İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.228 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 6 / 73

  • CVE-2026-61484
    39İzleyin

    Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS

    KritikCVSS 9,8İstismar yokEPSS %0

    apache · lucy5 Ağu 2026

  • CVE-2026-61486
    39İzleyin

    Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed input

    KritikCVSS 9,8İstismar yokEPSS %0

    apache · lucy5 Ağu 2026

  • CVE-2026-64566
    39İzleyin

    xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux5 Ağu 2026

  • CVE-2026-64568
    31İzleyin

    wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 Ağu 2026

  • CVE-2026-64577
    30İzleyin

    gtp: check skb_pull_data() return in gtp1u_send_echo_resp()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux5 Ağu 2026

  • CVE-2026-64578
    32İzleyin

    ksmbd: validate compound request size before reading StructureSize2

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux5 Ağu 2026

  • CVE-2026-6020
    28İzleyin

    ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API

    YüksekCVSS 7,2İstismar yokEPSS %0

    devitemsllc · shoplentor – all-in-one woocommerce growth & store enhancement plugin5 Ağu 2026

  • CVE-2026-6079
    29İzleyin

    Material Dashboard <= 1.4.10 - Missing Authorization to Unauthenticated Task Enumeration, Execution, and Deletion

    YüksekCVSS 7,3İstismar yokEPSS %0

    ho3einie · material dashboard5 Ağu 2026

  • CVE-2026-6147
    35İzleyin

    LightSync Pro <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload

    YüksekCVSS 8,8İstismar yokEPSS %0

    lightsyncpro · lightsync pro – connect & sync cloud assets | lightroom, canva, figma, dropbox & shutterstock5 Ağu 2026

  • CVE-2026-6627
    32İzleyin

    WPFormify <= 1.1.1 - Missing Authorization

    YüksekCVSS 8,2İstismar yokEPSS %0

    saadiqbal · wpformify – stripe payments with form and checkout5 Ağu 2026

  • CVE-2026-6639
    31İzleyin

    AI Chatbot & Workflow Automation by AIWU <= 1.4.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    wupsales · ai copilot – content generator5 Ağu 2026

  • CVE-2026-70376
    38İzleyin

    Pluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and RCE

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    pluck-cms · pluck cms5 Ağu 2026

  • CVE-2026-70377
    30İzleyin

    imagecli - Uncontrolled Memory Allocation via Unbounded scale Ratio Causes Denial of Service

    YüksekCVSS 7,5İstismar yokEPSS %0

    theotherphil · imagecli5 Ağu 2026

  • CVE-2026-70378
    30İzleyin

    imagecli - Negative carve Ratio Bypasses Bounds Check and Crashes Process via Reachable Panic

    YüksekCVSS 7,5İstismar yokEPSS %0

    theotherphil · imagecli5 Ağu 2026

  • CVE-2026-71202
    30İzleyin

    raster - Integer Underflow in crop() Offset Handling Causes Capacity-Overflow Panic

    YüksekCVSS 7,5İstismar yokEPSS %0

    kosinix · raster5 Ağu 2026

  • CVE-2026-71203
    21İzleyin

    changedetection.io - Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI Schema

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    dgtlmoon · changedetection.io5 Ağu 2026

  • CVE-2026-71204
    24İzleyin

    changedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key Enforcement

    OrtaCVSS 6,2Kavram kanıtıEPSS %0

    dgtlmoon · changedetection.io5 Ağu 2026

  • CVE-2026-71205
    26İzleyin

    changedetection.io - No Rate Limiting on /login Enables Unlimited Password Brute-Force

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    dgtlmoon · changedetection.io5 Ağu 2026

  • CVE-2026-71206
    33İzleyin

    shiori - JWT CheckToken Never Re-Validates Account State, Allowing Stale-Privilege Access After Deletion or Demotion

    YüksekCVSS 8,3Kavram kanıtıEPSS %0

    go-shiori · shiori5 Ağu 2026

  • CVE-2026-71207
    39İzleyin

    Stock-Inventory-Management-System - Unauthenticated SQL Injection and Hardcoded Credentials in login.php Enable Full Authentication Bypass

    KritikCVSS 9,8İstismar yokEPSS %0

    mrswapnilsahu · stock-inventory-management-system5 Ağu 2026

  • CVE-2026-71209
    31İzleyin

    audiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversal

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    advplyr · audiobookshelf5 Ağu 2026

  • CVE-2026-71211
    28İzleyin

    mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    mlflow · mlflow5 Ağu 2026

  • CVE-2026-71213
    36İzleyin

    typemill - No Rate Limiting on Login Endpoint Enables Unlimited Password Brute-Force

    KritikCVSS 9,1İstismar yokEPSS %0

    typemill · typemill5 Ağu 2026

  • CVE-2026-71214
    39İzleyin

    NASA-AMMOS plandev - Client-Supplied session_variables Bypass Hasura-Origin Authorization in sequencing-server

    KritikCVSS 9,8İstismar yokEPSS %0

    nasa-ammos · plandev (sequencing-server)5 Ağu 2026

  • CVE-2026-71215
    30İzleyin

    art-template - Path Traversal in Sub-Template Resolution via include()/extend()

    YüksekCVSS 7,5İstismar yokEPSS %0

    art-template · art-template5 Ağu 2026

  • CVE-2026-7444
    32İzleyin

    Search Analytics for WP <= 1.4.16 - Cross-Site Request Forgery

    YüksekCVSS 8,1İstismar yokEPSS %0

    cornelraiu-1 · search analytics for wp5 Ağu 2026

  • CVE-2026-7520
    32İzleyin

    MailChimp Forms by MailMunch <= 3.2.7 - Missing Authorization to Authenticated (Subscriber+) MailMunch Integration Takeover via 'sign_in' AJAX Action

    YüksekCVSS 8,1İstismar yokEPSS %0

    mailmunch · mailmunch forms for mailchimp5 Ağu 2026

  • CVE-2026-7693
    29İzleyin

    Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %2

    inisev · backup migration5 Ağu 2026

  • CVE-2026-10059
    36İzleyin

    Cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via clustercurator serviceaccount token

    KritikCVSS 9,1İstismar yokEPSS %0

    red hat · multicluster engine for kubernetes 2.15 Ağu 2026

  • CVE-2026-10090
    36İzleyin

    Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebinding and become cluster-ad

    KritikCVSS 9,0İstismar yokEPSS %0

    red hat · red hat advanced cluster management for kubernetes 2.115 Ağu 2026

  • CVE-2026-25703
    29İzleyin

    Potential information leakage from manager /network/graph API in NeuVector

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    suse · neuvector5 Ağu 2026

  • CVE-2026-44945
    36İzleyin

    Cross-Cluster Impersonation Confused-Deputy Privilege Escalation

    KritikCVSS 9,1İstismar yokEPSS %0

    suse · rancher5 Ağu 2026

  • CVE-2026-12609
    30İzleyin

    In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend exposes the `/hostedPlugin/:pluginId/:path(*

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    eclipse · theia5 Ağu 2026

  • CVE-2026-60009
    35İzleyin

    In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend binds `POST /file-upload` in every filesystem-enabled

    YüksekCVSS 8,8İstismar yokEPSS %0

    eclipse · theia5 Ağu 2026

  • CVE-2026-66747
    37İzleyin

    ENDLESSDOORS: Zbtlink Router rctl/kworker Phone-Home Root Implant

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    zbtlink · cpe2801 firmware5 Ağu 2026

  • CVE-2026-71231
    39İzleyin

    IOTSmartHome - Unauthenticated SQL Injection via lastLogin Cookie

    KritikCVSS 9,8İstismar yokEPSS %0

    thebradleysanders · iotsmarthome5 Ağu 2026

  • CVE-2026-71232
    28İzleyin

    MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE

    YüksekCVSS 7,2İstismar yokEPSS %0

    magicblack · maccms105 Ağu 2026

  • CVE-2026-71233
    34İzleyin

    InvoiceNinja - Stored XSS via Invoice/Quote Terms Field

    YüksekCVSS 8,7İstismar yokEPSS %0

    invoiceninja · invoiceninja5 Ağu 2026

  • CVE-2026-71234
    30İzleyin

    Documize Community - Attachment Download Authorization Bypass via Non-Validated secure Token

    YüksekCVSS 7,5İstismar yokEPSS %0

    documize · community5 Ağu 2026

  • CVE-2026-71235
    35İzleyin

    Magistrala IoT Platform - Unrestricted Go/Lua Script Execution in Rules Engine

    YüksekCVSS 8,8İstismar yokEPSS %0

    absmach · magistrala5 Ağu 2026

  • CVE-2026-71236
    34İzleyin

    Grocy - Stored XSS via HTMLPurifier Output Double-Decode

    YüksekCVSS 8,7İstismar yokEPSS %0

    grocy · grocy5 Ağu 2026

  • CVE-2026-71237
    39İzleyin

    Miantang IoT-PHP - Unauthenticated SQL Injection in /userlogin

    KritikCVSS 9,8İstismar yokEPSS %0

    miantang · iot-php5 Ağu 2026

  • CVE-2026-71238
    36İzleyin

    DjangoCRM - Hardcoded Django SECRET_KEY Enables Session and CSRF Token Forgery

    KritikCVSS 9,1İstismar yokEPSS %0

    djangocrm · django-crm5 Ağu 2026

  • CVE-2026-71239
    32İzleyin

    DjangoCRM - Server-Side Template Injection in Mass Mail Message Rendering

    YüksekCVSS 8,1İstismar yokEPSS %0

    djangocrm · django-crm5 Ağu 2026

  • CVE-2026-71241
    30İzleyin

    Book-Management-System - Unauthenticated Disclosure of Student PII and Borrowing History

    YüksekCVSS 7,5İstismar yokEPSS %0

    lyric777 · book-management-system5 Ağu 2026

  • CVE-2026-71242
    33İzleyin

    Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicy

    YüksekCVSS 8,3İstismar yokEPSS %0

    crater-invoice · crater5 Ağu 2026

  • CVE-2026-71243
    35İzleyin

    backmeup (npm) - OS Command Injection via Backup Option Values

    YüksekCVSS 8,8İstismar yokEPSS %0

    adaltas · backmeup5 Ağu 2026

  • CVE-2026-71248
    39İzleyin

    Inventory-Management-System-PHP - Unauthenticated SQL Injection in Login and Product Deletion

    KritikCVSS 9,8İstismar yokEPSS %0

    harsh21patel · inventory-management-system-php5 Ağu 2026

  • CVE-2026-71252
    32İzleyin

    toner-management - Unauthenticated State-Changing Admin Actions

    YüksekCVSS 8,2İstismar yokEPSS %0

    raghav993 · toner-management5 Ağu 2026

  • CVE-2026-64567
    31İzleyin

    btrfs: reject free space cache with more entries than pages

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 Ağu 2026

  • CVE-2026-64570
    31İzleyin

    wifi: mac80211: fix fils_discovery double free on alloc failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 Ağu 2026

  • CVE-2026-64574
    31İzleyin

    wifi: mac80211: tear down new links on vif update error path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 Ağu 2026

  • CVE-2026-64575
    31İzleyin

    bpf: tcp: fix double sock release on batch realloc

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 Ağu 2026

  • CVE-2026-64576
    28İzleyin

    nexthop: initialize extack in nh_res_bucket_migrate()

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux5 Ağu 2026

  • CVE-2026-64580
    31İzleyin

    xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 Ağu 2026

  • CVE-2026-64581
    31İzleyin

    xfrm: fix sk_dst_cache double-free in xfrm_user_policy()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 Ağu 2026

  • CVE-2026-18933
    28İzleyin

    wp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversal

    YüksekCVSS 7,2İstismar yokEPSS %0

    wp-downloadmanager · wp-downloadmanager5 Ağu 2026

  • CVE-2026-46581
    30İzleyin

    In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, a

    YüksekCVSS 7,5İstismar yokEPSS %0

    eclipse · mojarra5 Ağu 2026

  • CVE-2026-61891
    30İzleyin

    In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP file-download endpoints (`GET /file`, `GE

    YüksekCVSS 7,5İstismar yokEPSS %0

    eclipse · theia5 Ağu 2026

  • CVE-2026-71254
    39İzleyin

    nanoMODBUS Server-Side Out-of-Bounds Write in handle_read_file_record()

    KritikCVSS 9,8İstismar yokEPSS %0

    debevv · nanomodbus5 Ağu 2026

  • CVE-2026-71255
    34İzleyin

    nanoMODBUS Client-Side Out-of-Bounds Write via object_length in recv_read_device_identification_res()

    YüksekCVSS 8,6İstismar yokEPSS %0

    debevv · nanomodbus5 Ağu 2026

  • CVE-2026-71256
    39İzleyin

    nanoMODBUS Client-Side Out-of-Bounds Read Leading to Wild-Pointer Write via object_id

    KritikCVSS 9,8İstismar yokEPSS %0

    debevv · nanomodbus5 Ağu 2026

  • CVE-2026-16022
    31İzleyin

    Command Injection in @oblique/cli

    YüksekCVSS 7,8İstismar yokEPSS %0

    swiss federal office of information technology, systems and telecommunication · @oblique/cli5 Ağu 2026

  • CVE-2026-71259
    34İzleyin

    ESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Execution

    YüksekCVSS 8,6İstismar yokEPSS %0

    esphome · esphome5 Ağu 2026

  • CVE-2026-71261
    31İzleyin

    dr_wav.h W64 CUE Chunk Metadata Parsing Integer Overflow Leading to Heap Buffer Overflow on 32-bit Builds

    YüksekCVSS 7,8İstismar yokEPSS %0

    mackron · dr_libs5 Ağu 2026

  • CVE-2026-71262
    39İzleyin

    IoTSharp BlobStorageController Missing Authentication and Path Traversal

    KritikCVSS 9,8İstismar yokEPSS %0

    iotsharp · iotsharp5 Ağu 2026

  • CVE-2026-71263
    36İzleyin

    FreeModbus LINUXTCP Port Off-by-One Global Buffer Overflow in xMBPortTCPPool()

    KritikCVSS 9,1İstismar yokEPSS %0

    cwalter-at · freemodbus5 Ağu 2026

  • CVE-2026-71264
    32İzleyin

    WLED Unauthenticated Configuration Disclosure via /json/cfg and Global Settings-PIN Lock State

    YüksekCVSS 8,2İstismar yokEPSS %0

    aircoookie · wled5 Ağu 2026

  • CVE-2026-71265
    30İzleyin

    Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy()

    YüksekCVSS 7,5İstismar yokEPSS %0

    domoticz · domoticz5 Ağu 2026

  • CVE-2026-71266
    31İzleyin

    tinyobjloader-c Stack Buffer Overflow in MTL Material File Line Parsing

    YüksekCVSS 7,8İstismar yokEPSS %0

    syoyo · tinyobjloader-c5 Ağu 2026

  • CVE-2026-71267
    39İzleyin

    microtar Stack Buffer Overflow in mtar_write_file_header() and mtar_write_dir_header()

    KritikCVSS 9,8İstismar yokEPSS %0

    rxi · microtar5 Ağu 2026

  • CVE-2026-71268
    39İzleyin

    OpenPLC Runtime v3 Path Traversal in Structured Text FILE Directive Leading to Arbitrary File Write

    KritikCVSS 9,9İstismar yokEPSS %0

    thiagoralves · openplc_v35 Ağu 2026

  • CVE-2026-71270
    34İzleyin

    Stirling-PDF Server-Side Request Forgery via /api/v1/convert/url/pdf WeasyPrint Subprocess

    YüksekCVSS 8,6İstismar yokEPSS %0

    stirling-tools · stirling-pdf5 Ağu 2026

  • CVE-2026-71271
    34İzleyin

    Memos Webhook SSRF via 0.0.0.0 Reserved-IP Bypass

    YüksekCVSS 8,5İstismar yokEPSS %0

    usememos · memos5 Ağu 2026

  • CVE-2026-71272
    34İzleyin

    Memos Webhook DNS Rebinding TOCTOU SSRF in safeDialContext()

    YüksekCVSS 8,5İstismar yokEPSS %0

    usememos · memos5 Ağu 2026

  • CVE-2026-71274
    34İzleyin

    OpenBK7231T Stored XSS via Unsanitized MQTT-Set Channel Labels

    YüksekCVSS 8,5İstismar yokEPSS %0

    openshwprojects · openbk7231t_app5 Ağu 2026

  • CVE-2026-71276
    28İzleyin

    Magistrala (formerly Mainflux) IoT Platform SQL Injection via format Query Parameter

    YüksekCVSS 7,1İstismar yokEPSS %0

    absmach · magistrala5 Ağu 2026

  • CVE-2026-71277
    36İzleyin

    rust-iot-platform Authentication Bypass via Non-Validated Authorization Header

    KritikCVSS 9,1İstismar yokEPSS %0

    iot-ecology · rust-iot-platform5 Ağu 2026

  • CVE-2026-71278
    39İzleyin

    rust-iot-platform Unauthenticated Remote Code Execution via Unsandboxed Calc-Rule Script Evaluation

    KritikCVSS 9,8İstismar yokEPSS %0

    iot-ecology · rust-iot-platform5 Ağu 2026

  • CVE-2026-71279
    32İzleyin

    Zigbee2MQTT External JS Extension Path Traversal Leading to Remote Code Execution

    YüksekCVSS 8,0İstismar yokEPSS %0

    koenkk · zigbee2mqtt5 Ağu 2026

  • CVE-2026-71280
    34İzleyin

    go-shiori Server-Side Request Forgery via Unrestricted Bookmark URL Fetch

    YüksekCVSS 8,5İstismar yokEPSS %0

    go-shiori · shiori5 Ağu 2026

  • CVE-2026-71281
    35İzleyin

    peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules

    YüksekCVSS 8,8İstismar yokEPSS %0

    huggingface · peft5 Ağu 2026

  • CVE-2026-71284
    28İzleyin

    Fledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filename

    YüksekCVSS 7,2İstismar yokEPSS %0

    fledge-iot · fledge5 Ağu 2026

  • CVE-2026-71285
    32İzleyin

    Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages

    YüksekCVSS 8,1İstismar yokEPSS %0

    louislam · uptime-kuma5 Ağu 2026

  • CVE-2026-71287
    35İzleyin

    Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    cacti · cacti5 Ağu 2026

  • CVE-2026-71288
    35İzleyin

    Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl

    YüksekCVSS 8,8İstismar yokEPSS %0

    koha community · koha5 Ağu 2026

  • CVE-2026-71289
    39İzleyin

    NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST API

    KritikCVSS 9,8İstismar yokEPSS %0

    nasa-ammos · anms5 Ağu 2026

  • CVE-2026-71291
    35İzleyin

    Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering

    YüksekCVSS 8,8İstismar yokEPSS %0

    bolt · core5 Ağu 2026

  • CVE-2026-71292
    28İzleyin

    Subrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    intelliants · subrion5 Ağu 2026

  • CVE-2026-71294
    30İzleyin

    Cotonti CMS Comments Plugin PHP Object Injection via Unrestricted unserialize() in Create/Edit Actions

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    cotonti · cotonti5 Ağu 2026

  • CVE-2026-15979
    32İzleyin

    Content Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletion

    YüksekCVSS 8,1İstismar yokEPSS %1

    keywordrush · content egg – affiliate product importer & price comparison5 Ağu 2026

  • CVE-2026-16443
    36İzleyin

    Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation

    KritikCVSS 9,1İstismar yokEPSS %0

    redhat · build of keycloak5 Ağu 2026

  • CVE-2026-17506
    28İzleyin

    Independent Analytics <= 2.15.0 - Unauthenticated Stored Cross-Site Scripting

    YüksekCVSS 7,2İstismar yokEPSS %0

    bensibley · independent analytics – wordpress analytics plugin5 Ağu 2026

  • CVE-2026-67623
    34İzleyin

    Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook

    YüksekCVSS 8,6İstismar yokEPSS %1

    mistralai · mistral-vibe5 Ağu 2026

  • CVE-2026-7529
    30İzleyin

    wiseCampaign <= 1.1.16 - Missing Authorization to Unauthenticated Plugin Configuration Modification via REST API

    YüksekCVSS 7,5İstismar yokEPSS %0

    wisemattic · wisecampaign – woocommerce conversions made easy5 Ağu 2026

  • CVE-2026-12410
    31İzleyin

    CCleaner local privilege escalation via link following on uninstall

    YüksekCVSS 7,8İstismar yokEPSS %0

    gen digital · ccleaner5 Ağu 2026

  • CVE-2026-15573
    32İzleyin

    Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher

    YüksekCVSS 8,1İstismar yokEPSS %0

    redhat · build of keycloak5 Ağu 2026

  • CVE-2026-16102
    32İzleyin

    Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers

    YüksekCVSS 8,1İstismar yokEPSS %0

    redhat · build of keycloak5 Ağu 2026

  • CVE-2026-17613
    30İzleyin

    Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite an

    YüksekCVSS 7,5İstismar yokEPSS %0

    penpot · penpot5 Ağu 2026

  • CVE-2026-54876
    30İzleyin

    Client-Side Memory Leak in OCSP Response Checking

    YüksekCVSS 7,5İstismar yokEPSS %0

    openssl · openssl5 Ağu 2026