Yayın tarihine göre
Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları
7.294 kayıt · 20 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 72 / 73
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
33İzleyin | CVE-2026-77850İstismar yok | Stored XSS in AshAdmin relationship typeahead via unescaped label_field contentash-project · ash_admin · CWE-79 | Yüksek8,4 | — | %0,4 | 30 Ağu 2026 |
33İzleyin | CVE-2026-82673İstismar yok | Path traversal in AshAdmin file uploads via unsanitized client filenameash-project · ash_admin · CWE-22 | Yüksek8,3 | — | %0,7 | 30 Ağu 2026 |
33İzleyin | CVE-2026-82722İstismar yok | AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)ash-project · ash_admin · CWE-770 | Yüksek8,3 | — | %0,4 | 30 Ağu 2026 |
30İzleyin | CVE-2026-82724İstismar yok | Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomainash-project · ash_phoenix · CWE-863 | Yüksek7,6 | — | %0,4 | 31 Ağu 2026 |
34İzleyin | CVE-2026-82616İstismar yok | TOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflowtotolink · nr1800x · CWE-119 | Yüksek8,6 | — | %0,8 | 31 Ağu 2026 |
30İzleyin | CVE-2026-40463İstismar yok | An Insufficient Role-based Access Control Vulnerability in WaveSuitenokia · wavesuite · CWE-284 | Yüksek7,6 | — | %0,3 | 31 Ağu 2026 |
37İzleyin | CVE-2026-82628İstismar yok | Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges managementcolorful · igamecenter · CWE-266 | Kritik9,3 | — | %0,1 | 31 Ağu 2026 |
37İzleyin | CVE-2026-19410İstismar yok | Google Cloud Build Comment Control Bypass via Webhook Suppressiongoogle cloud · google cloud build · CWE-345 | Kritik9,4 | — | %0,1 | 31 Ağu 2026 |
30İzleyin | CVE-2026-81624İstismar yok | Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinitered hat · red hat build of apache camel for spring boot 4 · CWE-770 | Yüksek7,5 | — | %0,5 | 31 Ağu 2026 |
28İzleyin | CVE-2026-82659İstismar yok | nodemailer before 9.0.1 File Read and SSRF via raw optionnodemailer · nodemailer · CWE-73 | Yüksek7,1 | — | %0,3 | 31 Ağu 2026 |
33İzleyin | CVE-2026-82662İstismar yok | Nodemailer before 8.0.8 TLS Certificate Validation Bypassnodemailer · nodemailer · CWE-295 | Yüksek8,3 | — | %0,1 | 31 Ağu 2026 |
37İzleyin | CVE-2026-82857İstismar yok | hulumi before v1.3.2 Privilege Escalation via IAM Policykerberosmansour · hulumi · CWE-269 | Kritik9,3 | — | %0,5 | 31 Ağu 2026 |
37İzleyin | CVE-2026-82859İstismar yok | hulumi before v1.3.2 SCP Template Tag-on-Create Bypasskerberosmansour · hulumi · CWE-284 | Kritik9,3 | — | %0,5 | 31 Ağu 2026 |
34İzleyin | CVE-2026-82862İstismar yok | Hulumi before v1.3.2 Helper Script Shadowing via Workspace Fileskerberosmansour · hulumi · CWE-426 | Yüksek8,6 | — | %0,1 | 31 Ağu 2026 |
32İzleyin | CVE-2026-82869İstismar yok | ToolJet Database before v3.16.44 Privilege Escalation via join_tablestooljet · tooljet · CWE-639 | Yüksek8,2 | — | %0,4 | 31 Ağu 2026 |
28İzleyin | CVE-2026-82870İstismar yok | ToolJet before v3.16.208 Cross-Tenant Database Manipulationtooljet · tooljet · CWE-639 | Yüksek7,0 | — | %0,4 | 31 Ağu 2026 |
32İzleyin | CVE-2026-82871İstismar yok | ToolJet before v3.16.208 Cross-Organization Data Read via Database Routestooljet · tooljet · CWE-862 | Yüksek8,2 | — | %0,4 | 31 Ağu 2026 |
28İzleyin | CVE-2026-82872İstismar yok | ToolJet before v3.16.208 Cross-Workspace Authorization Bypasstooljet · tooljet · CWE-639 | Yüksek7,1 | — | %0,5 | 31 Ağu 2026 |
37İzleyin | CVE-2026-82874İstismar yok | ToolJet before v3.16.208 Cross-Tenant Authorization Bypass via tooljet-dbtooljet · tooljet · CWE-639 | Kritik9,4 | — | %0,4 | 31 Ağu 2026 |
30İzleyin | CVE-2026-19873İstismar yok | HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elementsCWE-770 | Yüksek7,5 | — | %0,5 | 31 Ağu 2026 |
39İzleyin | CVE-2026-49003İstismar yok | Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V5.0 Productzte · zxdu68 s202 v5.0 · CWE-287 | Kritik9,6 | — | %2,3 | 31 Ağu 2026 |
29İzleyin | CVE-2026-82680İstismar yok | D-Link DSM-G600 Multipart load_file.cgi out-of-bounds writed-link · dsm-g600 · CWE-119 | Yüksek7,4 | — | %0,8 | 31 Ağu 2026 |
35İzleyin | CVE-2026-82688İstismar yok | D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injectiond-link · dns-340l · CWE-77 | Yüksek8,5 | — | %3,6 | 31 Ağu 2026 |
37İzleyin | CVE-2026-82876Kavram kanıtı | Phison PS3111-S11 Controller Firmware Signature Verification Bypassphison electronics corporation · ps3111-s11 controller firmware · CWE-347 | Kritik9,3 | — | %0,1 | 31 Ağu 2026 |
34İzleyin | CVE-2026-82880İstismar yok | YaCy Search Server through 1.941 XML External Entity Injection via Parsersyacy · yacy_search_server · CWE-611 | Yüksek8,7 | — | %0,6 | 31 Ağu 2026 |
39İzleyin | CVE-2026-58574İstismar yok | Dell PowerStore contains a Missing Authentication for Critical Function vulnerability.dell · powerstoreos · CWE-306 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
21İzleyin | CVE-2026-70449İstismar yok | Apache Wicket: Path traversal in resource style/variation/localeapache · wicket · CWE-22 | Orta5,3 | — | %0,9 | 31 Ağu 2026 |
30İzleyin | CVE-2026-71257İstismar yok | Apache Wicket: Configured file upload limits are not enforced when the multipart request has already been parsedapache · wicket · CWE-770 | Yüksek7,5 | — | %0,7 | 31 Ağu 2026 |
35İzleyin | CVE-2026-82689İstismar yok | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injectiond-link · dns-320l · CWE-77 | Yüksek8,6 | — | %3,2 | 31 Ağu 2026 |
35İzleyin | CVE-2026-82690İstismar yok | D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injectiond-link · dns-327l · CWE-77 | Yüksek8,5 | — | %3,6 | 31 Ağu 2026 |
35İzleyin | CVE-2026-82691İstismar yok | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injectiond-link · dns-320l · CWE-77 | Yüksek8,5 | — | %3,6 | 31 Ağu 2026 |
38İzleyin | CVE-2026-82854İstismar yok | Nodemailer before 8.0.3 SMTP Command Injection via envelope.sizenodemailer · nodemailer · CWE-93 | Kritik9,3 | — | %1,9 | 31 Ağu 2026 |
37İzleyin | CVE-2026-82855İstismar yok | @hulumi/policies before 1.3.2 Evidence Validation Bypasshulumi · policies · CWE-693 | Kritik9,3 | — | %0,5 | 31 Ağu 2026 |
37İzleyin | CVE-2026-82856İstismar yok | @hulumi/policies before 1.3.2 OIDC Trust Policy Bypasshulumi · policies · CWE-284 | Kritik9,3 | — | %0,5 | 31 Ağu 2026 |
37İzleyin | CVE-2026-82858İstismar yok | @hulumi/drift before 1.3.2 Unsafe Execute Plan Acceptancehulumi · drift · CWE-345 | Kritik9,3 | — | %0,2 | 31 Ağu 2026 |
37İzleyin | CVE-2026-82860İstismar yok | @hulumi/policies before 1.3.2 Admin Policy Bypasshulumi · policies · CWE-269 | Kritik9,3 | — | %0,5 | 31 Ağu 2026 |
34İzleyin | CVE-2026-82861İstismar yok | @hulumi/policies before 1.3.2 SecureBucket Parent Spoof Bypasshulumi · policies · CWE-284 | Yüksek8,7 | — | %0,4 | 31 Ağu 2026 |
34İzleyin | CVE-2026-82863İstismar yok | @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detectionhulumi · baseline · CWE-778 | Yüksek8,7 | — | %0,2 | 31 Ağu 2026 |
28İzleyin | CVE-2026-82864İstismar yok | pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bombpdfme · pdf-lib · CWE-409 | Yüksek7,1 | — | %0,4 | 31 Ağu 2026 |
35İzleyin | CVE-2026-82866İstismar yok | @pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetchpdfme · common · CWE-918 | Yüksek8,9 | — | %0,3 | 31 Ağu 2026 |
35İzleyin | CVE-2026-5956İstismar yok | SQLi in Ankara Hosting's Site Management Panelankara hosting · site management panel · CWE-89 | Yüksek8,8 | — | %0,4 | 31 Ağu 2026 |
35İzleyin | CVE-2026-82692İstismar yok | D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injectiond-link · dns-340l · CWE-77 | Yüksek8,6 | — | %3,2 | 31 Ağu 2026 |
37İzleyin | CVE-2026-82693İstismar yok | Tenda AC1206 Web UI telnet TendaTelnet missing authenticationtenda · ac1206 · CWE-287 | Kritik9,3 | — | %1,4 | 31 Ağu 2026 |
37İzleyin | CVE-2026-82694İstismar yok | Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authenticationtenda · ac1206 · CWE-287 | Kritik9,3 | — | %1,4 | 31 Ağu 2026 |
37İzleyin | CVE-2026-82695İstismar yok | Tenda AC18 Telnet telnet missing authenticationtenda · ac18 · CWE-287 | Kritik9,3 | — | %1,4 | 31 Ağu 2026 |
28İzleyin | GHSA-h3hj-cmcx-xc66İstismar yok | Duplicate Advisory: Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-npm · nodemailer · CWE-73 | Yüksek7,1 | — | — | 31 Ağu 2026 |
30İzleyin | CVE-2026-19616İstismar yok | Information Disclosure in TBC Technology's KitLogistictbc technology inc. · kitlogistic · CWE-862 | Yüksek7,5 | — | %0,2 | 31 Ağu 2026 |
31İzleyin | CVE-2026-19702İstismar yok | OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repairtübi̇tak bi̇lgem software technologies research institute · pardus boot repair · CWE-78 | Yüksek7,8 | — | %0,4 | 31 Ağu 2026 |
30İzleyin | CVE-2026-51668İstismar yok | Incorrect access control in the setLanguageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify langCWE-284 | Yüksek7,5 | — | %0,4 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51669İstismar yok | Incorrect access control in the getPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain pairing CWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51670İstismar yok | Incorrect access control in the getSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to query slaveCWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
30İzleyin | CVE-2026-51671İstismar yok | Incorrect access control in the getCloudDownloadStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtCWE-284 | Yüksek7,5 | — | %0,4 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51672İstismar yok | Incorrect access control in the getRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain the rCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
30İzleyin | CVE-2026-51673İstismar yok | Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter time synchCWE-284 | Yüksek7,5 | — | %0,4 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51674İstismar yok | Incorrect access control in the setScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to configure fCWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51675İstismar yok | Incorrect access control in the setWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure upCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51676İstismar yok | Incorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter aCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51677İstismar yok | Incorrect access control in the setUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change UPnP serCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51679İstismar yok | Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the CWE-284 | Kritik9,1 | — | %0,6 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51680İstismar yok | Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify LED behavCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51681İstismar yok | Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose WAN-siCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
30İzleyin | CVE-2026-76763İstismar yok | Io.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via large exponent float literalsred hat · red hat build of quarkus · CWE-1284 | Yüksek7,5 | — | %0,6 | 31 Ağu 2026 |
35İzleyin | CVE-2026-78074İstismar yok | Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensionsminiorgange.com · miniorange oauth client (free) extension for joomla · CWE-284 | Yüksek8,8 | — | %0,5 | 31 Ağu 2026 |
34İzleyin | CVE-2026-78077İstismar yok | Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.10joomshaper.com · helix ultimate extension for joomla · CWE-79 | Yüksek8,6 | — | %0,4 | 31 Ağu 2026 |
35İzleyin | CVE-2026-78078İstismar yok | Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10joomshaper.com · helix ultimate extension for joomla · CWE-434 | Yüksek8,9 | — | %0,4 | 31 Ağu 2026 |
35İzleyin | CVE-2026-82217İstismar yok | In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools (writeFileContent, suggestFileContenteclipse foundation · eclipse theia · CWE-22 | Yüksek8,8 | — | %0,6 | 31 Ağu 2026 |
28İzleyin | CVE-2026-82877İstismar yok | ILIAS Arbitrary File Read via SOAP addFileilias-elearning e.v. · ilias · CWE-22 | Yüksek7,1 | — | %0,5 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51684İstismar yok | Incorrect access control in the setStorageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter the stCWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51686İstismar yok | Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigureCWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51687İstismar yok | Incorrect access control in the setWiFiEasyGuestCf function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to create CWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
30İzleyin | CVE-2026-51688İstismar yok | Incorrect access control in the setWiFiSignalCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reduce wiCWE-284 | Yüksek7,5 | — | %0,6 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51689İstismar yok | Incorrect access control in the setUpgradeFW function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger firmwCWE-284 | Kritik9,1 | — | %0,6 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51690İstismar yok | Incorrect access control in the setWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter upstream pCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51691İstismar yok | Incorrect access control in the setUploadSetting function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to manipulatCWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51692İstismar yok | Incorrect access control in the setWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to establish CWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51693İstismar yok | Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to weaken edge CWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
30İzleyin | CVE-2026-51694İstismar yok | Incorrect access control in the setStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to add or CWE-284 | Yüksek7,5 | — | %0,4 | 31 Ağu 2026 |
30İzleyin | CVE-2026-51695İstismar yok | Incorrect access control in the setDdnsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter dynamic DCWE-284 | Yüksek7,5 | — | %0,4 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51696İstismar yok | Incorrect access control in the setPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to exposeCWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51697İstismar yok | Incorrect access control in the setIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter IPTV servCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
37İzleyin | CVE-2026-59111İstismar yok | Command Injection vulnerability in eObčanka-Identifikaceministry of the interior (mvčr) · eobčanka-identifikace · CWE-78 | Kritik9,3 | — | %1,3 | 31 Ağu 2026 |
36İzleyin | CVE-2026-66047İstismar yok | ProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCEproper fraction · profilepress · CWE-306 | Kritik9,2 | — | %0,9 | 31 Ağu 2026 |
29İzleyin | CVE-2026-78422İstismar yok | zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UIDz-galaxy · zbus_polkit · CWE-367 | Yüksek7,3 | — | %0,1 | 31 Ağu 2026 |
40Planlayın | CVE-2026-82970İstismar yok | WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerabilitywp legal pages · wp cookie notice for gdpr, ccpa & eprivacy consent · CWE-434 | Kritik10,0 | — | %0,5 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51152İstismar yok | Server-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803.CWE-918 | Kritik9,1 | — | %0,6 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51698İstismar yok | Incorrect access control in the setUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter brCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51699İstismar yok | Incorrect access control in the setDmzCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose an internCWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51700İstismar yok | Incorrect access control in the setWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to degradeCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51701İstismar yok | Incorrect access control in the setMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change dCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51705İstismar yok | Incorrect access control in the setWiFiMeshName function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rename mesCWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51708İstismar yok | Incorrect access control in the setWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change WPS aCWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51709İstismar yok | Incorrect access control in the setWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigurCWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51710İstismar yok | Incorrect access control in the setParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter parCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51711İstismar yok | Incorrect access control in the setWiFiWpsStart function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to open a wirCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51713İstismar yok | Incorrect access control in the setManualDialCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to manipulatCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51715İstismar yok | Incorrect access control in the delMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove MCWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
30İzleyin | CVE-2026-51716İstismar yok | Incorrect access control in the delPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to deleteCWE-284 | Yüksek7,5 | — | %0,4 | 31 Ağu 2026 |
36İzleyin | CVE-2026-51717İstismar yok | Incorrect access control in the setOpModeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the deCWE-284 | Kritik9,1 | — | %0,5 | 31 Ağu 2026 |
39İzleyin | CVE-2026-51718İstismar yok | Incorrect access control in the delStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove CWE-284 | Kritik9,8 | — | %0,6 | 31 Ağu 2026 |
30İzleyin | CVE-2026-51719İstismar yok | Incorrect access control in the delUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove UCWE-284 | Yüksek7,5 | — | %0,4 | 31 Ağu 2026 |
- CVE-2026-7785033İzleyin
Stored XSS in AshAdmin relationship typeahead via unescaped label_field content
YüksekCVSS 8,4İstismar yokEPSS %0ash-project · ash_admin30 Ağu 2026
- CVE-2026-8267333İzleyin
Path traversal in AshAdmin file uploads via unsanitized client filename
YüksekCVSS 8,3İstismar yokEPSS %0ash-project · ash_admin30 Ağu 2026
- CVE-2026-8272233İzleyin
AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)
YüksekCVSS 8,3İstismar yokEPSS %0ash-project · ash_admin30 Ağu 2026
- CVE-2026-8272430İzleyin
Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain
YüksekCVSS 7,6İstismar yokEPSS %0ash-project · ash_phoenix31 Ağu 2026
- CVE-2026-8261634İzleyin
TOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflow
YüksekCVSS 8,6İstismar yokEPSS %0totolink · nr1800x31 Ağu 2026
- CVE-2026-4046330İzleyin
An Insufficient Role-based Access Control Vulnerability in WaveSuite
YüksekCVSS 7,6İstismar yokEPSS %0nokia · wavesuite31 Ağu 2026
- CVE-2026-8262837İzleyin
Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management
KritikCVSS 9,3İstismar yokEPSS %0colorful · igamecenter31 Ağu 2026
- CVE-2026-1941037İzleyin
Google Cloud Build Comment Control Bypass via Webhook Suppression
KritikCVSS 9,4İstismar yokEPSS %0google cloud · google cloud build31 Ağu 2026
- CVE-2026-8162430İzleyin
Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat build of apache camel for spring boot 431 Ağu 2026
- CVE-2026-8265928İzleyin
nodemailer before 9.0.1 File Read and SSRF via raw option
YüksekCVSS 7,1İstismar yokEPSS %0nodemailer · nodemailer31 Ağu 2026
- CVE-2026-8266233İzleyin
Nodemailer before 8.0.8 TLS Certificate Validation Bypass
YüksekCVSS 8,3İstismar yokEPSS %0nodemailer · nodemailer31 Ağu 2026
- CVE-2026-8285737İzleyin
hulumi before v1.3.2 Privilege Escalation via IAM Policy
KritikCVSS 9,3İstismar yokEPSS %0kerberosmansour · hulumi31 Ağu 2026
- CVE-2026-8285937İzleyin
hulumi before v1.3.2 SCP Template Tag-on-Create Bypass
KritikCVSS 9,3İstismar yokEPSS %0kerberosmansour · hulumi31 Ağu 2026
- CVE-2026-8286234İzleyin
Hulumi before v1.3.2 Helper Script Shadowing via Workspace Files
YüksekCVSS 8,6İstismar yokEPSS %0kerberosmansour · hulumi31 Ağu 2026
- CVE-2026-8286932İzleyin
ToolJet Database before v3.16.44 Privilege Escalation via join_tables
YüksekCVSS 8,2İstismar yokEPSS %0tooljet · tooljet31 Ağu 2026
- CVE-2026-8287028İzleyin
ToolJet before v3.16.208 Cross-Tenant Database Manipulation
YüksekCVSS 7,0İstismar yokEPSS %0tooljet · tooljet31 Ağu 2026
- CVE-2026-8287132İzleyin
ToolJet before v3.16.208 Cross-Organization Data Read via Database Routes
YüksekCVSS 8,2İstismar yokEPSS %0tooljet · tooljet31 Ağu 2026
- CVE-2026-8287228İzleyin
ToolJet before v3.16.208 Cross-Workspace Authorization Bypass
YüksekCVSS 7,1İstismar yokEPSS %0tooljet · tooljet31 Ağu 2026
- CVE-2026-8287437İzleyin
ToolJet before v3.16.208 Cross-Tenant Authorization Bypass via tooljet-db
KritikCVSS 9,4İstismar yokEPSS %0tooljet · tooljet31 Ağu 2026
- CVE-2026-1987330İzleyin
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements
YüksekCVSS 7,5İstismar yokEPSS %031 Ağu 2026
- CVE-2026-4900339İzleyin
Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V5.0 Product
KritikCVSS 9,6İstismar yokEPSS %2zte · zxdu68 s202 v5.031 Ağu 2026
- CVE-2026-8268029İzleyin
D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write
YüksekCVSS 7,4İstismar yokEPSS %0d-link · dsm-g60031 Ağu 2026
- CVE-2026-8268835İzleyin
D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection
YüksekCVSS 8,5İstismar yokEPSS %3d-link · dns-340l31 Ağu 2026
- CVE-2026-8287637İzleyin
Phison PS3111-S11 Controller Firmware Signature Verification Bypass
KritikCVSS 9,3Kavram kanıtıEPSS %0phison electronics corporation · ps3111-s11 controller firmware31 Ağu 2026
- CVE-2026-8288034İzleyin
YaCy Search Server through 1.941 XML External Entity Injection via Parsers
YüksekCVSS 8,7İstismar yokEPSS %0yacy · yacy_search_server31 Ağu 2026
- CVE-2026-5857439İzleyin
Dell PowerStore contains a Missing Authentication for Critical Function vulnerability.
KritikCVSS 9,8İstismar yokEPSS %0dell · powerstoreos31 Ağu 2026
- CVE-2026-7044921İzleyin
Apache Wicket: Path traversal in resource style/variation/locale
OrtaCVSS 5,3İstismar yokEPSS %0apache · wicket31 Ağu 2026
- CVE-2026-7125730İzleyin
Apache Wicket: Configured file upload limits are not enforced when the multipart request has already been parsed
YüksekCVSS 7,5İstismar yokEPSS %0apache · wicket31 Ağu 2026
- CVE-2026-8268935İzleyin
D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection
YüksekCVSS 8,6İstismar yokEPSS %3d-link · dns-320l31 Ağu 2026
- CVE-2026-8269035İzleyin
D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection
YüksekCVSS 8,5İstismar yokEPSS %3d-link · dns-327l31 Ağu 2026
- CVE-2026-8269135İzleyin
D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection
YüksekCVSS 8,5İstismar yokEPSS %3d-link · dns-320l31 Ağu 2026
- CVE-2026-8285438İzleyin
Nodemailer before 8.0.3 SMTP Command Injection via envelope.size
KritikCVSS 9,3İstismar yokEPSS %1nodemailer · nodemailer31 Ağu 2026
- CVE-2026-8285537İzleyin
@hulumi/policies before 1.3.2 Evidence Validation Bypass
KritikCVSS 9,3İstismar yokEPSS %0hulumi · policies31 Ağu 2026
- CVE-2026-8285637İzleyin
@hulumi/policies before 1.3.2 OIDC Trust Policy Bypass
KritikCVSS 9,3İstismar yokEPSS %0hulumi · policies31 Ağu 2026
- CVE-2026-8285837İzleyin
@hulumi/drift before 1.3.2 Unsafe Execute Plan Acceptance
KritikCVSS 9,3İstismar yokEPSS %0hulumi · drift31 Ağu 2026
- CVE-2026-8286037İzleyin
@hulumi/policies before 1.3.2 Admin Policy Bypass
KritikCVSS 9,3İstismar yokEPSS %0hulumi · policies31 Ağu 2026
- CVE-2026-8286134İzleyin
@hulumi/policies before 1.3.2 SecureBucket Parent Spoof Bypass
YüksekCVSS 8,7İstismar yokEPSS %0hulumi · policies31 Ağu 2026
- CVE-2026-8286334İzleyin
@hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection
YüksekCVSS 8,7İstismar yokEPSS %0hulumi · baseline31 Ağu 2026
- CVE-2026-8286428İzleyin
pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bomb
YüksekCVSS 7,1İstismar yokEPSS %0pdfme · pdf-lib31 Ağu 2026
- CVE-2026-8286635İzleyin
@pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch
YüksekCVSS 8,9İstismar yokEPSS %0pdfme · common31 Ağu 2026
- CVE-2026-595635İzleyin
SQLi in Ankara Hosting's Site Management Panel
YüksekCVSS 8,8İstismar yokEPSS %0ankara hosting · site management panel31 Ağu 2026
- CVE-2026-8269235İzleyin
D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection
YüksekCVSS 8,6İstismar yokEPSS %3d-link · dns-340l31 Ağu 2026
- CVE-2026-8269337İzleyin
Tenda AC1206 Web UI telnet TendaTelnet missing authentication
KritikCVSS 9,3İstismar yokEPSS %1tenda · ac120631 Ağu 2026
- CVE-2026-8269437İzleyin
Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication
KritikCVSS 9,3İstismar yokEPSS %1tenda · ac120631 Ağu 2026
- CVE-2026-8269537İzleyin
Tenda AC18 Telnet telnet missing authentication
KritikCVSS 9,3İstismar yokEPSS %1tenda · ac1831 Ağu 2026
- GHSA-h3hj-cmcx-xc6628İzleyin
Duplicate Advisory: Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-
YüksekCVSS 7,1İstismar yoknpm · nodemailer31 Ağu 2026
- CVE-2026-1961630İzleyin
Information Disclosure in TBC Technology's KitLogistic
YüksekCVSS 7,5İstismar yokEPSS %0tbc technology inc. · kitlogistic31 Ağu 2026
- CVE-2026-1970231İzleyin
OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair
YüksekCVSS 7,8İstismar yokEPSS %0tübi̇tak bi̇lgem software technologies research institute · pardus boot repair31 Ağu 2026
- CVE-2026-5166830İzleyin
Incorrect access control in the setLanguageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify lang
YüksekCVSS 7,5İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5166936İzleyin
Incorrect access control in the getPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain pairing
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5167039İzleyin
Incorrect access control in the getSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to query slave
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5167130İzleyin
Incorrect access control in the getCloudDownloadStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obt
YüksekCVSS 7,5İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5167236İzleyin
Incorrect access control in the getRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain the r
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5167330İzleyin
Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter time synch
YüksekCVSS 7,5İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5167439İzleyin
Incorrect access control in the setScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to configure f
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5167536İzleyin
Incorrect access control in the setWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure up
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5167636İzleyin
Incorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter a
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5167736İzleyin
Incorrect access control in the setUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change UPnP ser
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5167936İzleyin
Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5168036İzleyin
Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify LED behav
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5168136İzleyin
Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose WAN-si
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-7676330İzleyin
Io.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via large exponent float literals
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat build of quarkus31 Ağu 2026
- CVE-2026-7807435İzleyin
Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions
YüksekCVSS 8,8İstismar yokEPSS %0miniorgange.com · miniorange oauth client (free) extension for joomla31 Ağu 2026
- CVE-2026-7807734İzleyin
Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.10
YüksekCVSS 8,6İstismar yokEPSS %0joomshaper.com · helix ultimate extension for joomla31 Ağu 2026
- CVE-2026-7807835İzleyin
Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10
YüksekCVSS 8,9İstismar yokEPSS %0joomshaper.com · helix ultimate extension for joomla31 Ağu 2026
- CVE-2026-8221735İzleyin
In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools (writeFileContent, suggestFileContent
YüksekCVSS 8,8İstismar yokEPSS %0eclipse foundation · eclipse theia31 Ağu 2026
- CVE-2026-8287728İzleyin
ILIAS Arbitrary File Read via SOAP addFile
YüksekCVSS 7,1İstismar yokEPSS %0ilias-elearning e.v. · ilias31 Ağu 2026
- CVE-2026-5168439İzleyin
Incorrect access control in the setStorageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter the st
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5168639İzleyin
Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5168736İzleyin
Incorrect access control in the setWiFiEasyGuestCf function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to create
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5168830İzleyin
Incorrect access control in the setWiFiSignalCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reduce wi
YüksekCVSS 7,5İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5168936İzleyin
Incorrect access control in the setUpgradeFW function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger firmw
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5169036İzleyin
Incorrect access control in the setWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter upstream p
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5169139İzleyin
Incorrect access control in the setUploadSetting function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to manipulat
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5169236İzleyin
Incorrect access control in the setWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to establish
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5169339İzleyin
Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to weaken edge
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5169430İzleyin
Incorrect access control in the setStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to add or
YüksekCVSS 7,5İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5169530İzleyin
Incorrect access control in the setDdnsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter dynamic D
YüksekCVSS 7,5İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5169639İzleyin
Incorrect access control in the setPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5169736İzleyin
Incorrect access control in the setIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter IPTV serv
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5911137İzleyin
Command Injection vulnerability in eObčanka-Identifikace
KritikCVSS 9,3İstismar yokEPSS %1ministry of the interior (mvčr) · eobčanka-identifikace31 Ağu 2026
- CVE-2026-6604736İzleyin
ProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCE
KritikCVSS 9,2İstismar yokEPSS %0proper fraction · profilepress31 Ağu 2026
- CVE-2026-7842229İzleyin
zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID
YüksekCVSS 7,3İstismar yokEPSS %0z-galaxy · zbus_polkit31 Ağu 2026
- CVE-2026-8297040Planlayın
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerability
KritikCVSS 10,0İstismar yokEPSS %0wp legal pages · wp cookie notice for gdpr, ccpa & eprivacy consent31 Ağu 2026
- CVE-2026-5115236İzleyin
Server-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803.
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5169836İzleyin
Incorrect access control in the setUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter br
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5169939İzleyin
Incorrect access control in the setDmzCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose an intern
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5170036İzleyin
Incorrect access control in the setWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to degrade
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5170136İzleyin
Incorrect access control in the setMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change d
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5170539İzleyin
Incorrect access control in the setWiFiMeshName function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rename mes
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5170839İzleyin
Incorrect access control in the setWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change WPS a
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5170939İzleyin
Incorrect access control in the setWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigur
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5171036İzleyin
Incorrect access control in the setParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter par
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5171136İzleyin
Incorrect access control in the setWiFiWpsStart function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to open a wir
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5171336İzleyin
Incorrect access control in the setManualDialCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to manipulat
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5171539İzleyin
Incorrect access control in the delMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove M
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5171630İzleyin
Incorrect access control in the delPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to delete
YüksekCVSS 7,5İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5171736İzleyin
Incorrect access control in the setOpModeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the de
KritikCVSS 9,1İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5171839İzleyin
Incorrect access control in the delStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove
KritikCVSS 9,8İstismar yokEPSS %031 Ağu 2026
- CVE-2026-5171930İzleyin
Incorrect access control in the delUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove U
YüksekCVSS 7,5İstismar yokEPSS %031 Ağu 2026