İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.295 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 56 / 73

  • CVE-2026-74612
    40Planlayın

    veth: fix skb length accounting after XDP frag adjustment

    KritikCVSS 10,0İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74613
    31İzleyin

    vsock/virtio: avoid refilling the RX queue after teardown

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74614
    33İzleyin

    vsock/virtio: read virtqueues under worker locks

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74615
    35İzleyin

    vxlan: do not arm the ageing timer on a device that is down

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74616
    39İzleyin

    xdp: reject clones that overrun skb_shared_info tailroom

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74617
    39İzleyin

    dibs: initialise dibs->lock in dibs_dev_alloc()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74621
    30İzleyin

    net/sched: act_ct: fix sk_buff leak when the header checks reject a packet

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74624
    30İzleyin

    netfilter: nf_conntrack: defer invalid log until after unlock

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74625
    30İzleyin

    netfilter: bridge: release template ct on non-IP path

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74626
    30İzleyin

    NTB: ntb_netdev: Preserve RX queue depth on allocation failure

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74627
    31İzleyin

    net: devmem: prevent net-iov / page mixing

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74628
    39İzleyin

    net/x25: fix use-after-free of the socket by its timers

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74629
    35İzleyin

    net/dibs: Correct freeing of dmb_clientid_arr

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74630
    31İzleyin

    ipv6: prevent in6_dev_get() from resurrecting inet6_dev

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74631
    33İzleyin

    net: smc: fix splice entry lifetime imbalance in smc_rx_splice

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74632
    31İzleyin

    mm/huge_memory: fix huge_zero_pfn race

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74634
    31İzleyin

    ring-buffer: Prevent subbuf order change when resizing is disabled

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74635
    31İzleyin

    fbdev: bitblit: bound-check glyph index in bit_cursor()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74637
    31İzleyin

    perf/core: Fix group leader use-after-free after sibling detach

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74640
    31İzleyin

    ALSA: FCP: fix OOB write in fcp_meter_ctl_get()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74641
    31İzleyin

    ALSA: usx2y: bound the hwdep mmap fault offset

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74646
    31İzleyin

    misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74647
    31İzleyin

    misc: fastrpc: Remove buffer from list prior to unmap operation

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74648
    31İzleyin

    staging: rtl8723bs: validate monitor transmit frame lengths

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74649
    35İzleyin

    staging: rtl8723bs: fix missing shared-key auth challenge length check

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74651
    32İzleyin

    staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74652
    31İzleyin

    serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74655
    35İzleyin

    serial: qcom-geni: fix TX DMA buffer flush

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74656
    31İzleyin

    ipv4: fix use-after-free in fib_nhc_update_mtu()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74660
    31İzleyin

    netfilter: ebt_nflog: pin the NFLOG backend

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74661
    31İzleyin

    mac802154: fix netdev use-after-free in beacon worker

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74662
    39İzleyin

    inet: frags: publish queues before arming timer

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74663
    31İzleyin

    net/sched: reject overly deep qdisc hierarchies

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74665
    36İzleyin

    net: fix skb length accounting after generic XDP frag adjustment

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74666
    31İzleyin

    packet: synchronize pressure clearing with ring reconfiguration

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74667
    31İzleyin

    net/packet: reset the MAC header on the packet-socket transmit path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74668
    31İzleyin

    packet: use consistent hard_header_len in TX_RING send path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74669
    39İzleyin

    ipvs: clear IPv4 options after rebasing tunnel ICMP errors

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74670
    31İzleyin

    ipvs: stop estimator after disabled calc phase

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74674
    31İzleyin

    mm: fix incorrect flush address in direct page table reclaim

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74675
    31İzleyin

    vt: stabilize tty reference in kbd_keycode with tty_port_tty_get

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74678
    30İzleyin

    net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74684
    28İzleyin

    net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74687
    31İzleyin

    watchdog: at91sam9_wdt: prevent timer rearm during teardown

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74688
    39İzleyin

    sctp: clear control chunk transport if it is being removed

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74689
    28İzleyin

    net/atm: fix slab-out-of-bounds read in vcc_setsockopt()

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74690
    33İzleyin

    s390/ism: Fix UAF of sba and ieq during ism_dev_exit()

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74691
    35İzleyin

    net: thunderbolt: Tear down DMA paths before stopping the rings

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74692
    30İzleyin

    net/smc: fix TOCTOU race between smc_listen_out() and listener close

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74695
    30İzleyin

    netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74696
    30İzleyin

    tcp: fix TFO max_qlen accounting across reuseport migration

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74697
    32İzleyin

    bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74700
    31İzleyin

    net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74701
    31İzleyin

    net/openvswitch: check Ethernet header length in key_extract()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74702
    35İzleyin

    vhost-scsi: reject feature changes after endpoint

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74703
    28İzleyin

    vhost-scsi: Validate T10 PI scatterlist counts

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74704
    32İzleyin

    net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74705
    40Planlayın

    udp: fix potential use-after-free in tunnel segmentation

    KritikCVSS 10,0İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74707
    31İzleyin

    xsk: validate metadata when processing requests

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74708
    31İzleyin

    xsk: validate launch-time metadata size

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74710
    31İzleyin

    xsk: require at least 16 bytes of TX metadata

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74711
    33İzleyin

    hwmon: (pmbus) Fix type confusion in notification logic

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74712
    37İzleyin

    vdpa/mlx5: Fix buffer length in create_direct_keys()

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74713
    28İzleyin

    vhost_iotlb: bound map allocation in add_range

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74714
    31İzleyin

    bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74715
    31İzleyin

    bpf: Fix netns reference imbalance in conntrack kfuncs

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74717
    30İzleyin

    net/mlx5: fw_tracer, return NULL on create error

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74720
    31İzleyin

    bpf: Preserve pointer state for commuted arithmetic

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74721
    31İzleyin

    accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74723
    39İzleyin

    btrfs: lzo: reject inline extents without valid headers

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74724
    31İzleyin

    ipvs: avoid out-of-bounds write in ip_vs_nat_icmp

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74725
    31İzleyin

    enic: fix tx_hang_reset use-after-free on device removal

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74726
    29İzleyin

    bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74727
    39İzleyin

    ovpn: skip rehash for peers already removed from by_id

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74730
    39İzleyin

    NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74731
    31İzleyin

    sched_ext: Skip sub-disable teardown for never-linked sub-schedulers

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-74733
    31İzleyin

    gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux22 Ağu 2026

  • CVE-2026-47895
    30İzleyin

    In strongSwan before 6.0.7, identity parsing/cloning is mishandled.

    YüksekCVSS 7,5İstismar yokEPSS %0

    strongswan · strongswan22 Ağu 2026

  • CVE-2026-78122
    33İzleyin

    docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems

    YüksekCVSS 8,3Kavram kanıtıEPSS %0

    tecnativa · docker-socket-proxy22 Ağu 2026

  • CVE-2026-0551
    35İzleyin

    PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles

    YüksekCVSS 8,8İstismar yokEPSS %0

    buildwps · ppwp – password protect pages23 Ağu 2026

  • CVE-2026-16149
    35İzleyin

    Security Hardener <= 2.4.4 - Authenticated (Subscriber+) Privilege Escalation via REST API '/wp/v2/users' permission_callback Overwrite

    YüksekCVSS 8,8İstismar yokEPSS %0

    marc4 · security hardener23 Ağu 2026

  • CVE-2026-78050
    34İzleyin

    Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow

    YüksekCVSS 8,6İstismar yokEPSS %0

    comfast · cf-n1-s23 Ağu 2026

  • CVE-2026-78136
    31İzleyin

    chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data.

    YüksekCVSS 7,8İstismar yokEPSS %0

    chirpmyradio · chirp23 Ağu 2026

  • CVE-2026-13598
    39İzleyin

    RestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to Administrator

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · restrictmate23 Ağu 2026

  • CVE-2026-77115
    28İzleyin

    Brave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · brave23 Ağu 2026

  • CVE-2026-10053
    35İzleyin

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    gitlab · gitlab23 Ağu 2026

  • CVE-2026-78155
    39İzleyin

    Untrusted Search Path in StackGres

    KritikCVSS 9,9İstismar yokEPSS %0

    ongres · stackgres23 Ağu 2026

  • CVE-2026-4671
    34İzleyin

    justhtml before 1.18.0 Denial of Service via CSS Selector

    YüksekCVSS 8,7İstismar yokEPSS %0

    emilstenstrom · justhtml23 Ağu 2026

  • CVE-2026-5388
    37İzleyin

    justhtml before 1.15.0 Multiple Security Issues

    KritikCVSS 9,3İstismar yokEPSS %0

    emilstenstrom · justhtml23 Ağu 2026

  • CVE-2026-7808
    37İzleyin

    justhtml before 1.16.0 Multiple Security Issues via Sanitization

    KritikCVSS 9,3İstismar yokEPSS %0

    emilstenstrom · justhtml23 Ağu 2026

  • CVE-2026-8445
    37İzleyin

    justhtml before 1.12.0 Sanitizer Bypass via Markdown

    KritikCVSS 9,3İstismar yokEPSS %0

    emilstenstrom · justhtml23 Ağu 2026

  • CVE-2026-9769
    34İzleyin

    justhtml before 1.10.0 Denial of Service via deeply nested HTML

    YüksekCVSS 8,7İstismar yokEPSS %0

    emilstenstrom · justhtml23 Ağu 2026

  • GHSA-892m-gcq8-2468
    30İzleyin

    Duplicate Advisory: Uncontrolled recursion DoS in JustHTML() via deeply nested HTML

    YüksekCVSS 7,5İstismar yok

    PyPI · justhtml23 Ağu 2026

  • CVE-2026-78183
    39İzleyin

    DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float

    KritikCVSS 9,8İstismar yokEPSS %0

    23 Ağu 2026

  • CVE-2026-78203
    28İzleyin

    Ghostwriter before 7.1.2 Cross-Client Report Template Disclosure via Unauthorized Template Swap

    YüksekCVSS 7,1İstismar yokEPSS %0

    ghostmanager · ghostwriter24 Ağu 2026

  • CVE-2026-78206
    34İzleyin

    exceljs through 4.4.0 Uncontrolled Resource Consumption via Unbounded xlsx Decompression

    YüksekCVSS 8,7İstismar yokEPSS %0

    exceljs · exceljs24 Ağu 2026

  • CVE-2026-78207
    37İzleyin

    exceljs through 4.4.0 Prototype Pollution via deepMerge Reached From Note Serialization

    KritikCVSS 9,3İstismar yokEPSS %0

    exceljs · exceljs24 Ağu 2026

  • CVE-2026-78208
    34İzleyin

    exceljs through 4.4.0 Path Traversal via Unvalidated addImage filename

    YüksekCVSS 8,7İstismar yokEPSS %0

    exceljs · exceljs24 Ağu 2026

  • CVE-2026-78209
    33İzleyin

    exceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Values

    YüksekCVSS 8,4İstismar yokEPSS %0

    exceljs · exceljs24 Ağu 2026

  • CVE-2026-78167
    37İzleyin

    EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication

    KritikCVSS 9,3İstismar yokEPSS %1

    efm · iptime t16000m24 Ağu 2026