Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.295 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 7 / 73

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2026-71281İstismar yok	peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Moduleshuggingface · peft · CWE-502 Kimlik doğrulamasız Deserializasyon	Yüksek8,8	—	%0,4	5 Ağu 2026
28İzleyin	CVE-2026-71284İstismar yok	Fledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filenamefledge-iot · fledge · CWE-78 RCE Komut enjeksiyonu	Yüksek7,2	—	%0,9	5 Ağu 2026
32İzleyin	CVE-2026-71285İstismar yok	Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pageslouislam · uptime-kuma · CWE-79 XSS	Yüksek8,1	—	%0,3	5 Ağu 2026
35İzleyin	CVE-2026-71287İstismar yok	Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injectioncacti · cacti · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,5	5 Ağu 2026
35İzleyin	CVE-2026-71288İstismar yok	Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.plkoha community · koha · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,5	5 Ağu 2026
39İzleyin	CVE-2026-71289İstismar yok	NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST APInasa-ammos · anms · CWE-306 Girişsiz RCE Kimlik doğrulama atlatma	Kritik9,8	—	%0,6	5 Ağu 2026
35İzleyin	CVE-2026-71291İstismar yok	Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Renderingbolt · core · CWE-1336 RCE SSTI	Yüksek8,8	—	%0,5	5 Ağu 2026
28İzleyin	CVE-2026-71292İstismar yok	Subrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort Parameterintelliants · subrion · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%0,5	5 Ağu 2026
30İzleyin	CVE-2026-71294Kavram kanıtı	Cotonti CMS Comments Plugin PHP Object Injection via Unrestricted unserialize() in Create/Edit Actionscotonti · cotonti · CWE-502 Deserializasyon	Yüksek7,6	—	%0,3	5 Ağu 2026
32İzleyin	CVE-2026-15979İstismar yok	Content Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletionkeywordrush · content egg – affiliate product importer & price comparison · CWE-22 RCE Yol geçişi	Yüksek8,1	—	%1,2	5 Ağu 2026
36İzleyin	CVE-2026-16443İstismar yok	Keycloak-services: keycloak-services: saml broker metadata import disables response signature validationredhat · build of keycloak · CWE-347 Kimlik doğrulamasız Zayıf kripto	Kritik9,1	—	%0,2	5 Ağu 2026
28İzleyin	CVE-2026-17506İstismar yok	Independent Analytics <= 2.15.0 - Unauthenticated Stored Cross-Site Scriptingbensibley · independent analytics – wordpress analytics plugin · CWE-79 Kimlik doğrulamasız XSS	Yüksek7,2	—	%0,3	5 Ağu 2026
34İzleyin	CVE-2026-67623İstismar yok	Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hookmistralai · mistral-vibe · CWE-829 Girişsiz RCE	Yüksek8,6	—	%1,0	5 Ağu 2026
30İzleyin	CVE-2026-7529İstismar yok	wiseCampaign <= 1.1.16 - Missing Authorization to Unauthenticated Plugin Configuration Modification via REST APIwisemattic · wisecampaign – woocommerce conversions made easy · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek7,5	—	%0,6	5 Ağu 2026
31İzleyin	CVE-2026-12410İstismar yok	CCleaner local privilege escalation via link following on uninstallgen digital · ccleaner · CWE-59 Yerel yetki yükseltme	Yüksek7,8	—	%0,1	5 Ağu 2026
32İzleyin	CVE-2026-15573İstismar yok	Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcherredhat · build of keycloak · CWE-551	Yüksek8,1	—	%0,4	5 Ağu 2026
32İzleyin	CVE-2026-16102İstismar yok	Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappersredhat · build of keycloak · CWE-551	Yüksek8,1	—	%0,4	5 Ağu 2026
30İzleyin	CVE-2026-17613İstismar yok	Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite anpenpot · penpot · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR) Hizmet dışı bırakma	Yüksek7,5	—	%0,6	5 Ağu 2026
30İzleyin	CVE-2026-54876İstismar yok	Client-Side Memory Leak in OCSP Response Checkingopenssl · openssl · CWE-401 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,5	5 Ağu 2026
39İzleyin	CVE-2026-10025İstismar yok	IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerabilityibm · qradar security information and event manager · CWE-611 Kimlik doğrulamasız Kimlik doğrulama atlatma XXE	Kritik9,8	—	%0,6	5 Ağu 2026
35İzleyin	CVE-2026-13477İstismar yok	IBM QRadar SIEM is vulnerable to remote code execution by privileged usersibm · qradar security information and event manager · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%0,4	5 Ağu 2026
35İzleyin	CVE-2026-15572İstismar yok	Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalationredhat · build of keycloak · CWE-843	Yüksek8,8	—	%0,6	5 Ağu 2026
37İzleyin	CVE-2026-15587İstismar yok	Privilege Escalation in Google SecOps (Chronicle SOAR) via Crafted Authentication Headergoogle cloud · google secops (chronicle soar) · CWE-346	Kritik9,4	—	%0,2	5 Ağu 2026
39İzleyin	CVE-2026-16442İstismar yok	Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restrictionredhat · build of keycloak · CWE-346 Kimlik doğrulamasız	Kritik9,8	—	%0,3	5 Ağu 2026
36İzleyin	CVE-2026-39923İstismar yok	Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /resetflarum · flarum framework · CWE-324 Kimlik doğrulamasız	Kritik9,2	—	%0,4	5 Ağu 2026
30İzleyin	CVE-2026-39924İstismar yok	Flarum < 1.8.16 Session Persistence via Improper Access Token Revocationflarum · flarum framework · CWE-613	Yüksek7,6	—	%0,3	5 Ağu 2026
30İzleyin	CVE-2026-48834İstismar yok	Apache Answer: Denial of service via crafted Accept-Language header parsingapache · answer · CWE-400 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,7	5 Ağu 2026
30İzleyin	CVE-2026-48911İstismar yok	Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flowapache · answer · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%0,5	5 Ağu 2026
30İzleyin	CVE-2026-60023İstismar yok	Apache Answer: Unauthorized disclosure of deleted or pending answer contentapache · answer · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%0,6	5 Ağu 2026
36İzleyin	CVE-2026-60053İstismar yok	Apache Answer: Residual Administrative API Key Access After Role or Account Revocationapache · answer · CWE-613 Kimlik doğrulamasız	Kritik9,1	—	%0,5	5 Ağu 2026
35İzleyin	CVE-2026-7326İstismar yok	Cross-site request forgery in Progress MarkLogic Server Admin UIprogress · marklogic server · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,2	5 Ağu 2026
32İzleyin	CVE-2026-7327İstismar yok	Privilege escalation in Progress MarkLogic Server REST API document processingprogress · marklogic server · CWE-269	Yüksek8,1	—	%0,3	5 Ağu 2026
39İzleyin	CVE-2026-7329İstismar yok	Privilege escalation in Progress MarkLogic Server REST query interfacesprogress · marklogic server · CWE-269	Kritik9,9	—	%0,5	5 Ağu 2026
36İzleyin	CVE-2026-7557İstismar yok	SAML authentication bypass in Progress MarkLogic Serverprogress · marklogic server · CWE-347 Kimlik doğrulamasız Kimlik doğrulama atlatma Zayıf kripto	Kritik9,1	—	%0,4	5 Ağu 2026
39İzleyin	CVE-2026-8400İstismar yok	Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPUibm · websphere application server · CWE-470 Kimlik doğrulamasız	Kritik9,8	—	%0,4	5 Ağu 2026
39İzleyin	CVE-2026-8709İstismar yok	Privilege escalation in Progress MarkLogic Server REST document patch operationprogress · marklogic server · CWE-269	Kritik9,9	—	%0,4	5 Ağu 2026
36İzleyin	CVE-2026-9190İstismar yok	HTTP request smuggling in Progress MarkLogic Serverprogress · marklogic server · CWE-444 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,1	—	%0,7	5 Ağu 2026
39İzleyin	CVE-2026-9192İstismar yok	Authentication bypass in Progress MarkLogic Server ODBC App Serverprogress · marklogic server · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,8	5 Ağu 2026
39İzleyin	CVE-2026-9193İstismar yok	Privilege escalation in Progress MarkLogic Server Hadoop integrationprogress · marklogic server · CWE-269	Kritik9,9	—	%0,4	5 Ağu 2026
37İzleyin	CVE-2026-9195İstismar yok	Cross-site scripting in Progress MarkLogic Server Query Consoleprogress · marklogic server · CWE-22 Girişsiz RCE Yol geçişi XSS	Kritik9,3	—	%0,6	5 Ağu 2026
34İzleyin	CVE-2026-9203İstismar yok	Server-side request forgery in Progress MarkLogic Serverprogress · marklogic server · CWE-918 SSRF	Yüksek8,5	—	%0,3	5 Ağu 2026
31İzleyin	CVE-2026-64582İstismar yok	RDMA/rxe: Fix a use-after-free problem in rxe_mmaplinux · linux · CWE-416 Bellek hatası	Yüksek7,8	—	%0,1	5 Ağu 2026
39İzleyin	CVE-2026-17617İstismar yok	Server-Side Request Forgery (SSRF) in IBM Application Gateway Operatoribm · application gateway operator · CWE-918 Kimlik doğrulamasız SSRF	Kritik9,8	—	%0,3	5 Ağu 2026
35İzleyin	CVE-2026-17623İstismar yok	Langflow is affected OS Command Injection in Model Context Protocol featureslangflow · langflow · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%0,7	5 Ağu 2026
35İzleyin	CVE-2026-17626İstismar yok	Langflow is affected by security vulnerabilities in Model Context Protocol featureslangflow · langflow · CWE-266	Yüksek8,8	—	%0,4	5 Ağu 2026
35İzleyin	CVE-2026-17630İstismar yok	Langflow is affected by security vulnerabilities in Model Context Protocol featureslangflow · langflow · CWE-184 RCE	Yüksek8,8	—	%0,7	5 Ağu 2026
30İzleyin	CVE-2026-20124İstismar yok	Cisco IOS XE Software SNMP Denial of Service Vulnerabilitycisco · ios xe · CWE-772 Hizmet dışı bırakma	Yüksek7,7	—	%0,5	5 Ağu 2026
35İzleyin	CVE-2026-20200Kavram kanıtı	Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerabilitycisco · unified computing system · CWE-141 RCE	Yüksek8,8	—	%0,7	5 Ağu 2026
34İzleyin	CVE-2026-20263İstismar yok	Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerabilitycisco · ios xe · CWE-388 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,6	—	%0,5	5 Ağu 2026
34İzleyin	CVE-2026-20301İstismar yok	Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerabilitycisco · ios · CWE-606 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,6	—	%0,5	5 Ağu 2026
39İzleyin	CVE-2026-20303Kavram kanıtı	Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilitiescisco · cisco catalyst sd-wan controller · CWE-20	Kritik9,9	—	%0,4	5 Ağu 2026
39İzleyin	CVE-2026-20304İstismar yok	Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilitiescisco · cisco catalyst sd-wan controller · CWE-284 Erişim denetimi (IDOR)	Kritik9,9	—	%0,4	5 Ağu 2026
36İzleyin	CVE-2026-20310İstismar yok	Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Accesscisco · cisco catalyst sd-wan controller · CWE-59	Kritik9,1	—	%0,5	5 Ağu 2026
25İzleyin	CVE-2026-20311İstismar yok	Cisco IOS XE Software Web UI Denial of Service Vulnerabilitycisco · cisco ios xe software · CWE-126 Hizmet dışı bırakma	Orta6,3	—	%0,2	5 Ağu 2026
35İzleyin	CVE-2026-20312İstismar yok	Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilitiescisco · cisco catalyst sd-wan controller · CWE-312	Yüksek8,8	—	%0,3	5 Ağu 2026
30İzleyin	CVE-2026-20313İstismar yok	Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilitiescisco · cisco catalyst sd-wan controller · CWE-1284 Hizmet dışı bırakma	Yüksek7,7	—	%0,4	5 Ağu 2026
30İzleyin	CVE-2026-8446İstismar yok	Langflow is affected by security vulnerabilities in Model Context Protocol featureslangflow · langflow · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%0,4	5 Ağu 2026
34İzleyin	CVE-2026-9077İstismar yok	Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol featureslangflow · langflow · CWE-807	Yüksek8,5	—	%0,4	5 Ağu 2026
30İzleyin	CVE-2026-10716İstismar yok	Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creationdirectus · directus · CWE-89 SQL enjeksiyonu	Yüksek7,5	—	%0,4	5 Ağu 2026
35İzleyin	CVE-2026-17625İstismar yok	Langflow is affected by OS Command Injection in Model Context Protocol featureslangflow · langflow · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%0,8	5 Ağu 2026
30İzleyin	CVE-2025-70962Kavram kanıtı	Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control.CWE-284 Kimlik doğrulamasız Gömülü kimlik bilgisi Erişim denetimi (IDOR)	Yüksek7,5	—	%0,5	5 Ağu 2026
36İzleyin	CVE-2026-70426İstismar yok	In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier, jenkins project · jenkins · CWE-502 Kimlik doğrulamasız Deserializasyon	Kritik9,0	—	%0,5	5 Ağu 2026
35İzleyin	CVE-2026-70431İstismar yok	Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Pluginjenkins project · jenkins multijob plugin · CWE-94 RCE	Yüksek8,8	—	%0,6	5 Ağu 2026
35İzleyin	CVE-2026-70432İstismar yok	A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbjenkins project · jenkins multijob plugin · CWE-352 RCE CSRF	Yüksek8,8	—	%0,2	5 Ağu 2026
28İzleyin	CVE-2026-70448İstismar yok	Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivyjenkins project · jenkins ivy report plugin · CWE-611 XXE	Yüksek7,1	—	%0,3	5 Ağu 2026
28İzleyin	CVE-2026-9081İstismar yok	Langflow OSS is affected by server-side request forgery in provider validation and API request functionalitylangflow · langflow · CWE-918 SSRF	Yüksek7,1	—	%0,3	5 Ağu 2026
32İzleyin	CVE-2026-10547İstismar yok	Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementlangflow · langflow · CWE-284 RCE Erişim denetimi (IDOR)	Yüksek8,1	—	%0,4	5 Ağu 2026
35İzleyin	CVE-2026-17624İstismar yok	Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlinglangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,6	5 Ağu 2026
35İzleyin	CVE-2026-17632İstismar yok	Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlinglangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,6	5 Ağu 2026
35İzleyin	CVE-2026-17633Kavram kanıtı	Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlinglangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,6	5 Ağu 2026
34İzleyin	CVE-2026-18485İstismar yok	Local Privilege Escalation in NI-PALni · ni-pal · CWE-1285 RCE Yerel yetki yükseltme	Yüksek8,5	—	%0,1	5 Ağu 2026
40Planlayın	CVE-2026-48168İstismar yok	PraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch namemervinpraison · praisonai · CWE-862 Girişsiz RCE Erişim denetimi (IDOR) Komut enjeksiyonu	Kritik10,0	—	%1,5	5 Ağu 2026
35İzleyin	CVE-2026-8182İstismar yok	Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlinglangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,6	5 Ağu 2026
30İzleyin	CVE-2026-8183İstismar yok	Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementlangflow · langflow · CWE-22 RCE Yol geçişi	Yüksek7,7	—	%0,5	5 Ağu 2026
36İzleyin	CVE-2026-8470İstismar yok	Langflow is affected by weaknesses in secret handling and sensitive configuration accesslangflow · langflow · CWE-327 Kimlik doğrulamasız Zayıf kripto	Kritik9,1	—	%0,1	5 Ağu 2026
35İzleyin	CVE-2026-8478İstismar yok	Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlinglangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,6	5 Ağu 2026
28İzleyin	CVE-2026-9130İstismar yok	Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementlangflow · langflow · CWE-639 RCE Erişim denetimi (IDOR)	Yüksek7,1	—	%0,2	5 Ağu 2026
35İzleyin	CVE-2026-9196İstismar yok	Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlinglangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,5	5 Ağu 2026
35İzleyin	CVE-2026-9201İstismar yok	Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handlinglangflow · langflow · CWE-326 RCE Zayıf kripto	Yüksek8,8	—	%0,3	5 Ağu 2026
39İzleyin	CVE-2026-9205İstismar yok	Langflow is affected by weaknesses in secret handling and sensitive configuration accesslangflow · langflow · CWE-338 Kimlik doğrulamasız Zayıf kripto	Kritik9,8	—	%0,3	5 Ağu 2026
30İzleyin	CVE-2026-70601İstismar yok	Electron: Context isolation bypass via Function.prototype.bind hijackelectronjs · electron · CWE-693 Kimlik doğrulamasız	Yüksek7,5	—	%0,2	5 Ağu 2026
29İzleyin	CVE-2026-70604İstismar yok	Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin readselectronjs · electron · CWE-942 Kimlik doğrulamasız	Yüksek7,4	—	%0,3	5 Ağu 2026
35İzleyin	CVE-2026-17556İstismar yok	Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id headergithub · enterprise server · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek8,8	—	%0,8	5 Ağu 2026
25İzleyin	CVE-2026-18953Kavram kanıtı	Improper limitation of a pathname to a restricted directory in aws-transform-mcp-serveramazon · aws transform mcp server · CWE-22 Yol geçişi	Orta6,3	—	%0,1	5 Ağu 2026
31İzleyin	CVE-2026-55522İstismar yok	PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe codemervinpraison · praisonai · CWE-94 RCE	Yüksek7,8	—	%0,2	5 Ağu 2026
30İzleyin	CVE-2026-55523İstismar yok	PraisonAI has a`web_crawl` SSRF protection bypass via unchecked redirect targetsmervinpraison · praisonai · CWE-918 Kimlik doğrulamasız SSRF	Yüksek7,7	—	%0,4	5 Ağu 2026
30İzleyin	CVE-2026-55524İstismar yok	PraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)mervinpraison · praisonai · CWE-367 Kimlik doğrulamasız SSRF Yarış durumu	Yüksek7,5	—	%0,2	5 Ağu 2026
34İzleyin	CVE-2026-66298İstismar yok	JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcutslivebook · livebook · CWE-346 Kimlik doğrulamasız	Yüksek8,6	—	%0,2	5 Ağu 2026
28İzleyin	CVE-2026-66881İstismar yok	Path traversal in imported file_entries name allows arbitrary file write via URL-type entry downloadlivebook · livebook · CWE-23 Kimlik doğrulamasız Yol geçişi	Yüksek7,0	—	%0,6	5 Ağu 2026
30İzleyin	CVE-2026-68746İstismar yok	Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated accesslivebook · livebook · CWE-636 Kimlik doğrulama atlatma	Yüksek7,7	—	%0,8	5 Ağu 2026
34İzleyin	CVE-2026-69111İstismar yok	Milvus 2.6.22, 3.0.0 Unauthenticated Denial of Service via /management/stopmilvus-io · milvus · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,7	—	%1,0	5 Ağu 2026
34İzleyin	CVE-2026-70615İstismar yok	boringproxy 0.10.0 SSH authorized_keys Injection via Tunnel Creationboringproxy · boringproxy · CWE-93	Yüksek8,5	—	%0,3	5 Ağu 2026
28İzleyin	CVE-2026-70616İstismar yok	boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpointboringproxy · boringproxy · CWE-833	Yüksek7,1	—	%0,3	5 Ağu 2026
34İzleyin	CVE-2026-70617İstismar yok	Spacebar Server Missing Authorization via Group DM Recipient Endpointspacebar server · spacebar server · CWE-862 Erişim denetimi (IDOR)	Yüksek8,6	—	%0,4	5 Ağu 2026
36İzleyin	CVE-2026-20267İstismar yok	Cisco IOS XE Software Security Hardening Releasecisco · ios xe · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,0	—	%0,3	5 Ağu 2026
34İzleyin	CVE-2026-20268İstismar yok	Cisco IOS XE Software Security Hardening Releasecisco · ios xe · CWE-119 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Yüksek8,6	—	%0,4	5 Ağu 2026
34İzleyin	CVE-2026-20269İstismar yok	Cisco IOS XE Software Security Hardening Releasecisco · ios xe · CWE-664 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,6	—	%0,4	5 Ağu 2026
34İzleyin	CVE-2026-20270İstismar yok	Cisco IOS XE Software Security Hardening Releasecisco · ios xe · CWE-682 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,6	—	%0,4	5 Ağu 2026
34İzleyin	CVE-2026-20271İstismar yok	Cisco IOS XE Software Security Hardening Releasecisco · ios xe · CWE-691 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,6	—	%0,4	5 Ağu 2026
39İzleyin	CVE-2026-20272İstismar yok	Cisco IOS XE Software Security Hardening Releasecisco · ios xe · CWE-74 Kimlik doğrulamasız	Kritik9,8	—	%0,5	5 Ağu 2026

CVE-2026-71281
35İzleyin
peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Deserializasyon
huggingface · peft5 Ağu 2026
CVE-2026-71284
28İzleyin
Fledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filename
YüksekCVSS 7,2İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
fledge-iot · fledge5 Ağu 2026
CVE-2026-71285
32İzleyin
Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages
YüksekCVSS 8,1İstismar yokEPSS %0
- XSS
louislam · uptime-kuma5 Ağu 2026
CVE-2026-71287
35İzleyin
Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions Leading to Blind SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %0
- SQL enjeksiyonu
cacti · cacti5 Ağu 2026
CVE-2026-71288
35İzleyin
Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl
YüksekCVSS 8,8İstismar yokEPSS %0
- SQL enjeksiyonu
koha community · koha5 Ağu 2026
CVE-2026-71289
39İzleyin
NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST API
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
- Kimlik doğrulama atlatma
nasa-ammos · anms5 Ağu 2026
CVE-2026-71291
35İzleyin
Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- SSTI
bolt · core5 Ağu 2026
CVE-2026-71292
28İzleyin
Subrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort Parameter
YüksekCVSS 7,2İstismar yokEPSS %0
- SQL enjeksiyonu
intelliants · subrion5 Ağu 2026
CVE-2026-71294
30İzleyin
Cotonti CMS Comments Plugin PHP Object Injection via Unrestricted unserialize() in Create/Edit Actions
YüksekCVSS 7,6Kavram kanıtıEPSS %0
- Deserializasyon
cotonti · cotonti5 Ağu 2026
CVE-2026-15979
32İzleyin
Content Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletion
YüksekCVSS 8,1İstismar yokEPSS %1
- RCE
- Yol geçişi
keywordrush · content egg – affiliate product importer & price comparison5 Ağu 2026
CVE-2026-16443
36İzleyin
Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
redhat · build of keycloak5 Ağu 2026
CVE-2026-17506
28İzleyin
Independent Analytics <= 2.15.0 - Unauthenticated Stored Cross-Site Scripting
YüksekCVSS 7,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
bensibley · independent analytics – wordpress analytics plugin5 Ağu 2026
CVE-2026-67623
34İzleyin
Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook
YüksekCVSS 8,6İstismar yokEPSS %1
- Girişsiz RCE
mistralai · mistral-vibe5 Ağu 2026
CVE-2026-7529
30İzleyin
wiseCampaign <= 1.1.16 - Missing Authorization to Unauthenticated Plugin Configuration Modification via REST API
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
wisemattic · wisecampaign – woocommerce conversions made easy5 Ağu 2026
CVE-2026-12410
31İzleyin
CCleaner local privilege escalation via link following on uninstall
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
gen digital · ccleaner5 Ağu 2026
CVE-2026-15573
32İzleyin
Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher
YüksekCVSS 8,1İstismar yokEPSS %0
redhat · build of keycloak5 Ağu 2026
CVE-2026-16102
32İzleyin
Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers
YüksekCVSS 8,1İstismar yokEPSS %0
redhat · build of keycloak5 Ağu 2026
CVE-2026-17613
30İzleyin
Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite an
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
- Hizmet dışı bırakma
penpot · penpot5 Ağu 2026
CVE-2026-54876
30İzleyin
Client-Side Memory Leak in OCSP Response Checking
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
openssl · openssl5 Ağu 2026
CVE-2026-10025
39İzleyin
IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- XXE
ibm · qradar security information and event manager5 Ağu 2026
CVE-2026-13477
35İzleyin
IBM QRadar SIEM is vulnerable to remote code execution by privileged users
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
ibm · qradar security information and event manager5 Ağu 2026
CVE-2026-15572
35İzleyin
Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation
YüksekCVSS 8,8İstismar yokEPSS %0
redhat · build of keycloak5 Ağu 2026
CVE-2026-15587
37İzleyin
Privilege Escalation in Google SecOps (Chronicle SOAR) via Crafted Authentication Header
KritikCVSS 9,4İstismar yokEPSS %0
google cloud · google secops (chronicle soar)5 Ağu 2026
CVE-2026-16442
39İzleyin
Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
redhat · build of keycloak5 Ağu 2026
CVE-2026-39923
36İzleyin
Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset
KritikCVSS 9,2İstismar yokEPSS %0
- Kimlik doğrulamasız
flarum · flarum framework5 Ağu 2026
CVE-2026-39924
30İzleyin
Flarum < 1.8.16 Session Persistence via Improper Access Token Revocation
YüksekCVSS 7,6İstismar yokEPSS %0
flarum · flarum framework5 Ağu 2026
CVE-2026-48834
30İzleyin
Apache Answer: Denial of service via crafted Accept-Language header parsing
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
apache · answer5 Ağu 2026
CVE-2026-48911
30İzleyin
Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
apache · answer5 Ağu 2026
CVE-2026-60023
30İzleyin
Apache Answer: Unauthorized disclosure of deleted or pending answer content
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
apache · answer5 Ağu 2026
CVE-2026-60053
36İzleyin
Apache Answer: Residual Administrative API Key Access After Role or Account Revocation
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
apache · answer5 Ağu 2026
CVE-2026-7326
35İzleyin
Cross-site request forgery in Progress MarkLogic Server Admin UI
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
progress · marklogic server5 Ağu 2026
CVE-2026-7327
32İzleyin
Privilege escalation in Progress MarkLogic Server REST API document processing
YüksekCVSS 8,1İstismar yokEPSS %0
progress · marklogic server5 Ağu 2026
CVE-2026-7329
39İzleyin
Privilege escalation in Progress MarkLogic Server REST query interfaces
KritikCVSS 9,9İstismar yokEPSS %0
progress · marklogic server5 Ağu 2026
CVE-2026-7557
36İzleyin
SAML authentication bypass in Progress MarkLogic Server
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- Zayıf kripto
progress · marklogic server5 Ağu 2026
CVE-2026-8400
39İzleyin
Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
ibm · websphere application server5 Ağu 2026
CVE-2026-8709
39İzleyin
Privilege escalation in Progress MarkLogic Server REST document patch operation
KritikCVSS 9,9İstismar yokEPSS %0
progress · marklogic server5 Ağu 2026
CVE-2026-9190
36İzleyin
HTTP request smuggling in Progress MarkLogic Server
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
progress · marklogic server5 Ağu 2026
CVE-2026-9192
39İzleyin
Authentication bypass in Progress MarkLogic Server ODBC App Server
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
progress · marklogic server5 Ağu 2026
CVE-2026-9193
39İzleyin
Privilege escalation in Progress MarkLogic Server Hadoop integration
KritikCVSS 9,9İstismar yokEPSS %0
progress · marklogic server5 Ağu 2026
CVE-2026-9195
37İzleyin
Cross-site scripting in Progress MarkLogic Server Query Console
KritikCVSS 9,3İstismar yokEPSS %0
- Girişsiz RCE
- Yol geçişi
- XSS
progress · marklogic server5 Ağu 2026
CVE-2026-9203
34İzleyin
Server-side request forgery in Progress MarkLogic Server
YüksekCVSS 8,5İstismar yokEPSS %0
- SSRF
progress · marklogic server5 Ağu 2026
CVE-2026-64582
31İzleyin
RDMA/rxe: Fix a use-after-free problem in rxe_mmap
YüksekCVSS 7,8İstismar yokEPSS %0
- Bellek hatası
linux · linux5 Ağu 2026
CVE-2026-17617
39İzleyin
Server-Side Request Forgery (SSRF) in IBM Application Gateway Operator
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
ibm · application gateway operator5 Ağu 2026
CVE-2026-17623
35İzleyin
Langflow is affected OS Command Injection in Model Context Protocol features
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
langflow · langflow5 Ağu 2026
CVE-2026-17626
35İzleyin
Langflow is affected by security vulnerabilities in Model Context Protocol features
YüksekCVSS 8,8İstismar yokEPSS %0
langflow · langflow5 Ağu 2026
CVE-2026-17630
35İzleyin
Langflow is affected by security vulnerabilities in Model Context Protocol features
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow5 Ağu 2026
CVE-2026-20124
30İzleyin
Cisco IOS XE Software SNMP Denial of Service Vulnerability
YüksekCVSS 7,7İstismar yokEPSS %0
- Hizmet dışı bırakma
cisco · ios xe5 Ağu 2026
CVE-2026-20200
35İzleyin
Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability
YüksekCVSS 8,8Kavram kanıtıEPSS %0
- RCE
cisco · unified computing system5 Ağu 2026
CVE-2026-20263
34İzleyin
Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
cisco · ios xe5 Ağu 2026
CVE-2026-20301
34İzleyin
Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
cisco · ios5 Ağu 2026
CVE-2026-20303
39İzleyin
Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities
KritikCVSS 9,9Kavram kanıtıEPSS %0
cisco · cisco catalyst sd-wan controller5 Ağu 2026
CVE-2026-20304
39İzleyin
Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %0
- Erişim denetimi (IDOR)
cisco · cisco catalyst sd-wan controller5 Ağu 2026
CVE-2026-20310
36İzleyin
Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access
KritikCVSS 9,1İstismar yokEPSS %0
cisco · cisco catalyst sd-wan controller5 Ağu 2026
CVE-2026-20311
25İzleyin
Cisco IOS XE Software Web UI Denial of Service Vulnerability
OrtaCVSS 6,3İstismar yokEPSS %0
- Hizmet dışı bırakma
cisco · cisco ios xe software5 Ağu 2026
CVE-2026-20312
35İzleyin
Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
cisco · cisco catalyst sd-wan controller5 Ağu 2026
CVE-2026-20313
30İzleyin
Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities
YüksekCVSS 7,7İstismar yokEPSS %0
- Hizmet dışı bırakma
cisco · cisco catalyst sd-wan controller5 Ağu 2026
CVE-2026-8446
30İzleyin
Langflow is affected by security vulnerabilities in Model Context Protocol features
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
langflow · langflow5 Ağu 2026
CVE-2026-9077
34İzleyin
Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features
YüksekCVSS 8,5İstismar yokEPSS %0
langflow · langflow5 Ağu 2026
CVE-2026-10716
30İzleyin
Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation
YüksekCVSS 7,5İstismar yokEPSS %0
- SQL enjeksiyonu
directus · directus5 Ağu 2026
CVE-2026-17625
35İzleyin
Langflow is affected by OS Command Injection in Model Context Protocol features
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
langflow · langflow5 Ağu 2026
CVE-2025-70962
30İzleyin
Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control.
YüksekCVSS 7,5Kavram kanıtıEPSS %0
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
- Erişim denetimi (IDOR)
5 Ağu 2026
CVE-2026-70426
36İzleyin
In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier,
KritikCVSS 9,0İstismar yokEPSS %0
- Kimlik doğrulamasız
- Deserializasyon
jenkins project · jenkins5 Ağu 2026
CVE-2026-70431
35İzleyin
Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
jenkins project · jenkins multijob plugin5 Ağu 2026
CVE-2026-70432
35İzleyin
A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arb
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- CSRF
jenkins project · jenkins multijob plugin5 Ağu 2026
CVE-2026-70448
28İzleyin
Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivy
YüksekCVSS 7,1İstismar yokEPSS %0
- XXE
jenkins project · jenkins ivy report plugin5 Ağu 2026
CVE-2026-9081
28İzleyin
Langflow OSS is affected by server-side request forgery in provider validation and API request functionality
YüksekCVSS 7,1İstismar yokEPSS %0
- SSRF
langflow · langflow5 Ağu 2026
CVE-2026-10547
32İzleyin
Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
YüksekCVSS 8,1İstismar yokEPSS %0
- RCE
- Erişim denetimi (IDOR)
langflow · langflow5 Ağu 2026
CVE-2026-17624
35İzleyin
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow5 Ağu 2026
CVE-2026-17632
35İzleyin
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow5 Ağu 2026
CVE-2026-17633
35İzleyin
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
YüksekCVSS 8,8Kavram kanıtıEPSS %0
- RCE
langflow · langflow5 Ağu 2026
CVE-2026-18485
34İzleyin
Local Privilege Escalation in NI-PAL
YüksekCVSS 8,5İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
ni · ni-pal5 Ağu 2026
CVE-2026-48168
40Planlayın
PraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch name
KritikCVSS 10,0İstismar yokEPSS %1
- Girişsiz RCE
- Erişim denetimi (IDOR)
- Komut enjeksiyonu
mervinpraison · praisonai5 Ağu 2026
CVE-2026-8182
35İzleyin
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow5 Ağu 2026
CVE-2026-8183
30İzleyin
Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
YüksekCVSS 7,7İstismar yokEPSS %0
- RCE
- Yol geçişi
langflow · langflow5 Ağu 2026
CVE-2026-8470
36İzleyin
Langflow is affected by weaknesses in secret handling and sensitive configuration access
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
langflow · langflow5 Ağu 2026
CVE-2026-8478
35İzleyin
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow5 Ağu 2026
CVE-2026-9130
28İzleyin
Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
YüksekCVSS 7,1İstismar yokEPSS %0
- RCE
- Erişim denetimi (IDOR)
langflow · langflow5 Ağu 2026
CVE-2026-9196
35İzleyin
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow5 Ağu 2026
CVE-2026-9201
35İzleyin
Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Zayıf kripto
langflow · langflow5 Ağu 2026
CVE-2026-9205
39İzleyin
Langflow is affected by weaknesses in secret handling and sensitive configuration access
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
langflow · langflow5 Ağu 2026
CVE-2026-70601
30İzleyin
Electron: Context isolation bypass via Function.prototype.bind hijack
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
electronjs · electron5 Ağu 2026
CVE-2026-70604
29İzleyin
Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads
YüksekCVSS 7,4İstismar yokEPSS %0
- Kimlik doğrulamasız
electronjs · electron5 Ağu 2026
CVE-2026-17556
35İzleyin
Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
github · enterprise server5 Ağu 2026
CVE-2026-18953
25İzleyin
Improper limitation of a pathname to a restricted directory in aws-transform-mcp-server
OrtaCVSS 6,3Kavram kanıtıEPSS %0
- Yol geçişi
amazon · aws transform mcp server5 Ağu 2026
CVE-2026-55522
31İzleyin
PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
mervinpraison · praisonai5 Ağu 2026
CVE-2026-55523
30İzleyin
PraisonAI has a`web_crawl` SSRF protection bypass via unchecked redirect targets
YüksekCVSS 7,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
mervinpraison · praisonai5 Ağu 2026
CVE-2026-55524
30İzleyin
PraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
- Yarış durumu
mervinpraison · praisonai5 Ağu 2026
CVE-2026-66298
34İzleyin
JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
livebook · livebook5 Ağu 2026
CVE-2026-66881
28İzleyin
Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download
YüksekCVSS 7,0İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
livebook · livebook5 Ağu 2026
CVE-2026-68746
30İzleyin
Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access
YüksekCVSS 7,7İstismar yokEPSS %0
- Kimlik doğrulama atlatma
livebook · livebook5 Ağu 2026
CVE-2026-69111
34İzleyin
Milvus 2.6.22, 3.0.0 Unauthenticated Denial of Service via /management/stop
YüksekCVSS 8,7İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
milvus-io · milvus5 Ağu 2026
CVE-2026-70615
34İzleyin
boringproxy 0.10.0 SSH authorized_keys Injection via Tunnel Creation
YüksekCVSS 8,5İstismar yokEPSS %0
boringproxy · boringproxy5 Ağu 2026
CVE-2026-70616
28İzleyin
boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint
YüksekCVSS 7,1İstismar yokEPSS %0
boringproxy · boringproxy5 Ağu 2026
CVE-2026-70617
34İzleyin
Spacebar Server Missing Authorization via Group DM Recipient Endpoint
YüksekCVSS 8,6İstismar yokEPSS %0
- Erişim denetimi (IDOR)
spacebar server · spacebar server5 Ağu 2026
CVE-2026-20267
36İzleyin
Cisco IOS XE Software Security Hardening Release
KritikCVSS 9,0İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
cisco · ios xe5 Ağu 2026
CVE-2026-20268
34İzleyin
Cisco IOS XE Software Security Hardening Release
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
- Hizmet dışı bırakma
cisco · ios xe5 Ağu 2026
CVE-2026-20269
34İzleyin
Cisco IOS XE Software Security Hardening Release
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
cisco · ios xe5 Ağu 2026
CVE-2026-20270
34İzleyin
Cisco IOS XE Software Security Hardening Release
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
cisco · ios xe5 Ağu 2026
CVE-2026-20271
34İzleyin
Cisco IOS XE Software Security Hardening Release
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
cisco · ios xe5 Ağu 2026
CVE-2026-20272
39İzleyin
Cisco IOS XE Software Security Hardening Release
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
cisco · ios xe5 Ağu 2026