İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 57 / 73

  • CVE-2026-78168
    35İzleyin

    EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication

    YüksekCVSS 8,9İstismar yokEPSS %1

    efm · iptime t24000m24 Ağu 2026

  • CVE-2026-78169
    34İzleyin

    UTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy stack-based overflow

    YüksekCVSS 8,6İstismar yokEPSS %0

    utt · hiper 1250gw24 Ağu 2026

  • CVE-2026-78170
    29İzleyin

    UTT HiPER 1200GW formConfigFastDirectionW strcpy buffer overflow

    YüksekCVSS 7,4İstismar yokEPSS %0

    utt · hiper 1200gw24 Ağu 2026

  • CVE-2026-77994
    37İzleyin

    Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5

    KritikCVSS 9,3İstismar yokEPSS %0

    joomlack.fr · page builder ck extension for joomla24 Ağu 2026

  • CVE-2026-19200
    35İzleyin

    Velociraptor Analyst overwrites live built-in artifacts through verify()

    YüksekCVSS 8,9İstismar yokEPSS %0

    rapid7 · velociraptor24 Ağu 2026

  • CVE-2026-78211
    38İzleyin

    4MOSAn Security Technology｜4MOSAn GCB Doctor - OS Command Injection

    KritikCVSS 9,3İstismar yokEPSS %2

    4mosan security technology · 4mosan gcb doctor24 Ağu 2026

  • CVE-2026-78212
    34İzleyin

    4MOSAn Security Technology｜4MOSAn Management Center - Arbitrary File Read

    YüksekCVSS 8,7İstismar yokEPSS %0

    4mosan security technology · 4mosan management center24 Ağu 2026

  • CVE-2026-59561
    33İzleyin

    Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability.

    YüksekCVSS 8,4İstismar yokEPSS %1

    sakura editor development community · sakura editor24 Ağu 2026

  • CVE-2026-66897
    39İzleyin

    Instance template path traversal allows arbitrary host file write as root

    KritikCVSS 9,9İstismar yokEPSS %0

    canonical · lxd24 Ağu 2026

  • CVE-2026-78314
    35İzleyin

    DIAEnergie - SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    deltaww · diaenergie24 Ağu 2026

  • CVE-2026-78255
    34İzleyin

    DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media

    YüksekCVSS 8,7İstismar yokEPSS %0

    dji · neo24 Ağu 2026

  • CVE-2026-78306
    34İzleyin

    DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

    YüksekCVSS 8,5Kavram kanıtıEPSS %0

    dji · neo24 Ağu 2026

  • CVE-2026-75899
    30İzleyin

    fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding

    YüksekCVSS 7,5İstismar yokEPSS %0

    openjsf · fast-uri24 Ağu 2026

  • CVE-2026-75931
    30İzleyin

    fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references

    YüksekCVSS 7,5İstismar yokEPSS %0

    openjsf · fast-uri24 Ağu 2026

  • CVE-2026-75975
    30İzleyin

    fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization

    YüksekCVSS 7,5İstismar yokEPSS %0

    openjsf · fast-uri24 Ağu 2026

  • CVE-2026-78315
    35İzleyin

    DIAEnergie - SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    deltaww · diaenergie24 Ağu 2026

  • CVE-2026-78316
    35İzleyin

    DIAEnergie - SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    deltaww · diaenergie24 Ağu 2026

  • CVE-2026-78317
    35İzleyin

    DIAEnergie - SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    deltaww · diaenergie24 Ağu 2026

  • CVE-2026-10582
    33İzleyin

    Hugo 0.91.0 through 0.165.0 Server-Side Request Forgery via security.http.urls Lacking Destination Address Validation

    YüksekCVSS 8,3İstismar yokEPSS %0

    gohugoio · hugo24 Ağu 2026

  • CVE-2026-76172
    30İzleyin

    fast-uri vulnerable to host confusion via percent-encoded scheme normalization

    YüksekCVSS 7,5İstismar yokEPSS %0

    openjsf · fast-uri24 Ağu 2026

  • CVE-2025-63080
    34İzleyin

    Authenticated RCE in KAON PG5298

    YüksekCVSS 8,5İstismar yokEPSS %0

    kaon · pg5298a24 Ağu 2026

  • CVE-2026-28151
    32İzleyin

    WordPress Tonda theme < 2.6 - Local File Inclusion vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    select-themes · tonda24 Ağu 2026

  • CVE-2026-28152
    32İzleyin

    WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    select-themes · tonda core24 Ağu 2026

  • CVE-2026-28153
    30İzleyin

    WordPress Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More plugin <= 1.7.1 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    notification master · notification master &#8211; real-time wordpress notifications with email, sms, webhooks &amp; more24 Ağu 2026

  • CVE-2026-28162
    28İzleyin

    WordPress Events Made Easy plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    franky · events made easy24 Ağu 2026

  • CVE-2026-28165
    39İzleyin

    WordPress Digits plugin <= 9.2 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    unitedover, llc · digits24 Ağu 2026

  • CVE-2026-28166
    28İzleyin

    WordPress Tourmaster plugin <= 5.4.9 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    goodlayers · tourmaster24 Ağu 2026

  • CVE-2026-28167
    30İzleyin

    WordPress Super Forms plugin <= 6.3.315 - Arbitrary File Download vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    super forms · super forms24 Ağu 2026

  • CVE-2026-28171
    34İzleyin

    WordPress WooCommerce File Approval plugin <= 10.7 - Arbitrary File Deletion vulnerability

    YüksekCVSS 8,6İstismar yokEPSS %0

    vanquish · woocommerce file approval24 Ağu 2026

  • CVE-2026-28190
    28İzleyin

    WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    themebing · prolancer element24 Ağu 2026

  • CVE-2026-32471
    34İzleyin

    WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    themebing · prolancer element24 Ağu 2026

  • CVE-2026-32476
    28İzleyin

    WordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    amplebyte pvt limited · brave conversion engine (pro)24 Ağu 2026

  • CVE-2026-32477
    34İzleyin

    WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons plugin <= 2.2.0 - Arbitrary File Deletion vulnerability

    YüksekCVSS 8,6İstismar yokEPSS %0

    radiustheme, llc · shopbuilder pro – elementor woocommerce builder addons24 Ağu 2026

  • CVE-2026-32478
    34İzleyin

    WordPress WP Project Manager Pro plugin <= 4.0.1 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    wedevs pte. ltd · wp project manager pro24 Ağu 2026

  • CVE-2026-32551
    37İzleyin

    WordPress Woo Essential plugin <= 4.3.0 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    divinext · woo essential24 Ağu 2026

  • CVE-2026-32558
    39İzleyin

    WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    redefiningtheweb · affiliate pro - affiliate program for woocommerce & wordpress24 Ağu 2026

  • CVE-2026-66584
    28İzleyin

    WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    code for recovery · 12 step meeting list24 Ağu 2026

  • CVE-2026-66585
    30İzleyin

    WordPress WP Cafe Pro plugin < 3.0.15 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpcafe · wp cafe pro24 Ağu 2026

  • CVE-2026-66587
    39İzleyin

    WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    wpcafe · wp cafe pro24 Ağu 2026

  • CVE-2026-66599
    28İzleyin

    WordPress WPComplete plugin <= 2.9.5.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    liquid web / stellarwp · wpcomplete24 Ağu 2026

  • CVE-2026-66610
    28İzleyin

    WordPress Urna theme <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    thembay · urna24 Ağu 2026

  • CVE-2026-66623
    28İzleyin

    WordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    inisev · social media & share icons24 Ağu 2026

  • CVE-2026-66648
    39İzleyin

    WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    mvpthemes · jawn24 Ağu 2026

  • CVE-2026-66650
    39İzleyin

    WordPress FreightCo theme <= 1.1.15 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    theme-rex · freightco24 Ağu 2026

  • CVE-2026-66670
    32İzleyin

    WordPress Måne theme <= 1.7 - Local File Inclusion vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    elated-themes · måne24 Ağu 2026

  • CVE-2026-66671
    32İzleyin

    WordPress Verdure Core plugin <= 1.2 - Local File Inclusion vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    elated-themes · verdure core24 Ağu 2026

  • CVE-2026-6017
    28İzleyin

    Missing Authentication for Critical Function in KAON PG5298

    YüksekCVSS 7,1İstismar yokEPSS %0

    kaon · pg5298a24 Ağu 2026

  • CVE-2026-78270
    30İzleyin

    WordPress FluentCRM Pro plugin <= 3.1.12 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    wp manageninja llc · fluentcrm pro24 Ağu 2026

  • CVE-2026-21756
    28İzleyin

    HCL Hive is affected by a broken access control vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    hclsoftware · hcl hive24 Ağu 2026

  • CVE-2026-66907
    30İzleyin

    Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    apache · camel24 Ağu 2026

  • CVE-2026-66908
    30İzleyin

    Apache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never vali

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    apache · camel24 Ağu 2026

  • CVE-2026-78365
    37İzleyin

    IDOR and missing authorization in Prospero Flow CRM supplier API allows cross-tenant read and modification

    KritikCVSS 9,3İstismar yokEPSS %0

    roskus · prospero flow crm24 Ağu 2026

  • CVE-2026-21751
    29İzleyin

    HCL Hive is affected by use of a cryptographic primitive with a risky implementation

    YüksekCVSS 7,4İstismar yokEPSS %0

    hclsoftware · hcl hive24 Ağu 2026

  • CVE-2026-30512
    31İzleyin

    A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI pri

    YüksekCVSS 7,8İstismar yokEPSS %0

    24 Ağu 2026

  • CVE-2026-59564
    36İzleyin

    Authentication bypass between ZCC and client connector portal

    KritikCVSS 9,1İstismar yokEPSS %0

    zscaler · client connector24 Ağu 2026

  • CVE-2026-59565
    35İzleyin

    Local and kernel denial-of-service

    YüksekCVSS 8,8İstismar yokEPSS %0

    zscaler · client connector24 Ağu 2026

  • CVE-2026-59566
    33İzleyin

    Local denial-of-service

    YüksekCVSS 8,4İstismar yokEPSS %0

    zscaler · client connector24 Ağu 2026

  • CVE-2026-59567
    35İzleyin

    Local privilege escalation

    YüksekCVSS 8,8İstismar yokEPSS %0

    zscaler · client connector24 Ağu 2026

  • CVE-2026-59568
    36İzleyin

    Remote Code Execution

    KritikCVSS 9,1İstismar yokEPSS %0

    zscaler · client connector24 Ağu 2026

  • CVE-2026-67602
    37İzleyin

    phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    phpipam · phpipam24 Ağu 2026

  • CVE-2026-76840
    34İzleyin

    RustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse Length

    YüksekCVSS 8,5İstismar yokEPSS %0

    rustdesk · rustdesk24 Ağu 2026

  • CVE-2026-76841
    34İzleyin

    Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loaders

    YüksekCVSS 8,7İstismar yokEPSS %1

    xorbitsai · inference24 Ağu 2026

  • CVE-2026-76842
    35İzleyin

    Mercado Pago Node.js SDK through 3.4.0 Path Injection via Unencoded Identifiers in Payment Clients

    YüksekCVSS 8,8İstismar yokEPSS %0

    mercadopago · mercadopago24 Ağu 2026

  • CVE-2026-76843
    33İzleyin

    Flair 0.15.0 and 0.15.1 Deserialization of Untrusted Data via ClusteringModel.load

    YüksekCVSS 8,4İstismar yokEPSS %0

    flairnlp · flair24 Ağu 2026

  • CVE-2026-76844
    33İzleyin

    zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write

    YüksekCVSS 8,3İstismar yokEPSS %0

    webpack · webpack-dev-middleware24 Ağu 2026

  • CVE-2026-76847
    34İzleyin

    act 0.2.81 through 0.2.89 Missing Authorization in the Artifacts V4 Backend

    YüksekCVSS 8,7İstismar yokEPSS %0

    nektos · act24 Ağu 2026

  • CVE-2026-77995
    40Planlayın

    Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak

    KritikCVSS 10,0İstismar yokEPSS %0

    miniorange.com · miniorange oauth client (free) extension for joomla24 Ağu 2026

  • CVE-2026-78367
    28İzleyin

    Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

    YüksekCVSS 7,0İstismar yokEPSS %0

    red hat · red hat enterprise linux 1024 Ağu 2026

  • CVE-2026-78369
    35İzleyin

    Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook

    YüksekCVSS 8,8İstismar yokEPSS %0

    ransomlook · ransomlook24 Ağu 2026

  • CVE-2026-78370
    36İzleyin

    RansomLook Unauthenticated Database Export Exposes Private Data

    KritikCVSS 9,2İstismar yokEPSS %0

    ransomlook · ransomlook24 Ağu 2026

  • CVE-2026-78372
    36İzleyin

    RansomLook Missing Authorization Allows Disclosure of Private Group and Ransom Note Data

    KritikCVSS 9,2İstismar yokEPSS %0

    ransomlook · ransomlook24 Ağu 2026

  • CVE-2026-78376
    35İzleyin

    Webkitgtk: use-after-free of jscvalue function parameters

    YüksekCVSS 8,8İstismar yokEPSS %0

    webkit · webkit24 Ağu 2026

  • CVE-2026-78380
    34İzleyin

    Private Group and Market Posts Disclosed Through Public Notification Channels in RansomLook

    YüksekCVSS 8,7İstismar yokEPSS %0

    ransomlook · ransomlook24 Ağu 2026

  • CVE-2026-78381
    32İzleyin

    RansomLook Arbitrary File Read via Path Traversal in Post screen Field

    YüksekCVSS 8,2İstismar yokEPSS %0

    ransomlook · ransomlook24 Ağu 2026

  • CVE-2026-78385
    32İzleyin

    RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access

    YüksekCVSS 8,2İstismar yokEPSS %0

    ransomlook · ransomlook24 Ağu 2026

  • CVE-2026-78386
    34İzleyin

    Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API

    YüksekCVSS 8,7İstismar yokEPSS %0

    ransomlook · ransomlook24 Ağu 2026

  • CVE-2026-19874
    36İzleyin

    Konami's Metal Gear Online 3 contains a heap-based buffer overflow

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    konami · metal gear online 324 Ağu 2026

  • CVE-2026-39914
    28İzleyin

    TIM Flow < 26.0.6 Unauthorized SQL Query Execution via Dashboard Export Endpoint

    YüksekCVSS 7,1İstismar yokEPSS %0

    tim solutions · tim flow24 Ağu 2026

  • CVE-2026-39915
    34İzleyin

    TIM Flow < 26.0.6 CRLF Injection via rt Parameter

    YüksekCVSS 8,5İstismar yokEPSS %0

    tim solutions · tim flow24 Ağu 2026

  • CVE-2026-76054
    28İzleyin

    Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute

    YüksekCVSS 7,1İstismar yokEPSS %0

    black duck · blackduck-c-cpp24 Ağu 2026

  • CVE-2026-76055
    30İzleyin

    Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.

    YüksekCVSS 7,5İstismar yokEPSS %0

    black duck · blackduck-c-cpp24 Ağu 2026

  • CVE-2026-78387
    37İzleyin

    RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification

    KritikCVSS 9,4İstismar yokEPSS %0

    ransomlook · ransomlook24 Ağu 2026

  • CVE-2026-78391
    35İzleyin

    Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rendering in RansomLook

    YüksekCVSS 8,8İstismar yokEPSS %0

    ransomlook · ransomlook24 Ağu 2026

  • CVE-2026-78414
    32İzleyin

    Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name

    YüksekCVSS 8,0İstismar yokEPSS %0

    network optix · nx witness vms24 Ağu 2026

  • CVE-2025-68825
    30İzleyin

    HCL Hive is affected by incorrect default permissions

    YüksekCVSS 7,5İstismar yokEPSS %0

    hclsoftware · hcl hive24 Ağu 2026

  • CVE-2026-12554
    34İzleyin

    HP Easy Start for macOS - Security Update

    YüksekCVSS 8,5İstismar yokEPSS %0

    hp inc · hp easy start for macos24 Ağu 2026

  • CVE-2026-12555
    30İzleyin

    HP Easy Start for macOS - Security Update

    YüksekCVSS 7,7İstismar yokEPSS %0

    hp inc · hp easy start for macos24 Ağu 2026

  • CVE-2026-12556
    30İzleyin

    HP Easy Start for macOS - Security Update

    YüksekCVSS 7,7İstismar yokEPSS %0

    hp inc · hp easy start for macos24 Ağu 2026

  • CVE-2026-13212
    35İzleyin

    Zephyr virtio driver calls an arbitrary function pointer from an out-of-range used-ring descriptor id

    YüksekCVSS 8,8İstismar yokEPSS %0

    zephyrproject · zephyr24 Ağu 2026

  • CVE-2026-21752
    30İzleyin

    HCL Hive is affected by a use of vulnerable third-party components

    YüksekCVSS 7,5İstismar yokEPSS %0

    hclsoftware · hcl hive24 Ağu 2026

  • CVE-2026-71364
    29İzleyin

    Awx: project archive extraction allows path traversal file writes

    YüksekCVSS 7,2İstismar yokEPSS %1

    red hat · red hat ansible automation platform 2.5 for rhel 824 Ağu 2026

  • CVE-2026-71366
    30İzleyin

    Awx: notification backends allow ssrf and credential leakage

    YüksekCVSS 7,7İstismar yokEPSS %0

    red hat · red hat ansible automation platform 2.5 for rhel 824 Ağu 2026

  • CVE-2026-76070
    37İzleyin

    Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    netis systems · nc6324 Ağu 2026

  • CVE-2026-76071
    37İzleyin

    Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    netis systems · nc6324 Ağu 2026

  • CVE-2026-78416
    34İzleyin

    Authenticated RCE via `condition.config` JSON cleanse bypass

    YüksekCVSS 8,7İstismar yokEPSS %1

    craftcms · cms24 Ağu 2026

  • CVE-2025-36939
    40Planlayın

    Multiple vulnerabilities exist in OpenThread's handling of MLE packets.

    KritikCVSS 10,0İstismar yokEPSS %0

    google · nest wifi router firmware24 Ağu 2026

  • CVE-2025-36940
    35İzleyin

    Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · android24 Ağu 2026

  • CVE-2026-15469
    30İzleyin

    Hard-coded Mesh Group Private Key in TP-Link Deco XE75, XE5300, and WE10800

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    tp-link systems inc. · deco xe75 v3 / xe5300 v3.6/ we10800 v3.624 Ağu 2026

  • CVE-2026-18349
    29İzleyin

    SAMA5D44 Fault Injection Vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    microchip · sama5d424 Ağu 2026

  • CVE-2026-19685
    28İzleyin

    Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete

    YüksekCVSS 7,1İstismar yokEPSS %0

    red hat · red hat enterprise linux 1024 Ağu 2026