İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.294 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 64 / 73

  • CVE-2026-54550
    29İzleyin

    IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entries

    YüksekCVSS 7,4İstismar yokEPSS %0

    izpack · izpack26 Ağu 2026

  • CVE-2026-54556
    32İzleyin

    Http4s: HTTP/2 Denial of Service with Ember Backend

    YüksekCVSS 8,2İstismar yokEPSS %0

    http4s · http4s26 Ağu 2026

  • CVE-2026-74737
    39İzleyin

    net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74741
    30İzleyin

    net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74742
    30İzleyin

    veth: fix queue index used to wake the peer txq in veth_poll

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74751
    37İzleyin

    riscv: lib: Fix ZBB strnlen reading past count boundary

    KritikCVSS 9,4İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-75062
    36İzleyin

    Eval Injection in google/langfun via default lf.query protocol

    KritikCVSS 9,2İstismar yokEPSS %0

    google · langfun26 Ağu 2026

  • CVE-2026-80519
    39İzleyin

    ovpn: finish crypto callback cleanup before peer release

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80520
    30İzleyin

    ovpn: fix NULL dereference when killing missing key

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80523
    28İzleyin

    clk: spacemit: k3: set hdma clock as critical

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80526
    31İzleyin

    ASoC: tas2562: Validate values for volume writes

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80531
    31İzleyin

    xfs: avoid UAF on sc->tempip in xrep_tempfile_create

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80537
    31İzleyin

    xfs: fix off-by-one in rtrefcount btree root level validation

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80538
    28İzleyin

    xfs: propagate errors from xfs_rtginode_load

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80555
    28İzleyin

    s390/vfio_ccw: Free all memory if cp_init() fails

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80556
    31İzleyin

    mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80559
    31İzleyin

    Input: sur40 - fix input device registration ordering

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80560
    31İzleyin

    openrisc: signal: do not restore privileged SR bits on sigreturn

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80565
    31İzleyin

    crypto: qce - fix error path in devm_qce_register_algs

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80568
    31İzleyin

    Input: synaptics-rmi4 - block s_input when F54 queue is busy

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80569
    31İzleyin

    Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80570
    31İzleyin

    Input: synaptics-rmi4 - zero report size on F54 work error

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80575
    31İzleyin

    Input: cs40l50-vibra - validate custom data from user space

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80582
    31İzleyin

    drm/shmem_helper: Check VMA boundaries for PMD mappings

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80583
    31İzleyin

    ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-54569
    39İzleyin

    SENAITE.CORE: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') and Missing Authorization in senaite.core

    KritikCVSS 9,8İstismar yokEPSS %1

    senaite · senaite.core26 Ağu 2026

  • CVE-2026-54606
    34İzleyin

    SunEditor: DOM XSS in SunEditor Embed Plugin via External Script Element After Iframe Embed

    YüksekCVSS 8,5İstismar yokEPSS %0

    jihong88 · suneditor26 Ağu 2026

  • CVE-2026-80426
    28İzleyin

    FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description

    YüksekCVSS 7,0İstismar yokEPSS %0

    voxel51 · fiftyone26 Ağu 2026

  • CVE-2026-80427
    34İzleyin

    bestzip before 2.2.6 and 3.0.x before 3.0.2 Argument Injection via Missing Option Delimiter

    YüksekCVSS 8,6İstismar yokEPSS %0

    nfriedly · bestzip26 Ağu 2026

  • CVE-2026-81027
    33İzleyin

    one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning

    YüksekCVSS 8,4İstismar yokEPSS %0

    songquanpeng · one-api26 Ağu 2026

  • CVE-2026-81029
    34İzleyin

    OpenMetadata before 2.0.0 JWT Disclosure via Unvalidated SAML and OIDC Redirect URI

    YüksekCVSS 8,5İstismar yokEPSS %0

    open-metadata · openmetadata26 Ağu 2026

  • CVE-2026-81030
    28İzleyin

    Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpoint

    YüksekCVSS 7,1İstismar yokEPSS %0

    mage-ai · mage-ai26 Ağu 2026

  • CVE-2026-81031
    34İzleyin

    IDURAR ERP CRM through 4.1.1 Account Takeover via Unverified Identifier on Password Update

    YüksekCVSS 8,6İstismar yokEPSS %0

    idurar · idurar-erp-crm26 Ağu 2026

  • CVE-2026-81032
    37İzleyin

    NebulaGraph through 3.8.0 Unauthenticated Read and Modification of Runtime Configuration

    KritikCVSS 9,3İstismar yokEPSS %0

    vesoft-inc · nebula26 Ağu 2026

  • CVE-2026-81034
    33İzleyin

    Netmaker through 1.6.0 Improper Certificate Validation in SMTP Client

    YüksekCVSS 8,3İstismar yokEPSS %0

    gravitl · netmaker26 Ağu 2026

  • CVE-2026-81035
    28İzleyin

    Midday Missing Owner Check on Team Deletion

    YüksekCVSS 7,2İstismar yokEPSS %0

    midday-ai · midday26 Ağu 2026

  • CVE-2026-81036
    34İzleyin

    Stalwart Mail Server through 0.16.19 Authorization Code Disclosure via Unvalidated OAuth redirect_uri

    YüksekCVSS 8,5İstismar yokEPSS %0

    stalwartlabs · stalwart26 Ağu 2026

  • CVE-2020-15874
    35İzleyin

    An issue was discovered in LibreNMS 1.65.

    YüksekCVSS 8,8İstismar yokEPSS %1

    26 Ağu 2026

  • CVE-2020-15876
    35İzleyin

    An issue was discovered in LibreNMS 1.65.

    YüksekCVSS 8,8İstismar yokEPSS %0

    26 Ağu 2026

  • CVE-2020-15878
    35İzleyin

    An issue was discovered in LibreNMS 1.65.

    YüksekCVSS 8,8İstismar yokEPSS %0

    26 Ağu 2026

  • CVE-2026-32257
    32İzleyin

    Winter: Stored XSS through Brand Settings custom styles

    YüksekCVSS 8,1İstismar yokEPSS %0

    wintercms · winter26 Ağu 2026

  • CVE-2026-32258
    32İzleyin

    Winter: Stored XSS through Editor Settings custom styles

    YüksekCVSS 8,1İstismar yokEPSS %0

    wintercms · winter26 Ağu 2026

  • CVE-2026-35445
    28İzleyin

    Winter: Authenticated backend users can bypass Users controller permission checks

    YüksekCVSS 7,1İstismar yokEPSS %0

    wintercms · winter26 Ağu 2026

  • CVE-2023-42179
    39İzleyin

    Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation proc

    KritikCVSS 9,8İstismar yokEPSS %0

    26 Ağu 2026

  • CVE-2025-29419
    28İzleyin

    CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.

    YüksekCVSS 7,1İstismar yokEPSS %0

    26 Ağu 2026

  • CVE-2025-56798
    35İzleyin

    Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to

    YüksekCVSS 8,8İstismar yokEPSS %0

    26 Ağu 2026

  • CVE-2026-47836
    32İzleyin

    Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN

    YüksekCVSS 8,1İstismar yokEPSS %0

    vmware · spring cloud config26 Ağu 2026

  • CVE-2026-47837
    39İzleyin

    Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests

    KritikCVSS 9,8İstismar yokEPSS %0

    vmware · spring cloud config26 Ağu 2026

  • CVE-2026-47841
    29İzleyin

    WebAuthn User Verification Bypass via Session Serialization

    YüksekCVSS 7,4İstismar yokEPSS %0

    vmware · spring security26 Ağu 2026

  • CVE-2026-58474
    34İzleyin

    whichllm < 0.5.16 Code Injection via run and snippet commands

    YüksekCVSS 8,6İstismar yokEPSS %0

    andyyyy64 · whichllm26 Ağu 2026

  • CVE-2026-76784
    34İzleyin

    Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices

    YüksekCVSS 8,7İstismar yokEPSS %0

    tp-link systems inc. · hs103p3 / hs103p4 v526 Ağu 2026

  • GHSA-93qj-5q5v-3c2h
    38İzleyin

    Trojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)

    KritikCVSS 9,5İstismar yok

    PyPI · pantheon-agents26 Ağu 2026

  • CVE-2025-61162
    30İzleyin

    Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted request to the /api/int

    YüksekCVSS 7,5İstismar yokEPSS %0

    26 Ağu 2026

  • CVE-2025-61163
    39İzleyin

    Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with untrusted domains.

    KritikCVSS 9,8İstismar yokEPSS %0

    26 Ağu 2026

  • CVE-2025-61164
    30İzleyin

    Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint.

    YüksekCVSS 7,5İstismar yokEPSS %0

    26 Ağu 2026

  • CVE-2025-61165
    39İzleyin

    An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI v1.1.5 allows attackers to exeute arbit

    KritikCVSS 9,8İstismar yokEPSS %0

    26 Ağu 2026

  • CVE-2026-19485
    37İzleyin

    Bucket Squatting in Vertex AI Search for Commerce

    KritikCVSS 9,3İstismar yokEPSS %0

    google cloud · vertex ai search for commerce26 Ağu 2026

  • CVE-2026-36851
    30İzleyin

    Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    26 Ağu 2026

  • CVE-2026-51106
    37İzleyin

    An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.cpp component

    KritikCVSS 9,3İstismar yokEPSS %0

    26 Ağu 2026

  • CVE-2026-74736
    31İzleyin

    net/sched: cls_bpf: reject dev-bound programs bound to a different device

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74739
    31İzleyin

    net/sched: cls_u32: skip hash tables in u32_bind_class()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74743
    39İzleyin

    macvlan: inherit needed_headroom and needed_tailroom from lowerdev

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74744
    39İzleyin

    ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74745
    30İzleyin

    eth: bnxt: avoid deadlock when canceling IRQ affinity notifier

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74746
    39İzleyin

    netfilter: flowtable: publish GC-visible tuple last

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74747
    31İzleyin

    ipvs: revalidate ihl to prevent out-of-bounds access

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74748
    31İzleyin

    netfilter: ipset: fix refcount race between list:set GC and swap

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74750
    30İzleyin

    ovpn: defer key slot crypto freeing to workqueue

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74752
    39İzleyin

    sctp: validate cookie AUTH state before use

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-74753
    31İzleyin

    perf: Reject exited events as group leaders

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-70419
    37İzleyin

    Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Com

    KritikCVSS 9,1İstismar yokEPSS %2

    dell · cloud disaster recovery26 Ağu 2026

  • CVE-2026-71171
    28İzleyin

    Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Com

    YüksekCVSS 7,2İstismar yokEPSS %1

    dell · cloud disaster recovery26 Ağu 2026

  • CVE-2026-75325
    39İzleyin

    DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters.

    KritikCVSS 9,8İstismar yokEPSS %0

    26 Ağu 2026

  • CVE-2026-80521
    31İzleyin

    af_unix: Unlink scc_entry in unix_del_edge().

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80522
    31İzleyin

    crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80527
    30İzleyin

    ceph: fix hanging __ceph_get_caps() with stale mds_wanted

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80528
    39İzleyin

    ceph: avoid fs reclaim while using current->journal_info

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80530
    28İzleyin

    xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80536
    33İzleyin

    xfs: bounds-check buffer log item's dirty bitmap

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80540
    31İzleyin

    drm/amdgpu: Fix UVD decode image min size calculation

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80541
    31İzleyin

    drm/amdgpu: validate GEM_CREATE domain combinations

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80544
    31İzleyin

    s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80545
    31İzleyin

    s390/zcrypt: Improve EP11 CPRB length and overflow checks

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80546
    31İzleyin

    s390/zcrypt: Improve CCA CPRB length and overflow checks

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80547
    35İzleyin

    s390/vfio_ccw: Implement a crw lock

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80548
    35İzleyin

    s390/vfio_ccw: Selectively expand io_mutex

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80549
    32İzleyin

    s390/vfio_ccw: Move cp cleanup out of not operational

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80550
    31İzleyin

    s390/vfio_ccw: Fix out of bounds check on CCW array

    YüksekCVSS 7,9İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80551
    37İzleyin

    s390/vfio_ccw: Ensure first IDAW remains constant

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80552
    35İzleyin

    s390/vfio_ccw: Ensure index for read/write regions are within range

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80553
    35İzleyin

    s390/vfio_ccw: Cancel existing workqueues

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80554
    37İzleyin

    s390/vfio_ccw: Limit the number of channel program segments

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80557
    39İzleyin

    libceph: fix OOB read in decode_watchers() via missing bounds check

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80558
    39İzleyin

    libceph: Avoid using invalid osd indices from primary_temp

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80561
    39İzleyin

    libceph: fix multiple unsafe decodes in decode_locker()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80572
    31İzleyin

    Input: byd - synchronize timer deletion before freeing private data

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80574
    33İzleyin

    Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80576
    35İzleyin

    drm/amdgpu: reject oversized IBs with per-ring packet limits

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80578
    29İzleyin

    fbdev: core: Fix pointer desynchronization in fb_io_read()

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux26 Ağu 2026

  • CVE-2026-80579
    31İzleyin

    fbdev: clear fb_info->mode before deleting a videomode

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux26 Ağu 2026