    28İzleyin

    Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py

    YüksekCVSS 7,1İstismar yokEPSS %0

    omnigent-ai · omnigent21 Ağu 2026

  • CVE-2026-62677
    35İzleyin

    Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

    YüksekCVSS 8,8İstismar yokEPSS %0

    omnigent-ai · omnigent21 Ağu 2026

  • CVE-2026-71862
    30İzleyin

    Checkmate: Sensitive Bearer Token Exposure via Public Status Pages When showURL Setting is Enabled

    YüksekCVSS 7,5İstismar yokEPSS %0

    bluewave-labs · checkmate21 Ağu 2026

  • CVE-2026-77234
    37İzleyin

    Improper input validation in FreeRTOS-Kernel timer command handling

    KritikCVSS 9,3İstismar yokEPSS %0

    amazon · freertos21 Ağu 2026

  • CVE-2026-77235
    33İzleyin

    Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel

    YüksekCVSS 8,3İstismar yokEPSS %0

    amazon · freertos21 Ağu 2026

  • CVE-2026-77236
    33İzleyin

    Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel

    YüksekCVSS 8,3İstismar yokEPSS %0

    amazon · freertos21 Ağu 2026

  • CVE-2026-77237
    32İzleyin

    Missing type validation in xQueueAddToSet in FreeRTOS-Kernel

    YüksekCVSS 8,2İstismar yokEPSS %0

    amazon · freertos21 Ağu 2026

  • GHSA-486p-g8x4-77mg
    28İzleyin

    Duplicate Advisory: ONNX: TOCTOU arbitrary file read/write in save_external_dat

    YüksekCVSS 7,1İstismar yok

    PyPI · onnx21 Ağu 2026

  • CVE-2026-54071
    31İzleyin

    BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py

    YüksekCVSS 7,8İstismar yokEPSS %0

    funstory-ai · babeldoc21 Ağu 2026

  • CVE-2026-54134
    28İzleyin

    OctoPrint: File exfiltration possible via query parameters on upload endpoints

    YüksekCVSS 7,0İstismar yokEPSS %0

    octoprint · octoprint21 Ağu 2026

  • CVE-2026-54682
    32İzleyin

    DiscordChatExporter: Stored XSS in HTML export when markdown formatting is disabled

    YüksekCVSS 8,2İstismar yokEPSS %0

    tyrrrz · discordchatexporter21 Ağu 2026

  • CVE-2026-63462
    30İzleyin

    Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter

    YüksekCVSS 7,5İstismar yokEPSS %0

    unleash · unleash21 Ağu 2026

  • CVE-2026-27462
    30İzleyin

    Combodo iTop: User enumeration via password reset

    YüksekCVSS 7,5İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-27490
    30İzleyin

    Combodo iTop: Weak secret generation for inline image

    YüksekCVSS 7,5İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-30819
    29İzleyin

    Combodo iTop: Reflected XSS in /pages/ajax.render.php dashboard_id parameter

    YüksekCVSS 7,3İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-30866
    30İzleyin

    Combodo iTop: Insecured access to uploaded images via sniffed url

    YüksekCVSS 7,5İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-50288
    34İzleyin

    @asymmetric-effort/specifyjs: URL parse failure silently allows request

    YüksekCVSS 8,7İstismar yokEPSS %0

    asymmetric-effort · specifyjs21 Ağu 2026

  • CVE-2026-62960
    29İzleyin

    Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows

    YüksekCVSS 7,4İstismar yokEPSS %0

    git-for-windows · git21 Ağu 2026

  • CVE-2026-67358
    21İzleyin

    Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    j2commerce.com · j2store extension for joomla21 Ağu 2026

  • CVE-2026-67359
    34İzleyin

    Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

    YüksekCVSS 8,7İstismar yokEPSS %0

    j2commerce.com · j2store extension for joomla21 Ağu 2026

  • CVE-2026-74252
    34İzleyin

    Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    j2commerce.com · j2store extension for joomla21 Ağu 2026

  • CVE-2026-76876
    32İzleyin

    Craftplan < 0.5.1 Broken Access Control Information Disclosure via Settings API

    YüksekCVSS 8,2İstismar yokEPSS %0

    puemos · craftplan21 Ağu 2026

  • CVE-2026-77810
    37İzleyin

    Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector

    KritikCVSS 9,4İstismar yokEPSS %0

    aws · athena federated query neptune connector21 Ağu 2026

  • CVE-2026-30826
    32İzleyin

    Combodo iTop: Reflected XSS in run_query.php

    YüksekCVSS 8,0İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-30865
    28İzleyin

    Combodo iTop: Reflected XSS in dashboard save

    YüksekCVSS 7,1İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-30890
    32İzleyin

    Combodo iTop: Reflected XSS in synchro/synchro_import.php

    YüksekCVSS 8,0İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-31803
    32İzleyin

    Combodo iTop: Reflected XSS in tag admin

    YüksekCVSS 8,0İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-31880
    32İzleyin

    Combodo iTop: Reflected XSS in universal search

    YüksekCVSS 8,0İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-50538
    35İzleyin

    libvncclient Tight decoder has an attacker-controlled heap out-of-bounds write

    YüksekCVSS 8,8İstismar yokEPSS %0

    libvnc · libvncserver21 Ağu 2026

  • CVE-2026-54457
    30İzleyin

    TensorZero: Arbitrary file read and SSRF in TensorZero Gateway's internal object storage endpoint

    YüksekCVSS 7,7İstismar yokEPSS %0

    tensorzero · tensorzero21 Ağu 2026

  • CVE-2026-55168
    26İzleyin

    Runtipi: Authenticated arbitrary file write via backup restore symlink planting

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    runtipi · runtipi21 Ağu 2026

  • CVE-2026-59989
    36İzleyin

    Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE)

    KritikCVSS 9,2İstismar yokEPSS %0

    phalcon · cphalcon21 Ağu 2026

  • CVE-2026-61539
    40Planlayın

    Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsing

    KritikCVSS 10,0İstismar yokEPSS %1

    xorbitsai · inference21 Ağu 2026

  • CVE-2026-61824
    32İzleyin

    Defuddle: XSS via unescaped attribute interpolation in site extractors

    YüksekCVSS 8,2İstismar yokEPSS %0

    kepano · defuddle21 Ağu 2026

  • CVE-2026-62283
    39İzleyin

    Nezha Monitoring: Cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check

    KritikCVSS 9,9İstismar yokEPSS %0

    nezhahq · nezha21 Ağu 2026

  • CVE-2026-62316
    35İzleyin

    Microsoft UFO: DNS Rebinding → Unauthenticated File Read / Command Execution

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · ufo21 Ağu 2026

  • CVE-2026-63135
    32İzleyin

    YOURLS: Stored XSS in referrer statistics chart via crafted Referer header

    YüksekCVSS 8,2İstismar yokEPSS %0

    yourls · yourls21 Ağu 2026