İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.296 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 69 / 73

  • CVE-2026-80665
    28İzleyin

    KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80670
    36İzleyin

    perf tools: Use perf_env__get_cpu_topology() in machine__resolve()

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80671
    37İzleyin

    perf sched: Fix register_pid() overflow, strcpy, and BUG_ON

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80672
    35İzleyin

    ntfs: fix u16 truncation of restart-area length check

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80673
    39İzleyin

    ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80674
    39İzleyin

    ntfs: validate resident attribute lists and harden the validator

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80675
    28İzleyin

    libbpf: Reject non-exclusive metadata maps in the signed loader

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80680
    31İzleyin

    i2c: amd-mp2: Unregister callback on adapter add failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80682
    31İzleyin

    riscv/mm: use physical alignment for vmemmap_start_pfn

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80685
    28İzleyin

    mm/util: don't read __page_2 for order-1 folios in snapshot_page()

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80696
    31İzleyin

    hwmon: (ltc4282) Fix reading the minimum alarm voltage

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80712
    33İzleyin

    spi: spi-qpic-snand: write the feature value before executing SET_FEATURE

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80713
    33İzleyin

    io_uring: preserve task restrictions across exec

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80718
    31İzleyin

    mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80720
    30İzleyin

    iomap: add a separate bio_set for iomap_split_ioend

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-18918
    36İzleyin

    OAuth 1.0 session-fixation chain via unauthenticated provisional-consumer registration and insecure v1_0Allowed default

    KritikCVSS 9,1İstismar yokEPSS %0

    eclipse foundation · eclipse lyo28 Ağu 2026

  • CVE-2026-27852
    30İzleyin

    An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters

    YüksekCVSS 7,5İstismar yokEPSS %0

    open-xchange gmbh · ox dovecot pro28 Ağu 2026

  • CVE-2026-33605
    30İzleyin

    An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating.

    YüksekCVSS 7,5İstismar yokEPSS %0

    open-xchange gmbh · ox dovecot pro28 Ağu 2026

  • CVE-2026-40018
    29İzleyin

    None None None No publicly available exploits are known.

    YüksekCVSS 7,4İstismar yokEPSS %0

    open-xchange gmbh · ox dovecot pro28 Ağu 2026

  • CVE-2026-42007
    36İzleyin

    An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing

    KritikCVSS 9,1İstismar yokEPSS %0

    open-xchange gmbh · ox dovecot pro28 Ağu 2026

  • CVE-2026-42391
    30İzleyin

    An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CP

    YüksekCVSS 7,5İstismar yokEPSS %0

    open-xchange gmbh · ox dovecot pro28 Ağu 2026

  • CVE-2026-73208
    29İzleyin

    An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a s

    YüksekCVSS 7,4İstismar yokEPSS %0

    open-xchange gmbh · ox dovecot pro28 Ağu 2026

  • CVE-2026-78070
    27İzleyin

    Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    digital-peak.com · dp calendar extension for joomla28 Ağu 2026

  • CVE-2026-78071
    30İzleyin

    Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    digital-peak.com · dp calendar extension for joomla28 Ağu 2026

  • CVE-2026-78072
    34İzleyin

    Joomla Extension - Jefferson49 - Unauthenticated blind SQLi in Sexy Polling Reloaded < 5.6.1

    YüksekCVSS 8,7İstismar yokEPSS %0

    jefferson49 · sexy polling reloaded extension for joomla28 Ağu 2026

  • CVE-2026-82222
    41Planlayın

    WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %2

    liquid web / stellarwp · givewp28 Ağu 2026

  • CVE-2026-82234
    33İzleyin

    SiYuan before v3.8.1 SSRF via DNS-Rebinding TOCTOU

    YüksekCVSS 8,4İstismar yokEPSS %0

    siyuan-note · siyuan28 Ağu 2026

  • CVE-2026-82235
    32İzleyin

    filebrowser through 2.63.23 Denial of Service via named pipes

    YüksekCVSS 8,2İstismar yokEPSS %0

    filebrowser · filebrowser28 Ağu 2026

  • CVE-2026-82247
    34İzleyin

    gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing

    YüksekCVSS 8,7İstismar yokEPSS %0

    gitoxidelabs · gitoxide28 Ağu 2026

  • CVE-2026-82250
    28İzleyin

    gitoxide gix-packetline before 0.21.5 Denial of Service

    YüksekCVSS 7,1İstismar yokEPSS %0

    gitoxidelabs · gitoxide28 Ağu 2026

  • CVE-2026-82251
    34İzleyin

    gitoxide before 0.52.1 Path Traversal via Submodule Name

    YüksekCVSS 8,7İstismar yokEPSS %0

    gitoxidelabs · gitoxide28 Ağu 2026

  • CVE-2026-82252
    34İzleyin

    gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules

    YüksekCVSS 8,7İstismar yokEPSS %0

    gitoxidelabs · gitoxide28 Ağu 2026

  • CVE-2026-82253
    34İzleyin

    gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass

    YüksekCVSS 8,7İstismar yokEPSS %0

    gitoxidelabs · gitoxide28 Ağu 2026

  • CVE-2026-82254
    34İzleyin

    gitoxide before 0.69.0 Denial of Service via gix-pack

    YüksekCVSS 8,7İstismar yokEPSS %0

    gitoxidelabs · gitoxide28 Ağu 2026

  • CVE-2026-80590
    34İzleyin

    inet: frags: strip GSO state from fragments before reassembly

    YüksekCVSS 8,6İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80593
    33İzleyin

    hwmon: (asus_atk0110) Check package count before accessing element

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80598
    31İzleyin

    ntfs3: fix out-of-bounds read in decompress_lznt

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80599
    32İzleyin

    batman-adv: dat: ensure accessible eth_hdr proto field

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80601
    35İzleyin

    batman-adv: gw: acquire ethernet header only after skb realloc

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80603
    36İzleyin

    netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80604
    35İzleyin

    HID: core: Fix OOB read in hid_get_report for numbered reports

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80606
    31İzleyin

    drm/xe/userptr: Hold notifier_lock for write on inject test path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80609
    39İzleyin

    qede: fix out-of-bounds check for cqe->len_list[]

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80613
    31İzleyin

    veth: fix NAPI leak in XDP enable error path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80614
    30İzleyin

    net: emac: Fix NULL pointer dereference in emac_probe

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80615
    32İzleyin

    net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80622
    31İzleyin

    char: tlclk: fix use-after-free in tlclk_cleanup()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80628
    31İzleyin

    ALSA: seq: oss: Serialize readq reset state with q->lock

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80630
    39İzleyin

    net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80631
    30İzleyin

    btrfs: lzo: reject compressed segment that overflows the compressed input

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80634
    39İzleyin

    netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80637
    30İzleyin

    netfilter: synproxy: fix unaligned memory access in timestamp adjustment

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80646
    30İzleyin

    ipv6: guard against possible NULL deref in __in6_dev_stats_get()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80653
    33İzleyin

    scsi: hisi_sas: Add slave_destroy interface for v3 hw

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80662
    28İzleyin

    cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80663
    28İzleyin

    tools/power/x86/intel-speed-select: Harden daemon pidfile open

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80664
    29İzleyin

    netfilter: xt_nat: reject unsupported target families

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80668
    39İzleyin

    netfilter: nf_conntrack_expect: use conntrack GC to reap expectations

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80677
    31İzleyin

    driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80678
    33İzleyin

    i2c: imx: Fix slave registration race and error handling

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80681
    39İzleyin

    vxlan: re-fetch eth header after route_shortcircuit()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80683
    35İzleyin

    Bluetooth: SCO: give the socket its own sco_conn reference

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80684
    37İzleyin

    KVM: s390: pci: Fix NULL dereference on AIBV allocation failure

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80691
    30İzleyin

    scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80692
    35İzleyin

    Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80693
    37İzleyin

    idpf: bound interrupt-vector register fill to the allocated array

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80694
    39İzleyin

    net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80700
    31İzleyin

    drm/vmwgfx: validate external BO copy bounds for both stride paths

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80702
    31İzleyin

    drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80706
    31İzleyin

    can: softing: fw_parse(): validate firmware record spans

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80707
    30İzleyin

    can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80709
    31İzleyin

    s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80710
    31İzleyin

    s390/dasd: Fix undersized format-check buffer

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80714
    39İzleyin

    ipvs: do not propagate one-packet flag to synced conns

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80716
    31İzleyin

    ALSA: pcm: wake linked drain waiters on unlink

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80717
    30İzleyin

    sctp: validate Adaptation Indication parameter length

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80721
    35İzleyin

    Bluetooth: ISO: ensure no dangling hcon references in iso_conn

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80722
    35İzleyin

    wifi: mac80211: validate individual TWT params before driver setup

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80723
    33İzleyin

    of: reserved_mem: prevent OOB when too many dynamic regions are defined

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-80724
    35İzleyin

    ptp: vmclock: prevent read-only mappings from becoming writable

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    linux · linux28 Ağu 2026

  • CVE-2026-82239
    34İzleyin

    Budibase before 3.41.3 Authorization Bypass via datasources/query

    YüksekCVSS 8,6İstismar yokEPSS %0

    budibase · server28 Ağu 2026

  • CVE-2026-82240
    34İzleyin

    Budibase before 3.41.3 Privilege Escalation via User Update API

    YüksekCVSS 8,6İstismar yokEPSS %0

    budibase · server28 Ağu 2026

  • CVE-2026-82241
    28İzleyin

    Budibase backend-core SSRF via incomplete default blacklist

    YüksekCVSS 7,1İstismar yokEPSS %0

    budibase · server28 Ağu 2026

  • CVE-2026-82242
    33İzleyin

    Budibase before 3.41.3 Cross-Application Resource Injection via Missing Authorization

    YüksekCVSS 8,3İstismar yokEPSS %0

    budibase · server28 Ağu 2026

  • CVE-2026-82243
    33İzleyin

    Budibase Server before 3.41.3 SSRF with Credential Leakage

    YüksekCVSS 8,3İstismar yokEPSS %0

    budibase · server28 Ağu 2026

  • CVE-2026-82244
    37İzleyin

    Budibase before 3.41.3 Remote Code Execution via Plugin eval()

    KritikCVSS 9,4İstismar yokEPSS %0

    budibase · server28 Ağu 2026

  • CVE-2026-82245
    28İzleyin

    Budibase before 3.41.3 Missing Authorization License Management

    YüksekCVSS 7,2İstismar yokEPSS %0

    budibase · server28 Ağu 2026

  • CVE-2026-82246
    28İzleyin

    Budibase Server before 3.41.3 SSRF via Query Import

    YüksekCVSS 7,1İstismar yokEPSS %0

    budibase · server28 Ağu 2026

  • CVE-2026-82255
    30İzleyin

    gitoxide 0.25.4 HTTP Credential Leak via Redirect

    YüksekCVSS 7,6İstismar yokEPSS %0

    gitoxidelabs · gitoxide28 Ağu 2026

  • CVE-2026-82259
    34İzleyin

    SvelteKit 2.49.0 before 2.53.3 Denial of Service via form

    YüksekCVSS 8,7İstismar yokEPSS %0

    svelte · sveltekit28 Ağu 2026

  • CVE-2026-82260
    34İzleyin

    SvelteKit before 2.52.2 Memory Exhaustion via Remote Form Deserialization

    YüksekCVSS 8,7İstismar yokEPSS %0

    svelte · sveltekit28 Ağu 2026

  • CVE-2026-82261
    34İzleyin

    SvelteKit before 2.52.2 CPU Exhaustion via Remote Form Deserialization

    YüksekCVSS 8,7İstismar yokEPSS %0

    svelte · sveltekit28 Ağu 2026

  • CVE-2026-13761
    35İzleyin

    Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial

    YüksekCVSS 8,8İstismar yokEPSS %0

    pegasystems · pega infinity28 Ağu 2026

  • CVE-2026-19412
    34İzleyin

    Hardcoded Credentials Vulnerability in CP Plus CP-XR-DE21-S Router

    YüksekCVSS 8,7İstismar yokEPSS %0

    cp plus · cp-xr-de21-s router28 Ağu 2026

  • CVE-2026-37236
    39İzleyin

    grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control.

    KritikCVSS 9,8İstismar yokEPSS %0

    28 Ağu 2026

  • CVE-2026-37736
    30İzleyin

    An issue in the JsonSanitizer.sanitize() component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service (DoS) via a

    YüksekCVSS 7,5İstismar yokEPSS %0

    28 Ağu 2026

  • CVE-2026-37751
    40Planlayın

    An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows attac

    KritikCVSS 9,8İstismar yokEPSS %2

    28 Ağu 2026

  • CVE-2026-38636
    30İzleyin

    An issue in the seekdir() function (/dirent/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafte

    YüksekCVSS 7,5İstismar yokEPSS %0

    28 Ağu 2026

  • CVE-2026-38638
    30İzleyin

    An issue in the with_argv function (/unistd/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafte

    YüksekCVSS 7,5İstismar yokEPSS %0

    28 Ağu 2026

  • CVE-2026-50979
    33İzleyin

    A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated atta

    YüksekCVSS 8,1Kavram kanıtıEPSS %1

    28 Ağu 2026