İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 63 / 73

  • CVE-2026-80138
    36İzleyin

    ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter

    KritikCVSS 9,2İstismar yokEPSS %1

    macwarrior · clipbucket-v525 Ağu 2026

  • CVE-2026-19632
    42Planlayın

    TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    cozmoslabs · translatepress – translate multilingual sites with ai translation26 Ağu 2026

  • CVE-2026-29988
    33İzleyin

    A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affecte

    YüksekCVSS 8,3İstismar yokEPSS %0

    milesight · am102/102l v226 Ağu 2026

  • CVE-2026-52776
    34İzleyin

    Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

    YüksekCVSS 8,6İstismar yokEPSS %0

    oscal-compass · compliance-trestle26 Ağu 2026

  • CVE-2026-54467
    28İzleyin

    On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure,

    YüksekCVSS 7,0İstismar yokEPSS %0

    trustedfirmware · trusted firmware-m26 Ağu 2026

  • CVE-2026-57170
    31İzleyin

    Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)

    YüksekCVSS 7,8İstismar yokEPSS %0

    oscal-compass · compliance-trestle26 Ağu 2026

  • CVE-2026-57171
    30İzleyin

    Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)

    YüksekCVSS 7,7İstismar yokEPSS %0

    oscal-compass · compliance-trestle26 Ağu 2026

  • CVE-2026-58089
    31İzleyin

    hwpmc fails to detach PMCs during exec credential transitions

    YüksekCVSS 7,8İstismar yokEPSS %0

    freebsd · freebsd26 Ağu 2026

  • CVE-2026-58090
    31İzleyin

    Use-after-free in unix SOCK_STREAM message handling

    YüksekCVSS 7,8İstismar yokEPSS %0

    freebsd · freebsd26 Ağu 2026

  • CVE-2026-58091
    31İzleyin

    Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl

    YüksekCVSS 7,8İstismar yokEPSS %0

    freebsd · freebsd26 Ağu 2026

  • CVE-2026-58092
    32İzleyin

    Unauthorized credential switching

    YüksekCVSS 8,1İstismar yokEPSS %0

    freebsd · freebsd26 Ağu 2026

  • CVE-2026-76148
    33İzleyin

    CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product.

    YüksekCVSS 8,4İstismar yokEPSS %0

    sasaki nobuyuki · corvusskk26 Ağu 2026

  • CVE-2026-80189
    28İzleyin

    LeafWiki 0.10.0 through 0.12.0 Uncontrolled Resource Consumption via Unbounded ZIP Extraction

    YüksekCVSS 7,1İstismar yokEPSS %0

    perber · leafwiki26 Ağu 2026

  • CVE-2026-80191
    34İzleyin

    GROWI before 8.0.2 Missing Authorization on Attachment Retrieval for Unauthenticated Requests

    YüksekCVSS 8,7İstismar yokEPSS %0

    growi, inc. · growi26 Ağu 2026

  • CVE-2026-80193
    34İzleyin

    Kimai before 2.62.0 Authorization Bypass via QuickEntry

    YüksekCVSS 8,7İstismar yokEPSS %0

    kimai · kimai26 Ağu 2026

  • CVE-2026-80194
    34İzleyin

    Kimai before 2.64.0 Missing Authorization via ProjectViewController export

    YüksekCVSS 8,7İstismar yokEPSS %0

    kimai · kimai26 Ağu 2026

  • CVE-2026-80195
    34İzleyin

    Kimai before 2.63.0 Team Membership Removal via API

    YüksekCVSS 8,7İstismar yokEPSS %0

    kimai · kimai26 Ağu 2026

  • CVE-2026-80214
    34İzleyin

    LibreNMS Virtualisation Discovery Module RCE

    YüksekCVSS 8,6İstismar yokEPSS %0

    librenms · librenms26 Ağu 2026

  • CVE-2026-15203
    37İzleyin

    Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software

    KritikCVSS 9,3İstismar yokEPSS %0

    danfoss · ic7-automation sp26 Ağu 2026

  • CVE-2026-19094
    21İzleyin

    Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parameters

    OrtaCVSS 5,3İstismar yokEPSS %0

    unknown · tutor lms26 Ağu 2026

  • CVE-2026-19718
    32İzleyin

    BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery

    YüksekCVSS 8,1İstismar yokEPSS %0

    unknown · blogvault backup & staging26 Ağu 2026

  • CVE-2026-19760
    28İzleyin

    WP Fastest Cache <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Header

    YüksekCVSS 7,2İstismar yokEPSS %0

    emrevona · wp fastest cache – wordpress cache plugin26 Ağu 2026

  • CVE-2026-58093
    28İzleyin

    Kernel use-after-free via tty ioctls

    YüksekCVSS 7,0İstismar yokEPSS %0

    freebsd · freebsd26 Ağu 2026

  • CVE-2026-58094
    31İzleyin

    TOCTOU race in POSIX shared memory large page configuration

    YüksekCVSS 7,8İstismar yokEPSS %0

    freebsd · freebsd26 Ağu 2026

  • CVE-2026-58095
    35İzleyin

    ppp(8): incorrect length calculation in mp_Enddisc()

    YüksekCVSS 8,8İstismar yokEPSS %0

    freebsd · freebsd26 Ağu 2026

  • CVE-2026-58096
    35İzleyin

    ppp(8): missing length validation in LcpDecodeConfig()

    YüksekCVSS 8,8İstismar yokEPSS %0

    freebsd · freebsd26 Ağu 2026

  • CVE-2026-58097
    31İzleyin

    ppp(8): missing length validation in mp_SetEnddisc()

    YüksekCVSS 7,8İstismar yokEPSS %0

    freebsd · freebsd26 Ağu 2026

  • CVE-2026-74851
    28İzleyin

    Pods < 3.3.9.1 - Author+ RCE via Shortcode Display Callback

    YüksekCVSS 7,2İstismar yokEPSS %0

    unknown · pods26 Ağu 2026

  • CVE-2026-74928
    30İzleyin

    WP Project Manager 2.1.0 - 4.0.6 - Unauthenticated Subscriber Account Creation via Trello Import Routes

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · project manager26 Ağu 2026

  • CVE-2026-75797
    30İzleyin

    AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter

    YüksekCVSS 7,7İstismar yokEPSS %0

    unknown · ai engine26 Ağu 2026

  • CVE-2026-77693
    34İzleyin

    Order Tip for WooCommerce < 1.6.0 - Shop Manager+ Arbitrary File Deletion via delete_exported_csv_file_ajax

    YüksekCVSS 8,7İstismar yokEPSS %0

    unknown · order tip for woocommerce26 Ağu 2026

  • CVE-2026-18331
    28İzleyin

    Formidable Forms <= 6.33.1 - Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    strategy11team · formidable forms – wordpress form builder for contact forms, calculators, quizzes & more26 Ağu 2026

  • CVE-2026-18431
    39İzleyin

    Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    themefusion · avada (fusion) builder26 Ağu 2026

  • CVE-2026-18884
    30İzleyin

    WooCommerce Lottery <= 2.2.9 - Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpgenie · woocommerce lottery26 Ağu 2026

  • CVE-2026-75977
    35İzleyin

    Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie

    YüksekCVSS 8,8İstismar yokEPSS %0

    kitae-park · mang board wp26 Ağu 2026

  • CVE-2026-78236
    35İzleyin

    Insecure PIN derivation mechanism in Admin By Request (ABR)

    YüksekCVSS 8,8İstismar yokEPSS %0

    admin by request (abr) · admin by request (abr)26 Ağu 2026

  • CVE-2026-78237
    31İzleyin

    Insufficient input validation in Admin By Request (ABR)

    YüksekCVSS 7,8İstismar yokEPSS %0

    admin by request (abr) · admin by request (abr)26 Ağu 2026

  • CVE-2026-18664
    32İzleyin

    Wrong interpretation of ACL ranges

    YüksekCVSS 8,2İstismar yokEPSS %0

    nlnetlabs · nsd26 Ağu 2026

  • CVE-2026-19401
    32İzleyin

    Remote UDP DoS by sending multiple DNS Cookie options

    YüksekCVSS 8,2İstismar yokEPSS %0

    nlnetlabs · nsd26 Ağu 2026

  • CVE-2026-19538
    32İzleyin

    Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS

    YüksekCVSS 8,2İstismar yokEPSS %0

    nlnetlabs · nsd26 Ağu 2026

  • CVE-2026-77533
    39İzleyin

    A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Prot

    KritikCVSS 9,9İstismar yokEPSS %1

    ubiquiti inc · unifi protect application26 Ağu 2026

  • CVE-2026-80233
    34İzleyin

    CAYIN Technology｜CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload

    YüksekCVSS 8,6İstismar yokEPSS %0

    cayin technology · cayin cms-ws26 Ağu 2026

  • CVE-2026-80235
    37İzleyin

    Thinking Software Technology｜EFence - Arbitrary File Upload

    KritikCVSS 9,3İstismar yokEPSS %0

    thinking software technology · efence26 Ağu 2026

  • CVE-2026-80236
    35İzleyin

    Thinking Software Technology｜Efence - SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    thinking software technology · efence26 Ağu 2026

  • CVE-2026-80237
    34İzleyin

    Thinking Software Technology｜Efence - Arbitrary File Upload

    YüksekCVSS 8,7İstismar yokEPSS %0

    thinking software technology · efence26 Ağu 2026

  • CVE-2026-80192
    34İzleyin

    better-auth SSO before 1.6.27 Domain Ownership Authentication Bypass

    YüksekCVSS 8,6İstismar yokEPSS %0

    better-auth · sso26 Ağu 2026

  • CVE-2026-80196
    34İzleyin

    Kimai before 2.58.0 Authentication Bypass via Password Reset Link

    YüksekCVSS 8,7İstismar yokEPSS %0

    kimai · kimai26 Ağu 2026

  • CVE-2026-80197
    34İzleyin

    Kimai before 2.57.0 Improper Authorization via Favorite Endpoints

    YüksekCVSS 8,7İstismar yokEPSS %0

    kimai · kimai26 Ağu 2026

  • CVE-2026-80198
    34İzleyin

    Kimai before 2.56.0 Information Disclosure via config() Twig Function

    YüksekCVSS 8,7İstismar yokEPSS %0

    kimai · kimai26 Ağu 2026

  • CVE-2026-80202
    37İzleyin

    Kimai before 2.56.0 Authorization Bypass via TimesheetVoter

    KritikCVSS 9,3İstismar yokEPSS %0

    kimai · kimai26 Ağu 2026

  • CVE-2026-16444
    30İzleyin

    Improper Validation of File Paths in TeamViewer Desktop Clients

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    teamviewer · full client, host, quicksupport & portable26 Ağu 2026

  • CVE-2026-18794
    35İzleyin

    OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

    YüksekCVSS 8,8İstismar yokEPSS %0

    calcprogrammer1 · openrgb26 Ağu 2026

  • CVE-2026-19042
    36İzleyin

    Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling

    YüksekCVSS 8,8İstismar yokEPSS %2

    teamviewer · full client26 Ağu 2026

  • CVE-2026-59682
    35İzleyin

    Arbitrary file overwrite and deletion local and remote in OpenRGB

    YüksekCVSS 8,8İstismar yokEPSS %0

    calcprogrammer1 · openrgb26 Ağu 2026

  • CVE-2026-59683
    37İzleyin

    OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings

    KritikCVSS 9,3İstismar yokEPSS %0

    calcprogrammer1 · openrgb26 Ağu 2026

  • CVE-2026-77534
    39İzleyin

    A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devi

    KritikCVSS 9,9İstismar yokEPSS %0

    ubiquiti inc · unifi os server26 Ağu 2026

  • CVE-2026-77535
    36İzleyin

    A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Net

    KritikCVSS 9,1İstismar yokEPSS %1

    ubiquiti inc · unifi network application26 Ağu 2026

  • CVE-2026-77536
    39İzleyin

    A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devi

    KritikCVSS 9,9İstismar yokEPSS %0

    ubiquiti inc · unifi os server26 Ağu 2026

  • CVE-2026-77537
    40Planlayın

    A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to

    KritikCVSS 10,0İstismar yokEPSS %1

    ubiquiti inc · unifi protect application26 Ağu 2026

  • CVE-2026-77538
    32İzleyin

    A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to es

    YüksekCVSS 8,2İstismar yokEPSS %0

    ubiquiti inc · unifi connect application26 Ağu 2026

  • CVE-2026-77539
    36İzleyin

    A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS

    KritikCVSS 9,1İstismar yokEPSS %1

    ubiquiti inc · unifi os server26 Ağu 2026

  • CVE-2026-77540
    36İzleyin

    A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS

    KritikCVSS 9,1İstismar yokEPSS %1

    ubiquiti inc · unifi os server26 Ağu 2026

  • CVE-2026-77541
    36İzleyin

    A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Netwo

    KritikCVSS 9,1İstismar yokEPSS %0

    ubiquiti inc · unifi network application26 Ağu 2026

  • CVE-2026-77542
    36İzleyin

    A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enter

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    ubiquiti inc · uid enterprise agent26 Ağu 2026

  • CVE-2026-77543
    39İzleyin

    A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce

    KritikCVSS 9,9İstismar yokEPSS %1

    ubiquiti inc · unifi access application26 Ağu 2026

  • CVE-2026-77545
    36İzleyin

    A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability f

    KritikCVSS 9,0İstismar yokEPSS %0

    ubiquiti inc · unifi os server26 Ağu 2026

  • CVE-2026-80346
    28İzleyin

    StarRocks through 4.0.13 Missing Authorization on DROP MATERIALIZED VIEW for Legacy Synchronous Materialized Views

    YüksekCVSS 7,1İstismar yokEPSS %0

    starrocks · starrocks26 Ağu 2026

  • CVE-2026-80347
    34İzleyin

    mcp-fetch through 1.6.3 Server-Side Request Forgery via Unstripped IPv6 Literal Brackets

    YüksekCVSS 8,7İstismar yokEPSS %0

    kazuph · mcp-fetch26 Ağu 2026

  • CVE-2026-80348
    34İzleyin

    TarsWeb through 3.0.16 Missing Authorization on Patch Deploy, Download and Delete Endpoints

    YüksekCVSS 8,7İstismar yokEPSS %0

    tarscloud · tarsweb26 Ağu 2026

  • CVE-2026-80349
    37İzleyin

    TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parameter

    KritikCVSS 9,3İstismar yokEPSS %0

    tarscloud · tarsweb26 Ağu 2026

  • CVE-2026-80350
    28İzleyin

    OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URL

    YüksekCVSS 7,1İstismar yokEPSS %0

    oneuptime · oneuptime26 Ağu 2026

  • CVE-2026-18080
    39İzleyin

    ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    wedevs · erp: complete hr, accounting & crm suite built for woocommerce26 Ağu 2026

  • CVE-2026-77546
    39İzleyin

    A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce

    KritikCVSS 9,9İstismar yokEPSS %1

    ubiquiti inc · unifi access application26 Ağu 2026

  • CVE-2026-77547
    39İzleyin

    A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce

    KritikCVSS 9,9İstismar yokEPSS %1

    ubiquiti inc · unifi access application26 Ağu 2026

  • CVE-2026-77548
    39İzleyin

    A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Prot

    KritikCVSS 9,9İstismar yokEPSS %1

    ubiquiti inc · unifi protect application26 Ağu 2026

  • CVE-2026-77549
    36İzleyin

    A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnera

    KritikCVSS 9,0İstismar yokEPSS %0

    ubiquiti inc · unifi os server26 Ağu 2026

  • CVE-2026-77550
    40Planlayın

    A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devic

    KritikCVSS 10,0İstismar yokEPSS %0

    ubiquiti inc · unifi os server26 Ağu 2026

  • CVE-2026-77551
    36İzleyin

    A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in Un

    KritikCVSS 9,0İstismar yokEPSS %0

    ubiquiti inc · unifi connect display cast pro26 Ağu 2026

  • CVE-2026-77552
    39İzleyin

    A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video

    KritikCVSS 9,8İstismar yokEPSS %1

    ubiquiti inc · unifi enterprise audio/video bridge26 Ağu 2026

  • CVE-2026-77553
    39İzleyin

    A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access

    KritikCVSS 9,9İstismar yokEPSS %0

    ubiquiti inc · unifi access application26 Ağu 2026

  • CVE-2026-77554
    40Planlayın

    A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to exe

    KritikCVSS 10,0İstismar yokEPSS %1

    ubiquiti inc · unifi talk application26 Ağu 2026

  • CVE-2026-77557
    39İzleyin

    A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalat

    KritikCVSS 9,8İstismar yokEPSS %0

    ubiquiti inc · unifi protect ai key26 Ağu 2026

  • CVE-2026-80203
    37İzleyin

    Grav before 1.0.18 Authentication Bypass via Scoped API Key

    KritikCVSS 9,3İstismar yokEPSS %0

    getgrav · grav26 Ağu 2026

  • CVE-2026-80204
    37İzleyin

    Grav before 1.0.18 Authentication Bypass via Scoped API Key

    KritikCVSS 9,3İstismar yokEPSS %0

    getgrav · grav26 Ağu 2026

  • CVE-2026-80205
    34İzleyin

    NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex

    YüksekCVSS 8,7İstismar yokEPSS %0

    nltk · nltk26 Ağu 2026

  • CVE-2026-80206
    32İzleyin

    NLTK 3.10.2 Regular Expression Denial of Service via tgrep

    YüksekCVSS 8,2İstismar yokEPSS %0

    nltk · nltk26 Ağu 2026

  • CVE-2026-15985
    32İzleyin

    Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login

    YüksekCVSS 8,1İstismar yokEPSS %0

    radiustheme · classified listing - mobile number verification26 Ağu 2026

  • CVE-2026-12587
    34İzleyin

    Embedded credentials in Virtuagym

    YüksekCVSS 8,6İstismar yokEPSS %0

    resamania · virtuagym26 Ağu 2026

  • CVE-2026-77658
    31İzleyin

    Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files

    YüksekCVSS 7,8İstismar yokEPSS %0

    gnome · dia26 Ağu 2026

  • CVE-2026-79619
    29İzleyin

    OpenZFS: user-namespace capability check allows unprivileged local authorization bypass

    YüksekCVSS 7,3İstismar yokEPSS %0

    openzfs · openzfs26 Ağu 2026

  • CVE-2026-12717
    37İzleyin

    Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection

    KritikCVSS 9,4İstismar yokEPSS %0

    google cloud · bigquery data transfer service26 Ağu 2026

  • CVE-2026-15990
    30İzleyin

    Formidable Charts <= 2.0.1 - Unauthenticated Arbitrary File Read via 'frm_graph' Parameter

    YüksekCVSS 7,5İstismar yokEPSS %0

    strategy11 · formidable charts26 Ağu 2026

  • CVE-2026-18252
    32İzleyin

    Inclusion of Functionality from Untrusted Control Sphere in GitLab

    YüksekCVSS 8,1İstismar yokEPSS %0

    gitlab · gitlab26 Ağu 2026

  • CVE-2026-19271
    30İzleyin

    Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk

    YüksekCVSS 7,5İstismar yokEPSS %0

    tübi̇tak bi̇lgem software technologies research institute · liderahenk26 Ağu 2026

  • CVE-2026-73108
    34İzleyin

    RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS via BytesCodec

    YüksekCVSS 8,7İstismar yokEPSS %0

    rustdesk · rustdesk26 Ağu 2026

  • CVE-2026-75896
    36İzleyin

    Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk

    KritikCVSS 9,1İstismar yokEPSS %0

    tübi̇tak bi̇lgem software technologies research institute · liderahenk26 Ağu 2026

  • CVE-2026-75960
    34İzleyin

    Insufficiently Protected Credentials in Rently Smart Home

    YüksekCVSS 8,7İstismar yokEPSS %0

    rently · smart home26 Ağu 2026

  • CVE-2026-77532
    35İzleyin

    A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwi

    YüksekCVSS 8,8İstismar yokEPSS %0

    ubiquiti inc · edgemax edgeswitch26 Ağu 2026

  • CVE-2026-54511
    34İzleyin

    @logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys

    YüksekCVSS 8,6İstismar yokEPSS %0

    dahlia · logtape26 Ağu 2026

  • CVE-2026-54523
    38İzleyin

    Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including ku

    KritikCVSS 9,6İstismar yokEPSS %0

    kyverno · kyverno26 Ağu 2026