İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 55 / 73

  • CVE-2026-63421
    30İzleyin

    Keystone: `graphql.maxTake` bypass with negative `take`

    YüksekCVSS 7,5İstismar yokEPSS %0

    keystonejs · keystone21 Ağu 2026

  • CVE-2026-64679
    32İzleyin

    Atlantis: Path Traversal in Atlantis Workspace Handling Allows Out-of-Bounds Directory Deletion/Creation

    YüksekCVSS 8,1İstismar yokEPSS %0

    runatlantis · atlantis21 Ağu 2026

  • CVE-2026-68508
    31İzleyin

    Hydra: hydra.utils.instantiate with untrusted config can lead to code execution

    YüksekCVSS 7,8İstismar yokEPSS %0

    facebookresearch · hydra21 Ağu 2026

  • CVE-2026-69224
    30İzleyin

    information disclosure vulnerability in Esri Portal for ArcGIS

    YüksekCVSS 7,5İstismar yokEPSS %0

    esri · portal for arcgis21 Ağu 2026

  • CVE-2026-69225
    30İzleyin

    information disclosure vulnerability in Esri Portal for ArcGIS

    YüksekCVSS 7,5İstismar yokEPSS %0

    esri · portal for arcgis21 Ağu 2026

  • CVE-2026-76904
    40Planlayın

    GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    geotools · geotools21 Ağu 2026

  • CVE-2026-76905
    30İzleyin

    kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS

    YüksekCVSS 7,5İstismar yokEPSS %0

    getkin · kin-openapi21 Ağu 2026

  • CVE-2026-77220
    28İzleyin

    PDFio < 1.6.5 Dangling Pointer via Dictionary String-Formatting

    YüksekCVSS 7,1İstismar yokEPSS %0

    michaelrsweet · pdfio21 Ağu 2026

  • CVE-2026-77354
    34İzleyin

    kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding

    YüksekCVSS 8,7İstismar yokEPSS %0

    getkin · kin-openapi21 Ağu 2026

  • CVE-2026-77413
    37İzleyin

    JSONata: Arbitrary Code Execution via crafted JSONata expressions

    KritikCVSS 9,3İstismar yokEPSS %0

    jsonata-js · jsonata21 Ağu 2026

  • CVE-2026-77414
    37İzleyin

    JSONata: Arbitrary Code Execution via crafted JSONata expressions

    KritikCVSS 9,3İstismar yokEPSS %0

    jsonata-js · jsonata21 Ağu 2026

  • CVE-2026-77415
    37İzleyin

    JSONata: Arbitrary Code Execution via crafted JSONata expressions

    KritikCVSS 9,3İstismar yokEPSS %0

    jsonata-js · jsonata21 Ağu 2026

  • CVE-2026-31936
    35İzleyin

    Combodo iTop: Unauthorized access to object information via search operation

    YüksekCVSS 8,8İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-33240
    35İzleyin

    Combodo iTop: Reflected XSS in foreign key search criteria

    YüksekCVSS 8,8İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-34741
    34İzleyin

    Combodo iTop: Authentication bypass in exec.php allows PHP file execution

    YüksekCVSS 8,6İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-49849
    36İzleyin

    xShop: Unrestricted File Upload in File Attachment Module in Admin panel leads to Arbitrary Code Execution

    KritikCVSS 9,1İstismar yokEPSS %0

    4xmen · xshop21 Ağu 2026

  • CVE-2026-53527
    35İzleyin

    LeafWiki Vulnerable to Privilege Escalation via User Self-Service Update

    YüksekCVSS 8,8İstismar yokEPSS %0

    perber · leafwiki21 Ağu 2026

  • CVE-2026-53528
    35İzleyin

    FileWiki has path traversal in RenameAsset via unsanitized oldFilename parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    perber · leafwiki21 Ağu 2026

  • CVE-2026-53530
    34İzleyin

    ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)

    YüksekCVSS 8,7İstismar yokEPSS %0

    erweixin · ratex21 Ağu 2026

  • CVE-2026-34948
    30İzleyin

    Combodo iTop: Access control bypass via OQL joins

    YüksekCVSS 7,7İstismar yokEPSS %0

    combodo · itop21 Ağu 2026

  • CVE-2026-47735
    28İzleyin

    Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks

    YüksekCVSS 7,1İstismar yokEPSS %0

    basekick-labs · arc21 Ağu 2026

  • CVE-2026-48050
    35İzleyin

    Arc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS

    YüksekCVSS 8,8İstismar yokEPSS %0

    basekick-labs · arc21 Ağu 2026

  • CVE-2026-48105
    33İzleyin

    Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide path-traversal worm primitive

    YüksekCVSS 8,3İstismar yokEPSS %0

    basekick-labs · arc21 Ağu 2026

  • CVE-2026-48106
    33İzleyin

    Arc Enterprise cluster replication accepts unauthenticated MsgReplicateSync messages, enabling cluster-wide data injection from any TLS-trusted peer

    YüksekCVSS 8,3İstismar yokEPSS %0

    basekick-labs · arc21 Ağu 2026

  • CVE-2026-49360
    31İzleyin

    Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

    YüksekCVSS 7,8İstismar yokEPSS %1

    datarecce · recce21 Ağu 2026

  • CVE-2026-53499
    28İzleyin

    FORT-validator Vulnerable to RRDP Shared Snapshot Cache Poisoning

    YüksekCVSS 7,2İstismar yokEPSS %0

    nicmx · fort-validator21 Ağu 2026

  • CVE-2026-53525
    29İzleyin

    WeeChat has Non-Constant-Time Password Hash Comparison in Relay Authentication

    YüksekCVSS 7,4İstismar yokEPSS %0

    weechat · weechat21 Ağu 2026

  • CVE-2026-77781
    30İzleyin

    Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys

    YüksekCVSS 7,5İstismar yokEPSS %0

    22 Ağu 2026

  • CVE-2026-19883
    35İzleyin

    WPeMatico RSS Feed Fetcher <= 2.8.24 - Authenticated (Subscriber+) Privilege Escalation via Arbitrary Option Update to wpematico_import_settings admin_action

    YüksekCVSS 8,8İstismar yokEPSS %0

    etruel · wpematico rss feed fetcher22 Ağu 2026

  • CVE-2026-18052
    32İzleyin

    ManageWP Worker < 4.9.37 - Unauthenticated Authentication Bypass via Unsigned Auto-Login Parameters

    YüksekCVSS 8,1İstismar yokEPSS %0

    unknown · managewp worker22 Ağu 2026

  • CVE-2026-19221
    28İzleyin

    Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite

    YüksekCVSS 7,2İstismar yokEPSS %0

    unknown · forminator forms22 Ağu 2026

  • CVE-2026-76789
    35İzleyin

    Slider Hero < 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider Handlers

    YüksekCVSS 8,8İstismar yokEPSS %0

    unknown · slider hero with video background, animation22 Ağu 2026

  • CVE-2026-76793
    32İzleyin

    Firebase Authentication < 1.7.1 - Unauthenticated Account Takeover via Firebase Email Claim

    YüksekCVSS 8,1İstismar yokEPSS %0

    unknown · firebase authentication22 Ağu 2026

  • CVE-2026-77000
    39İzleyin

    WP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · wp social media login22 Ağu 2026

  • CVE-2026-77001
    39İzleyin

    Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · social login & sharing buttons with analytics by soclever22 Ağu 2026

  • CVE-2026-77002
    39İzleyin

    SmilePass Selfie Login <= 1.0.2 - Unauthenticated Authentication Bypass

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · smilepass selfie login22 Ağu 2026

  • CVE-2026-12710
    37İzleyin

    Missing Authorization in Application Integration QueryEngineTask

    KritikCVSS 9,3İstismar yokEPSS %0

    google cloud · application integration22 Ağu 2026

  • CVE-2026-78003
    39İzleyin

    Mailgun for WordPress <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys

    KritikCVSS 9,8İstismar yokEPSS %0

    mailgun · mailgun for wordpress22 Ağu 2026

  • CVE-2026-77946
    37İzleyin

    TRENDnet TEW-821DAP NTP Timezone Configuration apply_time.cgi uci_safe_get stack-based overflow

    KritikCVSS 9,3İstismar yokEPSS %1

    trendnet · tew-821dap22 Ağu 2026

  • CVE-2026-66916
    27İzleyin

    Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    joomgalleryfriends.net · joomgallery extension for joomla22 Ağu 2026

  • CVE-2026-66917
    34İzleyin

    Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    joomgalleryfriends.net · joomgallery extension for joomla22 Ağu 2026

  • CVE-2026-57998
    34İzleyin

    better-npm-audit OS Command Injection via registry flag

    YüksekCVSS 8,5İstismar yokEPSS %0

    jeemok · better-npm-audit22 Ağu 2026

  • CVE-2026-58002
    28İzleyin

    WWBN AVideo Authorization Bypass via Users_affiliations add.json.php

    YüksekCVSS 7,1İstismar yokEPSS %0

    wwbn · avideo22 Ağu 2026

  • CVE-2026-58003
    28İzleyin

    WWBN AVideo Cross-Site Request Forgery via releaseVideoNow.json.php

    YüksekCVSS 7,1İstismar yokEPSS %0

    wwbn · avideo22 Ağu 2026

  • CVE-2026-59256
    34İzleyin

    WWBN AVideo Unbound Token Authorization Bypass via Gallery

    YüksekCVSS 8,7İstismar yokEPSS %0

    wwbn · avideo22 Ağu 2026

  • CVE-2026-59808
    34İzleyin

    AVideo Authentication Bypass via Unkeyed Video Hash Disclosure

    YüksekCVSS 8,7İstismar yokEPSS %0

    wwbn · avideo22 Ağu 2026

  • CVE-2026-60084
    33İzleyin

    SiYuan before v3.7.4 Arbitrary File Deletion via removeTemplate

    YüksekCVSS 8,4İstismar yokEPSS %0

    siyuan-note · siyuan22 Ağu 2026

  • CVE-2026-62243
    34İzleyin

    Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass

    YüksekCVSS 8,7İstismar yokEPSS %0

    netty · netty22 Ağu 2026

  • CVE-2026-62382
    27İzleyin

    PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    pglombardo · passwordpusher22 Ağu 2026

  • CVE-2026-2996
    30İzleyin

    Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.21 - Unauthenticated Improper Input Validation to Price Bypass via Add-to-Cart POST Request

    YüksekCVSS 7,5İstismar yokEPSS %0

    maartenbelmans · advanced product fields (product addons) for woocommerce22 Ağu 2026

  • CVE-2026-71513
    34İzleyin

    NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass

    YüksekCVSS 8,7İstismar yokEPSS %1

    nltk · nltk22 Ağu 2026

  • CVE-2026-75866
    36İzleyin

    Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads

    KritikCVSS 9,1İstismar yokEPSS %0

    22 Ağu 2026

  • CVE-2026-75870
    36İzleyin

    Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret

    KritikCVSS 9,1İstismar yokEPSS %0

    22 Ağu 2026

  • CVE-2026-62384
    34İzleyin

    NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2

    YüksekCVSS 8,7İstismar yokEPSS %0

    nltk · nltk22 Ağu 2026

  • CVE-2026-62385
    32İzleyin

    NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers

    YüksekCVSS 8,2İstismar yokEPSS %0

    nltk · nltk22 Ağu 2026

  • CVE-2026-62388
    34İzleyin

    NLTK before 3.10.0 Insecure Default Configuration in pathsec.py

    YüksekCVSS 8,7İstismar yokEPSS %0

    nltk · nltk22 Ağu 2026

  • CVE-2026-63312
    34İzleyin

    NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read

    YüksekCVSS 8,7İstismar yokEPSS %0

    nltk · nltk22 Ağu 2026

  • CVE-2026-65915
    28İzleyin

    NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer

    YüksekCVSS 7,1İstismar yokEPSS %0

    nltk · nltk22 Ağu 2026

  • CVE-2026-66393
    34İzleyin

    NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder

    YüksekCVSS 8,7İstismar yokEPSS %0

    nltk · nltk22 Ağu 2026

  • CVE-2026-68766
    34İzleyin

    hashcat through 7.1.2 Arbitrary File Write via Restore File Option Injection

    YüksekCVSS 8,5İstismar yokEPSS %0

    hashcat · hashcat22 Ağu 2026

  • CVE-2026-70626
    34İzleyin

    NLTK before 3.9.4 Symlink Escape via CorpusReader

    YüksekCVSS 8,6İstismar yokEPSS %0

    nltk · nltk22 Ağu 2026

  • CVE-2026-74584
    28İzleyin

    RDMA/bnxt_re: zero shared page before exposing to userspace

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-76571
    37İzleyin

    Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2

    KritikCVSS 9,3İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla22 Ağu 2026

  • CVE-2026-76596
    34İzleyin

    Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2

    YüksekCVSS 8,7İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla22 Ağu 2026

  • CVE-2026-76597
    34İzleyin

    Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2

    YüksekCVSS 8,7İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla22 Ağu 2026

  • CVE-2026-76598
    34İzleyin

    Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2

    YüksekCVSS 8,7İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla22 Ağu 2026

  • CVE-2026-76599
    34İzleyin

    Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2

    YüksekCVSS 8,7İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla22 Ağu 2026

  • CVE-2026-76602
    37İzleyin

    Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2

    KritikCVSS 9,3İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla22 Ağu 2026

  • CVE-2026-76604
    40Planlayın

    Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2

    KritikCVSS 10,0İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla22 Ağu 2026

  • CVE-2026-76605
    40Planlayın

    Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2

    KritikCVSS 10,0İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla22 Ağu 2026

  • CVE-2026-76606
    40Planlayın

    Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2

    KritikCVSS 10,0İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla22 Ağu 2026

  • CVE-2026-76607
    40Planlayın

    Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2

    KritikCVSS 10,0İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla22 Ağu 2026

  • CVE-2026-77027
    34İzleyin

    Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2

    YüksekCVSS 8,6İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla22 Ağu 2026

  • CVE-2026-77992
    38İzleyin

    Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2

    KritikCVSS 9,5İstismar yokEPSS %0

    fabrikar.com · fabrik extension for joomla22 Ağu 2026

  • Duplicate Advisory: [CWE-1188] Default ENFORCE=False Disables All pathsec Security Controls

    YüksekCVSS 7,5İstismar yok

    PyPI · nltk22 Ağu 2026

  • Duplicate Advisory: Security Report: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read

    YüksekCVSS 7,5İstismar yok

    PyPI · nltk22 Ağu 2026

  • Duplicate Advisory: Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS

    YüksekCVSS 7,5İstismar yok

    PyPI · nltk22 Ağu 2026

  • Duplicate Advisory: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)

    YüksekCVSS 7,5İstismar yok

    PyPI · nltk22 Ağu 2026

  • CVE-2026-4703
    39İzleyin

    WS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission

    KritikCVSS 9,8İstismar yokEPSS %0

    westguard · ws form lite – drag & drop contact form builder22 Ağu 2026

  • CVE-2026-74586
    39İzleyin

    sctp: clear new_transport when removing a peer

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74587
    39İzleyin

    sctp: fix use-after-free of cached ASCONF chunk

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74588
    39İzleyin

    sctp: keep chunk->transport in step with the list it is queued on

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74589
    33İzleyin

    bpf, sockmap: Fix sk_redir use-after-free in send verdict

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74590
    31İzleyin

    fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74591
    39İzleyin

    mm/filemap: __filemap_add_folio() restore index before retrying

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74592
    32İzleyin

    ima: Instantiate file_truncate and path_truncate hooks

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74594
    31İzleyin

    sched/psi: Shut down rtpoll_timer in psi_cgroup_free()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74595
    31İzleyin

    fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74597
    39İzleyin

    ip6_tunnel: clear skb2->cb[] in ip6ip6_err()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74598
    30İzleyin

    ipv6: fix Route Information option length validation

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74601
    31İzleyin

    ring-buffer: Use current_context for safe per-CPU buffer swap

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74603
    28İzleyin

    ptp: ocp: Fix board ID over-read

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74604
    33İzleyin

    Revert "thermal/drivers/hwmon: Cleanup coding style a bit"

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74605
    31İzleyin

    eventfs: Use children field for rcu head and add memory barriers

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74606
    31İzleyin

    eventfs: Fix use-after-free in eventfs_remove_rec()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74607
    35İzleyin

    KVM: SVM: Serialize accesses to the owner and mirror list with separate lock

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74608
    39İzleyin

    smb: client: Fix use-after-free in cifs_try_adding_channels()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74609
    31İzleyin

    tipc: read le->link under the node lock in tipc_node_link_down()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74610
    31İzleyin

    tls: don't leave a full plaintext sk_msg ring unpushed

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74611
    39İzleyin

    tls: rx: restore msg_iter before TLS 1.3 optimistic retry

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026