İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 60 / 73

  • CVE-2026-75037
    29İzleyin

    Polkit authentication bypass in LACT

    YüksekCVSS 7,3İstismar yokEPSS %0

    ilya-zlobintsev · lact25 Ağu 2026

  • CVE-2026-16286
    39İzleyin

    File Upload in TRTEK Software's Software Repository Management

    KritikCVSS 9,8İstismar yokEPSS %0

    trtek technological products computer software hardware industry and trade limited company · software repository management25 Ağu 2026

  • CVE-2026-55526
    34İzleyin

    PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)

    YüksekCVSS 8,5İstismar yokEPSS %0

    mervinpraison · praisonai25 Ağu 2026

  • CVE-2026-55527
    28İzleyin

    PraisonAI: Arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location

    YüksekCVSS 7,1İstismar yokEPSS %0

    mervinpraison · praisonai25 Ağu 2026

  • CVE-2026-55528
    32İzleyin

    praisonaiagents: AgentServer declares auth_token but never enforces it on any route (CWE-862)

    YüksekCVSS 8,2İstismar yokEPSS %0

    mervinpraison · praisonai25 Ağu 2026

  • CVE-2026-55534
    34İzleyin

    PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution

    YüksekCVSS 8,6İstismar yokEPSS %0

    mervinpraison · praisonai25 Ağu 2026

  • CVE-2026-55537
    28İzleyin

    PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114

    YüksekCVSS 7,1İstismar yokEPSS %0

    mervinpraison · praisonai25 Ağu 2026

  • CVE-2026-55538
    29İzleyin

    PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unau

    YüksekCVSS 7,3İstismar yokEPSS %0

    mervinpraison · praisonai25 Ağu 2026

  • CVE-2026-55540
    28İzleyin

    PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks

    YüksekCVSS 7,1İstismar yokEPSS %0

    mervinpraison · praisonai25 Ağu 2026

  • CVE-2026-55541
    35İzleyin

    PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced

    YüksekCVSS 8,8İstismar yokEPSS %0

    mervinpraison · praisonai25 Ağu 2026

  • CVE-2026-69104
    30İzleyin

    Potential unauthorized repository migration in JFrog Artifactory

    YüksekCVSS 7,6İstismar yokEPSS %0

    jfrog · artifactory25 Ağu 2026

  • CVE-2026-70551
    34İzleyin

    Server-Side Request Forgery Via VCS remote download in JFrog Artifactory

    YüksekCVSS 8,5İstismar yokEPSS %0

    jfrog · artifactory25 Ağu 2026

  • CVE-2026-12600
    34İzleyin

    Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder

    YüksekCVSS 8,7İstismar yokEPSS %0

    poppler · innodata labs25 Ağu 2026

  • CVE-2026-49845
    39İzleyin

    Apache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths

    KritikCVSS 9,8İstismar yokEPSS %0

    apache · hive25 Ağu 2026

  • CVE-2026-53561
    29İzleyin

    Apache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user

    YüksekCVSS 7,4İstismar yokEPSS %0

    apache · hive25 Ağu 2026

  • CVE-2026-55976
    36İzleyin

    Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url

    KritikCVSS 9,1İstismar yokEPSS %1

    apache · hive25 Ağu 2026

  • CVE-2026-59335
    34İzleyin

    Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise

    YüksekCVSS 8,7İstismar yokEPSS %0

    cloud foundry · uaa25 Ağu 2026

  • CVE-2026-19949
    35İzleyin

    All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    servmask · all-in-one wp migration and backup25 Ağu 2026

  • CVE-2026-57909
    37İzleyin

    WatchGuard Agent path traversal allows unauthenticated remote code execution

    KritikCVSS 9,4İstismar yokEPSS %0

    watchguard · watchguard agent25 Ağu 2026

  • CVE-2026-57910
    37İzleyin

    WatchGuard Agent improper authentication allows unauthenticated remote code execution

    KritikCVSS 9,3İstismar yokEPSS %0

    watchguard · watchguard agent25 Ağu 2026

  • CVE-2026-75971
    28İzleyin

    ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '<wp_option>' Nodes

    YüksekCVSS 7,2İstismar yokEPSS %0

    roxnor · shopengine elementor woocommerce builder addon – all in one woocommerce solution with ecommerce templates & woo widgets25 Ağu 2026

  • CVE-2026-79657
    37İzleyin

    NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization

    KritikCVSS 9,3İstismar yokEPSS %1

    nltk · nltk25 Ağu 2026

  • CVE-2026-79659
    33İzleyin

    Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfo

    YüksekCVSS 8,3İstismar yokEPSS %0

    lin-snow · ech025 Ağu 2026

  • CVE-2026-55532
    30İzleyin

    PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server

    YüksekCVSS 7,6İstismar yokEPSS %0

    mervinpraison · praisonai25 Ağu 2026

  • CVE-2026-55533
    32İzleyin

    PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret

    YüksekCVSS 8,2İstismar yokEPSS %0

    mervinpraison · praisonai25 Ağu 2026

  • CVE-2026-55536
    36İzleyin

    Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)

    KritikCVSS 9,1İstismar yokEPSS %0

    mervinpraison · praisonai25 Ağu 2026

  • CVE-2026-55539
    34İzleyin

    PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete

    YüksekCVSS 8,6İstismar yokEPSS %0

    mervinpraison · praisonai25 Ağu 2026

  • CVE-2026-55546
    39İzleyin

    QWED-MCP: Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input

    KritikCVSS 9,8İstismar yokEPSS %0

    qwed-ai · qwed-mcp25 Ağu 2026

  • CVE-2026-55580
    34İzleyin

    mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist

    YüksekCVSS 8,6İstismar yokEPSS %0

    sonirico · mcp-shell25 Ağu 2026

  • CVE-2026-55581
    33İzleyin

    mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable

    YüksekCVSS 8,4İstismar yokEPSS %0

    sonirico · mcp-shell25 Ağu 2026

  • CVE-2026-55582
    33İzleyin

    mcp-shell: Secure Mode Allowlist Bypass via Git Shell Alias

    YüksekCVSS 8,4İstismar yokEPSS %0

    sonirico · mcp-shell25 Ağu 2026

  • CVE-2026-55640
    36İzleyin

    Nextcloud MCP Server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )

    KritikCVSS 9,1İstismar yokEPSS %0

    cbcoutinho · nextcloud-mcp-server25 Ağu 2026

  • CVE-2026-79674
    35İzleyin

    NLTK 3.10.2 Path Traversal via corpus-reader constructors

    YüksekCVSS 8,8İstismar yokEPSS %0

    nltk · nltk25 Ağu 2026

  • CVE-2026-79675
    37İzleyin

    NLTK before 3.10.3 JVM Argument Injection via Per-Call Options

    KritikCVSS 9,3İstismar yokEPSS %0

    nltk · nltk25 Ağu 2026

  • CVE-2026-79676
    32İzleyin

    NLTK before 3.10.3 Path Traversal via Symlink Bypass

    YüksekCVSS 8,2İstismar yokEPSS %0

    nltk · nltk25 Ağu 2026

  • CVE-2026-79769
    34İzleyin

    Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args

    YüksekCVSS 8,7İstismar yokEPSS %0

    sparklemotion · nokogiri25 Ağu 2026

  • CVE-2026-79770
    34İzleyin

    Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer

    YüksekCVSS 8,7İstismar yokEPSS %0

    nokogiri · nokogiri25 Ağu 2026

  • CVE-2026-79775
    28İzleyin

    rclone Archive Backend SquashFS Parser Denial of Service

    YüksekCVSS 7,1İstismar yokEPSS %0

    rclone · rclone25 Ağu 2026

  • CVE-2026-79782
    37İzleyin

    rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirect

    KritikCVSS 9,3İstismar yokEPSS %0

    rclone · rclone25 Ağu 2026

  • CVE-2026-79784
    34İzleyin

    Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class_path in Model Configuration

    YüksekCVSS 8,6İstismar yokEPSS %0

    gemelo-ai · vocos25 Ağu 2026

  • CVE-2026-79785
    32İzleyin

    X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads

    YüksekCVSS 8,2İstismar yokEPSS %0

    cvhub520 · x-anylabeling25 Ağu 2026

  • GHSA-vp9c-2pjm-8925
    39İzleyin

    Duplicate Advisory: Allowlisted pickle loaders still permit code execution in current source

    KritikCVSS 9,8İstismar yok

    PyPI · nltk25 Ağu 2026

  • CVE-2026-16233
    34İzleyin

    Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI

    YüksekCVSS 8,5İstismar yokEPSS %0

    ni · labview25 Ağu 2026

  • CVE-2026-16234
    34İzleyin

    Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

    YüksekCVSS 8,5İstismar yokEPSS %0

    ni · labview25 Ağu 2026

  • CVE-2026-19912
    39İzleyin

    The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated remote code execution vulnerability caused by unsafe data deserial

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    kaltura · kaltura html5 video player, html5 library25 Ağu 2026

  • CVE-2026-19913
    30İzleyin

    The Kaltura HTML5 player (mwEmbed / html5lib) contains a local file disclosure vulnerability due to improper validation of the ServiceUrl pa

    YüksekCVSS 7,5İstismar yokEPSS %0

    kaltura · kaltura html5 video player, html5lib library25 Ağu 2026

  • CVE-2026-24169
    32İzleyin

    NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject co

    YüksekCVSS 8,0İstismar yokEPSS %0

    nvidia · unified fabric manager enterprise - ga25 Ağu 2026

  • CVE-2026-24170
    35İzleyin

    NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause imprope

    YüksekCVSS 8,8İstismar yokEPSS %0

    nvidia · unified fabric manager enterprise - ga25 Ağu 2026

  • CVE-2026-24262
    32İzleyin

    NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.

    YüksekCVSS 8,2İstismar yokEPSS %0

    nvidia · dgx spark uefi25 Ağu 2026

  • CVE-2026-24263
    32İzleyin

    NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer derefere

    YüksekCVSS 8,2İstismar yokEPSS %0

    nvidia · dgx spark uefi25 Ağu 2026

  • CVE-2026-47626
    32İzleyin

    NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.

    YüksekCVSS 8,2İstismar yokEPSS %0

    nvidia · dgx spark uefi25 Ağu 2026

  • CVE-2026-55553
    30İzleyin

    urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

    YüksekCVSS 7,5İstismar yokEPSS %0

    node-modules · urllib25 Ağu 2026

  • CVE-2026-55557
    34İzleyin

    browse-mcp: Arbitrary file write via unconfined download and state paths

    YüksekCVSS 8,6İstismar yokEPSS %0

    that1drifter · browse-mcp25 Ağu 2026

  • CVE-2026-55571
    32İzleyin

    djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch ev

    YüksekCVSS 8,2İstismar yokEPSS %0

    djust-org · djust25 Ağu 2026

  • CVE-2026-55585
    35İzleyin

    QWED: Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`

    YüksekCVSS 8,8İstismar yokEPSS %0

    qwed-ai · qwed-verification25 Ağu 2026

  • CVE-2026-59184
    28İzleyin

    OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write

    YüksekCVSS 7,1İstismar yokEPSS %0

    academysoftwarefoundation · openexr25 Ağu 2026

  • CVE-2026-59186
    28İzleyin

    OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds

    YüksekCVSS 7,1İstismar yokEPSS %0

    academysoftwarefoundation · openexr25 Ağu 2026

  • CVE-2026-59187
    28İzleyin

    OpenEXR: exrmetrics deep pixelmode heap buffer overflow

    YüksekCVSS 7,1İstismar yokEPSS %0

    academysoftwarefoundation · openexr25 Ağu 2026

  • CVE-2026-59189
    28İzleyin

    OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin

    YüksekCVSS 7,1İstismar yokEPSS %0

    academysoftwarefoundation · openexr25 Ağu 2026

  • CVE-2026-64201
    34İzleyin

    Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

    YüksekCVSS 8,5İstismar yokEPSS %0

    ni · labview25 Ağu 2026

  • CVE-2026-64202
    34İzleyin

    Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

    YüksekCVSS 8,5İstismar yokEPSS %0

    ni · labview25 Ağu 2026

  • CVE-2026-64203
    34İzleyin

    Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

    YüksekCVSS 8,5İstismar yokEPSS %0

    ni · labview25 Ağu 2026

  • CVE-2026-64204
    34İzleyin

    Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI

    YüksekCVSS 8,5İstismar yokEPSS %0

    ni · labview25 Ağu 2026

  • CVE-2026-75496
    34İzleyin

    Webkul QloApps improper file upload validation

    YüksekCVSS 8,6İstismar yokEPSS %0

    webkul · qloapps25 Ağu 2026

  • CVE-2026-75497
    34İzleyin

    Webkul QloApps SQL injection

    YüksekCVSS 8,6İstismar yokEPSS %0

    webkul · qloapps25 Ağu 2026

  • CVE-2026-75498
    34İzleyin

    Webkul QloApps SQL injection

    YüksekCVSS 8,6İstismar yokEPSS %0

    webkul · qloapps25 Ağu 2026

  • CVE-2026-79655
    31İzleyin

    Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write

    YüksekCVSS 7,8İstismar yokEPSS %0

    red hat · red hat enterprise linux 1025 Ağu 2026

  • CVE-2026-26211
    19İzleyin

    Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    creativeitem · ekushey project manager crm25 Ağu 2026

  • CVE-2026-48417
    31İzleyin

    Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d sampler25 Ağu 2026

  • CVE-2026-48418
    31İzleyin

    Substance3D - Sampler | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d sampler25 Ağu 2026

  • CVE-2026-48419
    31İzleyin

    Substance3D - Sampler | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d sampler25 Ağu 2026

  • CVE-2026-48420
    31İzleyin

    Substance3D - Sampler | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d sampler25 Ağu 2026

  • CVE-2026-48421
    31İzleyin

    Substance3D - Sampler | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d sampler25 Ağu 2026

  • CVE-2026-48422
    31İzleyin

    Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d sampler25 Ağu 2026

  • CVE-2026-48423
    31İzleyin

    Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d sampler25 Ağu 2026

  • CVE-2026-48424
    31İzleyin

    Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d sampler25 Ağu 2026

  • CVE-2026-48425
    31İzleyin

    Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d sampler25 Ağu 2026

  • CVE-2026-48426
    31İzleyin

    Substance3D - Designer | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d designer25 Ağu 2026

  • CVE-2026-48427
    31İzleyin

    Substance3D - Designer | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d designer25 Ağu 2026

  • CVE-2026-48428
    31İzleyin

    Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d designer25 Ağu 2026

  • CVE-2026-48430
    31İzleyin

    Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d designer25 Ağu 2026

  • CVE-2026-48431
    31İzleyin

    Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d designer25 Ağu 2026

  • CVE-2026-48432
    31İzleyin

    Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d designer25 Ağu 2026

  • CVE-2026-48433
    31İzleyin

    Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d designer25 Ağu 2026

  • CVE-2026-55637
    35İzleyin

    genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

    YüksekCVSS 8,8İstismar yokEPSS %0

    geiserx · genieacs-mcp25 Ağu 2026

  • CVE-2026-59982
    28İzleyin

    OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms

    YüksekCVSS 7,1İstismar yokEPSS %0

    academysoftwarefoundation · openexr25 Ağu 2026

  • CVE-2026-71360
    30İzleyin

    CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa25 Ağu 2026

  • CVE-2026-71382
    31İzleyin

    Substance3D - Sampler | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d sampler25 Ağu 2026

  • CVE-2026-71399
    31İzleyin

    Adobe XD | Buffer Overflow (CWE-120)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · xd25 Ağu 2026

  • CVE-2026-71442
    30İzleyin

    CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa25 Ağu 2026

  • CVE-2026-71443
    30İzleyin

    CAI Content Credentials | Improper Input Validation (CWE-20)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa25 Ağu 2026

  • CVE-2026-71564
    31İzleyin

    Substance3D - Designer | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d designer25 Ağu 2026

  • CVE-2026-75749
    31İzleyin

    Substance3D - Painter | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d painter25 Ağu 2026

  • CVE-2026-75750
    31İzleyin

    Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d painter25 Ağu 2026

  • CVE-2026-75766
    31İzleyin

    Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d painter25 Ağu 2026

  • CVE-2026-75767
    31İzleyin

    Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d painter25 Ağu 2026

  • CVE-2026-75768
    31İzleyin

    Substance3D - Painter | Untrusted Search Path (CWE-426)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d painter25 Ağu 2026

  • CVE-2026-75769
    31İzleyin

    Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d painter25 Ağu 2026

  • CVE-2026-75770
    31İzleyin

    Substance3D - Painter | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d painter25 Ağu 2026

  • CVE-2026-76193
    40Planlayın

    Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

    KritikCVSS 10,0İstismar yokEPSS %1

    adobe · campaign25 Ağu 2026