İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları

7.237 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 70 / 73

  • CVE-2026-55485
    35İzleyin

    Piccolo Admin: Privilege escalation - admin to superuser via session-token disclosure in GET /api/tables/sessions/.

    YüksekCVSS 8,8İstismar yokEPSS %0

    piccolo-orm · piccolo_admin28 Ağu 2026

  • CVE-2026-55509
    35İzleyin

    WsgiDAV: Blind SQL injection in the MySQL provider

    YüksekCVSS 8,8İstismar yokEPSS %0

    mar10 · wsgidav28 Ağu 2026

  • CVE-2026-55511
    36İzleyin

    Yamcs: Authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs `executeSql`

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    yamcs · yamcs28 Ağu 2026

  • CVE-2026-55520
    28İzleyin

    Protego: Exponential backtracking ReDoS in robots.txt URL wildcard matching

    YüksekCVSS 7,1İstismar yokEPSS %0

    scrapy · protego28 Ağu 2026

  • CVE-2026-55521
    35İzleyin

    Yamcs : Multiple Missing Function Level Access Control vulnerabilities in Yamcs Core API

    YüksekCVSS 8,8İstismar yokEPSS %0

    yamcs · yamcs28 Ağu 2026

  • CVE-2026-55549
    26İzleyin

    Yamcs: Reflected XSS in the URL of the Authorize Endpoint

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    yamcs · yamcs28 Ağu 2026

  • CVE-2026-81019
    29İzleyin

    wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

    YüksekCVSS 7,4İstismar yokEPSS %0

    wolfssl · wolfprovider28 Ağu 2026

  • CVE-2026-55552
    31İzleyin

    Yamcs: Unauthenticated Directory Traversal

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    yamcs · yamcs28 Ağu 2026

  • CVE-2026-81020
    29İzleyin

    wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

    YüksekCVSS 7,4İstismar yokEPSS %0

    wolfssl · wolfengine28 Ağu 2026

  • CVE-2026-55559
    39İzleyin

    Yamcs: Remote Code Execution via instance-template argument YAML injection (createInstance)

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    yamcs · yamcs28 Ağu 2026

  • CVE-2026-55565
    39İzleyin

    Yamcs: Authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)

    KritikCVSS 9,9İstismar yokEPSS %0

    yamcs · yamcs28 Ağu 2026

  • CVE-2026-55584
    31İzleyin

    phpSysInfo: IP allowlist (PSI_ALLOWED) bypass via spoofed X-Forwarded-For / Client-IP headers

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    phpsysinfo · phpsysinfo28 Ağu 2026

  • CVE-2026-55634
    39İzleyin

    Pimcore: Remote Code Execution via DataObject Class-Definition Field Name

    KritikCVSS 9,9İstismar yokEPSS %0

    pimcore · pimcore28 Ağu 2026

  • CVE-2026-55673
    28İzleyin

    PowSyBl: Command Injection in LocalCommandExecutor-s

    YüksekCVSS 7,1İstismar yokEPSS %0

    powsybl · powsybl-core28 Ağu 2026

  • CVE-2026-56100
    34İzleyin

    SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint

    YüksekCVSS 8,6İstismar yokEPSS %0

    springblade · springblade28 Ağu 2026

  • CVE-2026-72984
    35İzleyin

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · edge chromium28 Ağu 2026

  • CVE-2026-75121
    34İzleyin

    PLANET GS-4210-16P2S V3 Command Injection via dispatcher.cgi web_vlan_membership_edit_dialog_post

    YüksekCVSS 8,6İstismar yokEPSS %1

    planet technology corp. · planet gs-4210-16p2s v328 Ağu 2026

  • CVE-2026-75122
    34İzleyin

    PLANET GS-4210-16P2S V3 Command Injection via httpuploadcert.cgi

    YüksekCVSS 8,6İstismar yokEPSS %0

    planet technology corp. · planet gs-4210-16p2s v328 Ağu 2026

  • CVE-2026-75123
    34İzleyin

    PLANET GS-4210-16P2S V3 Command Injection via dispatcher.cgi web_smtp_test_post

    YüksekCVSS 8,6İstismar yokEPSS %1

    planet technology corp. · planet gs-4210-16p2s v328 Ağu 2026

  • CVE-2026-75124
    34İzleyin

    PLANET GS-4210-16P2S V3 Memory Corruption via dispatcher.cgi _readHttpParam

    YüksekCVSS 8,7İstismar yokEPSS %0

    planet technology corp. · planet gs-4210-16p2s v328 Ağu 2026

  • CVE-2026-75486
    35İzleyin

    Synk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name

    YüksekCVSS 8,5İstismar yokEPSS %2

    snyk · sweater-comb28 Ağu 2026

  • CVE-2026-77939
    28İzleyin

    Flextype CMS 1.0.0-dev RCE via POST /api/v1/query Endpoint

    YüksekCVSS 7,1İstismar yokEPSS %0

    flextype · flextype28 Ağu 2026

  • CVE-2026-81849
    34İzleyin

    Path traversal in the aws:downloadContent plugin in amazon-ssm-agent

    YüksekCVSS 8,7İstismar yokEPSS %0

    amazon · amazon-ssm-agent28 Ağu 2026

  • CVE-2026-82020
    30İzleyin

    Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write Tool

    YüksekCVSS 7,6İstismar yokEPSS %0

    nousresearch · hermes-agent28 Ağu 2026

  • CVE-2026-82021
    36İzleyin

    Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Reference

    KritikCVSS 9,0İstismar yokEPSS %0

    nousresearch · hermes-agent28 Ağu 2026

  • CVE-2026-82262
    32İzleyin

    Logto Server-Side Request Forgery via webhook test endpoint

    YüksekCVSS 8,2İstismar yokEPSS %0

    logto-io · logto28 Ağu 2026

  • CVE-2026-82263
    32İzleyin

    Logto Server-Side Request Forgery via OIDC SSO Connector Issuer URL

    YüksekCVSS 8,2İstismar yokEPSS %0

    logto-io · logto28 Ağu 2026

  • CVE-2026-82266
    37İzleyin

    Redpanda Admin API Unauthenticated Superuser Access via Default Configuration

    KritikCVSS 9,3İstismar yokEPSS %0

    redpanda-data · redpanda28 Ağu 2026

  • CVE-2026-82268
    34İzleyin

    Qwen-Agent Server-Side Request Forgery via Caller-Supplied Document URL

    YüksekCVSS 8,7İstismar yokEPSS %0

    qwenlm · qwen-agent28 Ağu 2026

  • CVE-2026-82269
    34İzleyin

    Gophish Account Lockout and Forced Password Change Bypassable via API Key

    YüksekCVSS 8,6İstismar yokEPSS %0

    gophish · gophish28 Ağu 2026

  • CVE-2026-82270
    34İzleyin

    Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*

    YüksekCVSS 8,7İstismar yokEPSS %0

    portkey-ai · gateway28 Ağu 2026

  • CVE-2026-82271
    28İzleyin

    R2R Missing Ownership Check Allows Modifying Other Users' Conversations

    YüksekCVSS 7,1İstismar yokEPSS %0

    sciphi-ai · r2r28 Ağu 2026

  • CVE-2026-82272
    28İzleyin

    Immich Locked Assets Remain Readable Through Albums and Shared Links

    YüksekCVSS 7,1İstismar yokEPSS %0

    immich-app · immich28 Ağu 2026

  • CVE-2026-82273
    28İzleyin

    Mastra Memory API Thread Ownership Check Is a No-op When mapUserToResourceId Is Unset

    YüksekCVSS 7,1İstismar yokEPSS %0

    mastra-ai · mastra28 Ağu 2026

  • CVE-2026-82275
    34İzleyin

    Qwen-Agent Arbitrary File Read via Caller-Supplied Document Path

    YüksekCVSS 8,7İstismar yokEPSS %0

    qwenlm · qwen-agent28 Ağu 2026

  • CVE-2026-82277
    37İzleyin

    Argo Rollouts Dashboard Unauthenticated Mutating Operations

    KritikCVSS 9,3İstismar yokEPSS %0

    argoproj · argo-rollouts28 Ağu 2026

  • CVE-2026-82278
    34İzleyin

    BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once

    YüksekCVSS 8,7İstismar yokEPSS %1

    dataelement · bisheng28 Ağu 2026

  • CVE-2026-82279
    28İzleyin

    HyperDX Team Management Operations Missing Role-Based Access Control

    YüksekCVSS 7,2İstismar yokEPSS %0

    hyperdxio · hyperdx28 Ağu 2026

  • CVE-2026-82280
    28İzleyin

    Quivr Prompt Endpoints Missing Ownership Validation

    YüksekCVSS 7,1İstismar yokEPSS %0

    quivrhq · quivr28 Ağu 2026

  • CVE-2026-82281
    36İzleyin

    Kotaemon Missing Ownership Check in Conversation Functions

    KritikCVSS 9,1İstismar yokEPSS %0

    cinnamon · kotaemon28 Ağu 2026

  • CVE-2026-82282
    35İzleyin

    Atlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers

    YüksekCVSS 8,8İstismar yokEPSS %0

    runatlantis · atlantis28 Ağu 2026

  • CVE-2026-82283
    34İzleyin

    VoltAgent Memory API Handlers Missing Ownership Checks

    YüksekCVSS 8,6İstismar yokEPSS %0

    voltagent · voltagent28 Ağu 2026

  • CVE-2026-82284
    34İzleyin

    Quivr Chat Endpoints Missing Ownership Validation

    YüksekCVSS 8,6İstismar yokEPSS %0

    quivrhq · quivr28 Ağu 2026

  • CVE-2026-82285
    35İzleyin

    BISHENG Unauthenticated Server-Side Request Forgery via Workflow Report Callback

    YüksekCVSS 8,8İstismar yokEPSS %0

    dataelement · bisheng28 Ağu 2026

  • CVE-2026-82286
    35İzleyin

    gpt-crawler Arbitrary File Write via outputFileName Parameter

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    builderio · gpt-crawler28 Ağu 2026

  • CVE-2026-82287
    34İzleyin

    Rybbit Reflects Any Origin in CORS Responses While Allowing Credentials

    YüksekCVSS 8,6İstismar yokEPSS %0

    rybbit-io · rybbit28 Ağu 2026

  • CVE-2026-82288
    34İzleyin

    Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags

    YüksekCVSS 8,7İstismar yokEPSS %0

    automatic1111 · stable-diffusion-webui28 Ağu 2026

  • CVE-2026-82289
    33İzleyin

    Gitingest Prefix-Based Git Host Check Enables Request Forgery and Token Disclosure

    YüksekCVSS 8,3İstismar yokEPSS %0

    coderamp-labs · gitingest28 Ağu 2026

  • CVE-2026-82291
    32İzleyin

    HeyForm Reflects Any Origin in CORS Responses While Allowing Credentials

    YüksekCVSS 8,1İstismar yokEPSS %0

    heyform · heyform28 Ağu 2026

  • CVE-2026-82329
    73Bu hafta

    Potential authentication bypass leading to administrative access in Artifactory

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %14

    jfrog · artifactory28 Ağu 2026

  • CVE-2026-16821
    31İzleyin

    Vulnerabilities in IBM AIX and PowerVM VIOS

    YüksekCVSS 7,8İstismar yokEPSS %0

    ibm · aix28 Ağu 2026

  • CVE-2026-17203
    30İzleyin

    IBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gaining elevated privileges and sensitive information [, ].

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · administration runtime expert for i28 Ağu 2026

  • CVE-2026-18527
    39İzleyin

    IBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gaining elevated privileges and sensitive information [, ].

    KritikCVSS 9,9İstismar yokEPSS %0

    ibm · administration runtime expert for i28 Ağu 2026

  • CVE-2026-18729
    40Planlayın

    Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement

    YüksekCVSS 8,8SilahlaştırılmışEPSS %1

    langflow · langflow28 Ağu 2026

  • CVE-2026-18891
    32İzleyin

    Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities

    YüksekCVSS 8,2İstismar yokEPSS %0

    langflow · langflow28 Ağu 2026

  • CVE-2026-18899
    30İzleyin

    Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities

    YüksekCVSS 7,5İstismar yokEPSS %0

    langflow · langflow28 Ağu 2026

  • CVE-2026-18904
    32İzleyin

    Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities

    YüksekCVSS 8,2İstismar yokEPSS %0

    langflow · langflow28 Ağu 2026

  • CVE-2026-19286
    39İzleyin

    Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    langflow · langflow28 Ağu 2026

  • CVE-2026-19295
    40Planlayın

    Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement

    KritikCVSS 9,9SilahlaştırılmışEPSS %1

    langflow · langflow28 Ağu 2026

  • CVE-2026-3627
    36İzleyin

    Multiple Vulnerabilities in IBM Concert Software

    KritikCVSS 9,1İstismar yokEPSS %0

    ibm · concert28 Ağu 2026

  • CVE-2026-51661
    36İzleyin

    Incorrect access control in the getPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain

    KritikCVSS 9,1İstismar yokEPSS %0

    28 Ağu 2026

  • CVE-2026-51662
    30İzleyin

    Incorrect access control in the getCloudSrvCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obt

    YüksekCVSS 7,5İstismar yokEPSS %0

    28 Ağu 2026

  • CVE-2026-51663
    39İzleyin

    Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger w

    KritikCVSS 9,8İstismar yokEPSS %0

    28 Ağu 2026

  • CVE-2026-55763
    34İzleyin

    Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits

    YüksekCVSS 8,7İstismar yokEPSS %0

    klever-io · klever-go28 Ağu 2026

  • CVE-2026-75118
    34İzleyin

    http_gdpr_decrypt Pre-Authentication Stack-Based Buffer Overflow

    YüksekCVSS 8,7İstismar yokEPSS %0

    tp-link systems inc. · tl-mr100 v3.2028 Ağu 2026

  • CVE-2026-77037
    30İzleyin

    multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

    YüksekCVSS 7,5İstismar yokEPSS %0

    expressjs · multer28 Ağu 2026

  • CVE-2026-77078
    30İzleyin

    multer vulnerable to Denial of Service via crafted multipart field names

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    expressjs · multer28 Ağu 2026

  • CVE-2026-81532
    34İzleyin

    BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption

    YüksekCVSS 8,7İstismar yokEPSS %0

    mongodb · bi connector odbc driver28 Ağu 2026

  • CVE-2026-82017
    34İzleyin

    IGEL OS 12 / 11 Boot Registry Parameter Injection via Unsigned Configuration Area

    YüksekCVSS 8,6İstismar yokEPSS %0

    igel · igel os 1228 Ağu 2026

  • CVE-2026-82333
    30İzleyin

    multer vulnerable to Denial of Service via oversized array index in field names

    YüksekCVSS 7,5İstismar yokEPSS %0

    expressjs · multer28 Ağu 2026

  • CVE-2026-55764
    34İzleyin

    Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

    YüksekCVSS 8,7İstismar yokEPSS %0

    klever-io · klever-go28 Ağu 2026

  • CVE-2026-55841
    30İzleyin

    Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original message

    YüksekCVSS 7,5İstismar yokEPSS %0

    graylog2 · graylog2-server28 Ağu 2026

  • CVE-2026-55848
    34İzleyin

    mapfish-print: XXE on MapFish Print allows reading arbitrary files of certain types

    YüksekCVSS 8,6İstismar yokEPSS %0

    mapfish · mapfish-print28 Ağu 2026

  • CVE-2026-77586
    34İzleyin

    MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output

    YüksekCVSS 8,5İstismar yokEPSS %0

    mongodb · bi connector28 Ağu 2026

  • CVE-2026-81490
    33İzleyin

    MongoDB Connector for BI Improper Error Handling During Schema Sampling May Cause Loss of SQL Service

    YüksekCVSS 8,3İstismar yokEPSS %0

    mongodb · bi connector28 Ağu 2026

  • CVE-2026-81517
    34İzleyin

    MongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of SQL Service

    YüksekCVSS 8,7İstismar yokEPSS %0

    mongodb · bi connector28 Ağu 2026

  • CVE-2026-81518
    34İzleyin

    BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections

    YüksekCVSS 8,7İstismar yokEPSS %0

    mongodb · bi connector28 Ağu 2026

  • CVE-2026-81520
    34İzleyin

    MongoDB Connector for BI Unbounded Authentication Negotiation Leading to Connection Exhaustion

    YüksekCVSS 8,7İstismar yokEPSS %0

    mongodb · bi connector28 Ağu 2026

  • CVE-2026-41012
    30İzleyin

    BOSH vSphere CPI Improper Cert Validation

    YüksekCVSS 7,7İstismar yokEPSS %0

    cloud foundry · bosh-vsphere-cpi-release28 Ağu 2026

  • CVE-2026-55784
    30İzleyin

    free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

    YüksekCVSS 7,5İstismar yokEPSS %0

    free5gc · free5gc28 Ağu 2026

  • CVE-2026-10522
    39İzleyin

    Simple User Registration <= 6.9 - Unauthenticated Privilege Escalation to Administrator

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · memberhero29 Ağu 2026

  • CVE-2026-16061
    34İzleyin

    Rest Routes <= 5.5.5 - Unauthenticated SQLi via custom-tables/tables/{table_name}

    YüksekCVSS 8,6İstismar yokEPSS %0

    unknown · rest routes29 Ağu 2026

  • CVE-2026-16259
    39İzleyin

    Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · uix usercenter29 Ağu 2026

  • CVE-2026-16600
    30İzleyin

    SmartAIPress <= 1.2.0 - Subscriber+ Server-Side Request Forgery via smartaipress_openai_upload_and_set_featured_image

    YüksekCVSS 7,7İstismar yokEPSS %0

    unknown · smartaipress29 Ağu 2026

  • CVE-2026-16947
    36İzleyin

    Total Processing Card Payments for WooCommerce <= 7.3 - Unauthenticated SSRF leading to Payment Bypass and Gateway Credential Disclosure

    KritikCVSS 9,1İstismar yokEPSS %0

    unknown · total processing card payments for woocommerce29 Ağu 2026

  • CVE-2026-76547
    26İzleyin

    Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export

    OrtaCVSS 6,6Kavram kanıtıEPSS %0

    unknown · user profile builder29 Ağu 2026

  • CVE-2026-76548
    32İzleyin

    Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass

    YüksekCVSS 8,2İstismar yokEPSS %0

    unknown · user profile builder29 Ağu 2026

  • CVE-2026-76586
    30İzleyin

    BookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price Manipulation via PayPal Payment Confirmation

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · appointment booking calendar plugin and scheduling plugin29 Ağu 2026

  • CVE-2026-77007
    30İzleyin

    HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated BigBlueButton API Secret Disclosure

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · hel online classroom: ai-powered online classrooms29 Ağu 2026

  • CVE-2026-77012
    37İzleyin

    Icollect <= 1.0.0 - Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write via Default Publishing Password

    KritikCVSS 9,3İstismar yokEPSS %0

    unknown · 爱采集数据采集和发布插件29 Ağu 2026

  • CVE-2026-80725
    39İzleyin

    net: gro: properly validate BIG TCP aggregation criteria

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux29 Ağu 2026

  • CVE-2026-14494
    39İzleyin

    Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field

    KritikCVSS 9,8İstismar yokEPSS %0

    bdthemes · sigmaforms pro – ai generated forms29 Ağu 2026

  • CVE-2026-82447
    34İzleyin

    Skyvern before 1.0.45 Sandbox Escape via TextPromptBlock

    YüksekCVSS 8,7İstismar yokEPSS %0

    skyvern-ai · skyvern29 Ağu 2026

  • CVE-2026-82448
    37İzleyin

    Shinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node Key

    KritikCVSS 9,3İstismar yokEPSS %0

    shinobi systems · shinobi29 Ağu 2026

  • CVE-2026-82452
    37İzleyin

    rust-iot-platform Authentication Bypass via Missing Request Guards

    KritikCVSS 9,3İstismar yokEPSS %0

    iot-ecology · rust-iot-platform29 Ağu 2026

  • CVE-2026-82453
    34İzleyin

    rust-iot-platform Cleartext Password Storage via User Model

    YüksekCVSS 8,7İstismar yokEPSS %0

    iot-ecology · rust-iot-platform29 Ağu 2026

  • CVE-2026-82454
    37İzleyin

    Omnivore before android-0.227.0 Authentication Bypass via Apple Sign-in

    KritikCVSS 9,3İstismar yokEPSS %0

    omnivore-app · omnivore29 Ağu 2026

  • CVE-2026-82456
    41Planlayın

    argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP

    KritikCVSS 10,0Kavram kanıtıEPSS %2

    argoproj-labs · argocd-mcp29 Ağu 2026

  • CVE-2026-82457
    34İzleyin

    su-exec through 0.3 Privilege Escalation via Numeric User ID

    YüksekCVSS 8,5İstismar yokEPSS %0

    ncopa · su-exec29 Ağu 2026

  • CVE-2026-82481
    34İzleyin

    The cohttp package before 6.3.0 for OCaml allows directory traversal.

    YüksekCVSS 8,7İstismar yokEPSS %0

    mirage · cohttp29 Ağu 2026