Yayın tarihine göre
Ağustos 2026: sömürülen ve yeni ciddi CVE kayıtları
7.294 kayıt · 20 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 8 / 73
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-20273İstismar yok | Cisco IOS XE Software Security Hardening Releasecisco · ios xe · CWE-20 | Yüksek8,6 | — | %0,4 | 5 Ağu 2026 |
33İzleyin | CVE-2026-17583Kavram kanıtı | Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Checkthermofisher · abi prism 310 data collection software · CWE-353 | Yüksek8,3 | — | %0,1 | 5 Ağu 2026 |
28İzleyin | CVE-2026-18411İstismar yok | Use of hard-coded cryptographic key in Acrisure KARR BT and DR-100acrisure · karr bt · CWE-321 | Yüksek7,2 | — | %0,3 | 5 Ağu 2026 |
34İzleyin | CVE-2026-71309İstismar yok | rclone: Incomplete path validation allows backend root escape in serve resticrclone · rclone · CWE-22 | Yüksek8,6 | — | %0,4 | 5 Ağu 2026 |
32İzleyin | CVE-2026-71312İstismar yok | rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Executionrclone · rclone · CWE-78 | Yüksek8,0 | — | %0,4 | 5 Ağu 2026 |
30İzleyin | CVE-2026-71314İstismar yok | Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island renderingnuxt · nuxt · CWE-400 | Yüksek7,5 | — | %0,6 | 5 Ağu 2026 |
32İzleyin | CVE-2026-71315İstismar yok | Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)nuxt · nuxt · CWE-178 | Yüksek8,2 | — | %0,4 | 5 Ağu 2026 |
30İzleyin | CVE-2026-67864İstismar yok | An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logCWE-400 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
30İzleyin | CVE-2026-67865İstismar yok | S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling.CWE-125 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
30İzleyin | CVE-2026-71316İstismar yok | Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clientsnuxt · nuxt · CWE-524 | Yüksek7,5 | — | %0,5 | 5 Ağu 2026 |
38İzleyin | CVE-2026-71319İstismar yok | Nuxt.js Unauthenticated WebSocket RPC Call Leading to Remote Code Executionnuxt · devtools · CWE-94 | Kritik9,6 | — | %0,6 | 5 Ağu 2026 |
32İzleyin | CVE-2026-71320İstismar yok | Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Propsnuxt · nuxt · CWE-74 | Yüksek8,1 | — | %0,7 | 5 Ağu 2026 |
30İzleyin | CVE-2026-71321İstismar yok | Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validationnuxt · nuxt · CWE-407 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
28İzleyin | CVE-2026-70608İstismar yok | Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation pathelectronjs · electron · CWE-693 | Yüksek7,2 | — | %0,4 | 5 Ağu 2026 |
32İzleyin | CVE-2026-19024İstismar yok | HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Messagethe hdf group · hdf5 · CWE-476 | Yüksek8,2 | — | %0,1 | 5 Ağu 2026 |
30İzleyin | CVE-2026-67863İstismar yok | In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path.CWE-416 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
30İzleyin | CVE-2026-67866İstismar yok | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_CWE-121 | Yüksek7,5 | — | %0,8 | 5 Ağu 2026 |
30İzleyin | CVE-2026-67867İstismar yok | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapperCWE-122 | Yüksek7,5 | — | %0,8 | 5 Ağu 2026 |
39İzleyin | CVE-2026-52466İstismar yok | Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control.CWE-863 | Kritik9,8 | — | %0,4 | 5 Ağu 2026 |
37İzleyin | CVE-2026-67531İstismar yok | FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getToolagentfront · frontmcp · CWE-94 | Kritik9,3 | — | %0,7 | 5 Ağu 2026 |
30İzleyin | CVE-2026-67869İstismar yok | Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates inputCWE-120 | Yüksek7,5 | — | %0,8 | 5 Ağu 2026 |
39İzleyin | CVE-2026-67870İstismar yok | In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targetCWE-476 | Kritik9,8 | — | %1,0 | 5 Ağu 2026 |
30İzleyin | CVE-2026-67871İstismar yok | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the AddNodes, address_space_CWE-120 | Yüksek7,5 | — | %0,8 | 5 Ağu 2026 |
30İzleyin | CVE-2026-67872İstismar yok | An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored-item queue resize handlingCWE-400 | Yüksek7,5 | — | %0,7 | 5 Ağu 2026 |
39İzleyin | CVE-2026-67873İstismar yok | A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path.CWE-122 | Kritik9,8 | — | %0,7 | 5 Ağu 2026 |
33İzleyin | CVE-2026-34966İstismar yok | Gitea prior to 1.27.0 SSRF via Migration URI Fetch Bypassgitea · gitea · CWE-918 | Yüksek8,3 | — | %0,3 | 5 Ağu 2026 |
32İzleyin | CVE-2025-63822İstismar yok | SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control.CWE-284 | Yüksek8,1 | — | %0,3 | 5 Ağu 2026 |
39İzleyin | CVE-2025-63823İstismar yok | My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass CWE-798 | Kritik9,8 | — | %0,8 | 5 Ağu 2026 |
35İzleyin | CVE-2026-15991İstismar yok | File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameterbitpressadmin · file manager · CWE-862 | Yüksek8,8 | — | %1,0 | 6 Ağu 2026 |
28İzleyin | CVE-2026-16636İstismar yok | FluentSMTP <= 2.2.95 - Unauthenticated Stored Cross-Site Scripting via Recipient Display Name (to.name) in Email Logswpmanageninja · fluentsmtp – wp smtp plugin with amazon ses, sendgrid, mailgun, postmark, cloudflare, tosend, gmail and any smtp · CWE-79 | Yüksek7,2 | — | %0,5 | 6 Ağu 2026 |
28İzleyin | CVE-2026-18325İstismar yok | Forminator Forms <= 1.56.1 - Unauthenticated Stored Cross-Site Scripting via Forged Upload Record via Select Fieldwpmudev · forminator forms – contact form, payment form & custom form builder · CWE-79 | Yüksek7,2 | — | %0,4 | 6 Ağu 2026 |
32İzleyin | CVE-2026-15459İstismar yok | WPMU DEV Dashboard <= 5.0.0 - Authentication Bypass to Arbitrary Plugin Installation (Remote Code Execution) via Forged WDP_AUTH HMAC on ?wpmudev-hub= Endpointwpmudev · wpmu dev dashboard · CWE-287 | Yüksek8,1 | — | %0,8 | 6 Ağu 2026 |
36İzleyin | CVE-2026-12713İstismar yok | WPCargo Track & Trace < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_numberunknown · wpcargo track & trace · CWE-89 | Kritik9,1 | — | %0,4 | 6 Ağu 2026 |
30İzleyin | CVE-2026-13153Kavram kanıtı | Essential Blocks < 6.4.0 - Unauthenticated WooCommerce Sales Data Disclosure via REST products Endpointunknown · gutenberg essential blocks · CWE-200 | Yüksek7,5 | — | %1,5 | 6 Ağu 2026 |
30İzleyin | CVE-2026-13154İstismar yok | Essential Blocks < 6.4.0 - Unauthenticated Non-Public Custom Post Type Content Disclosure via queries Endpointunknown · gutenberg essential blocks · CWE-200 | Yüksek7,5 | — | %0,4 | 6 Ağu 2026 |
32İzleyin | CVE-2026-14829İstismar yok | Checkimate <= 1.0.13 - Unauthenticated License Deactivation via Hardcoded Secretunknown · checkimate — woocommerce checkout, abandoned cart recovery & order bumps · CWE-284 | Yüksek8,2 | — | %0,3 | 6 Ağu 2026 |
36İzleyin | CVE-2026-16054İstismar yok | Drag and Drop Multiple File Upload for WooCommerce < 1.1.8 - Unauthenticated File Deletion via Nonce Oracleunknown · drag and drop multiple file upload for woocommerce · CWE-73 | Kritik9,1 | — | %0,4 | 6 Ağu 2026 |
32İzleyin | CVE-2026-16268Kavram kanıtı | Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handlerunknown · newsletters · CWE-918 | Yüksek8,2 | — | %0,7 | 6 Ağu 2026 |
30İzleyin | CVE-2026-16734İstismar yok | Stripe Payment Forms by WP Full Pay < 8.5.2 - Unauthenticated Payment Intent Amount Manipulationunknown · stripe payment forms by wp full pay · CWE-862 | Yüksek7,5 | — | %0,3 | 6 Ağu 2026 |
30İzleyin | CVE-2026-18050İstismar yok | Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploadsunknown · events manager · CWE-200 | Yüksek7,5 | — | %0,4 | 6 Ağu 2026 |
28İzleyin | CVE-2026-18510İstismar yok | TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Contentcozmoslabs · translatepress – translate multilingual sites with ai translation · CWE-79 | Yüksek7,2 | — | %0,3 | 6 Ağu 2026 |
32İzleyin | CVE-2026-18967İstismar yok | Keycloak-services: keycloak-services: saml onetimeuse assertion replay in idp-initiated broker flowredhat · build of keycloak · CWE-294 | Yüksek8,1 | — | %0,2 | 6 Ağu 2026 |
30İzleyin | CVE-2024-6832İstismar yok | Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attackswso2 · api control plane · CWE-693 | Yüksek7,5 | — | %0,4 | 6 Ağu 2026 |
34İzleyin | CVE-2026-18597İstismar yok | Blind SSRF on Foxit PDF Services APIfoxit software inc. · foxit pdf services api · CWE-918 | Yüksek8,5 | — | %0,3 | 6 Ağu 2026 |
30İzleyin | CVE-2026-18649Kavram kanıtı | Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloadersred hat · red hat enterprise linux 10 · CWE-770 | Yüksek7,5 | — | %0,9 | 6 Ağu 2026 |
39İzleyin | CVE-2026-1728İstismar yok | Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account Takeoverwso2 · api control plane · CWE-269 | Kritik9,8 | — | %0,4 | 6 Ağu 2026 |
70Bu hafta | CVE-2026-5430Silahlaştırılmış | Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeoverwso2 · api control plane · CWE-347 | Kritik10,0 | KEV | %0,5 | 6 Ağu 2026 |
31İzleyin | CVE-2026-64583İstismar yok | usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardownlinux · linux | Yüksek7,8 | — | %0,1 | 6 Ağu 2026 |
31İzleyin | CVE-2026-64584İstismar yok | usb: gadget: f_midi: cancel pending IN work before freeing the midi objectlinux · linux | Yüksek7,8 | — | %0,1 | 6 Ağu 2026 |
31İzleyin | CVE-2026-64585İstismar yok | can: esd_usb: kill anchored URBs before freeing netdevslinux · linux | Yüksek7,8 | — | %0,1 | 6 Ağu 2026 |
28İzleyin | CVE-2026-64587İstismar yok | net: ethernet: arc: emac: quiesce interrupts before requesting IRQlinux · linux | Yüksek7,0 | — | %0,1 | 6 Ağu 2026 |
31İzleyin | CVE-2026-64588İstismar yok | fuse-uring: fix data races on ring->readylinux · linux | Yüksek7,8 | — | %0,1 | 6 Ağu 2026 |
31İzleyin | CVE-2026-64601İstismar yok | ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmissionlinux · linux | Yüksek7,8 | — | %0,1 | 6 Ağu 2026 |
21İzleyin | CVE-2026-64640Kavram kanıtı | Apache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validationapache · polaris · CWE-863 | Orta5,3 | — | %0,4 | 6 Ağu 2026 |
33İzleyin | CVE-2026-55978İstismar yok | Improper access control vulnerability in CatchPulsesecureage · catchpulse · CWE-284 | Yüksek8,4 | — | %0,1 | 6 Ağu 2026 |
30İzleyin | CVE-2026-19034İstismar yok | Shibby Tomato qoslimittc_stop.sh new_qoslimit_stop os command injectionshibby · tomato · CWE-77 | Yüksek7,3 | — | %3,1 | 6 Ağu 2026 |
30İzleyin | CVE-2026-54225İstismar yok | Apache CXF: Denial of Service attack via large attachmentsapache · cxf · CWE-770 | Yüksek7,5 | — | %0,7 | 6 Ağu 2026 |
32İzleyin | CVE-2026-57817İstismar yok | Apache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flowapache · cxf · CWE-20 | Yüksek8,1 | — | %0,6 | 6 Ağu 2026 |
30İzleyin | CVE-2026-57819İstismar yok | Apache CXF: No default restriction on the amount of form parameters per messageapache · cxf · CWE-400 | Yüksek7,5 | — | %0,7 | 6 Ağu 2026 |
30İzleyin | CVE-2026-64958İstismar yok | Apache CXF: Denial of service via message header attachmentsapache · cxf · CWE-400 | Yüksek7,5 | — | %0,6 | 6 Ağu 2026 |
30İzleyin | CVE-2026-65432İstismar yok | Apache CXF: XXE via WSDL/XSD import parsingapache · cxf · CWE-611 | Yüksek7,5 | — | %0,6 | 6 Ağu 2026 |
39İzleyin | CVE-2026-66909İstismar yok | Apache CXF: Unsafe deserialization of inbound JMS ObjectMessageapache · cxf · CWE-502 | Kritik9,8 | — | %1,1 | 6 Ağu 2026 |
30İzleyin | CVE-2026-19035İstismar yok | Shibby Tomato qoslimit new_qoslimit_start os command injectionshibby · tomato · CWE-77 | Yüksek7,3 | — | %3,1 | 6 Ağu 2026 |
32İzleyin | CVE-2026-57818İstismar yok | Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProviderapache · cxf · CWE-367 | Yüksek8,1 | — | %0,4 | 6 Ağu 2026 |
36İzleyin | CVE-2026-61466İstismar yok | Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalationapache · cxf · CWE-304 | Kritik9,1 | — | %0,7 | 6 Ağu 2026 |
36İzleyin | CVE-2026-63687İstismar yok | Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parametersapache · cxf · CWE-345 | Kritik9,1 | — | %0,2 | 6 Ağu 2026 |
36İzleyin | CVE-2026-65583İstismar yok | Apache CXF: Self-issued ID token claims validation skippedapache · cxf · CWE-345 | Kritik9,1 | — | %0,2 | 6 Ağu 2026 |
39İzleyin | CVE-2026-68079İstismar yok | Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replayapache · cxf · CWE-294 | Kritik9,8 | — | %0,6 | 6 Ağu 2026 |
30İzleyin | CVE-2026-68481İstismar yok | Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProviderapache · cxf · CWE-672 | Yüksek7,5 | — | %0,6 | 6 Ağu 2026 |
37İzleyin | CVE-2025-15039İstismar yok | Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Productswso2 · api control plane · CWE-693 | Kritik9,4 | — | %0,6 | 6 Ağu 2026 |
35İzleyin | CVE-2026-64586İstismar yok | wifi: brcmfmac: drain bus_reset work on device removallinux · linux | Yüksek8,8 | — | %0,2 | 6 Ağu 2026 |
39İzleyin | CVE-2026-64597İstismar yok | smb: client: fix double-free in SMB2_close() replaylinux · linux | Kritik9,8 | — | %0,3 | 6 Ağu 2026 |
35İzleyin | CVE-2026-64598İstismar yok | smb/client: Fix error code in smb2_aead_req_alloc()linux · linux | Yüksek8,8 | — | %0,2 | 6 Ağu 2026 |
31İzleyin | CVE-2026-64599İstismar yok | crypto: amlogic - avoid double cleanup in meson_crypto_probe()linux · linux | Yüksek7,8 | — | %0,1 | 6 Ağu 2026 |
30İzleyin | CVE-2026-19036İstismar yok | Shibby Tomato wanoptions sub_40F88C os command injectionshibby · tomato · CWE-77 | Yüksek7,3 | — | %3,1 | 6 Ağu 2026 |
30İzleyin | CVE-2026-65551İstismar yok | WordPress Breakdance plugin < 2.7 - Broken Access Control vulnerabilitysoflyy · breakdance · CWE-862 | Yüksek7,5 | — | %0,3 | 6 Ağu 2026 |
33İzleyin | CVE-2026-66732İstismar yok | Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManagereukaryot · sonic3air · CWE-346 | Yüksek8,3 | — | %0,1 | 6 Ağu 2026 |
34İzleyin | CVE-2026-66733İstismar yok | Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCacheeukaryot · sonic3air · CWE-789 | Yüksek8,7 | — | %1,5 | 6 Ağu 2026 |
38İzleyin | CVE-2026-12605İstismar yok | In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-coeclipse · glassfish · CWE-918 | Kritik9,6 | — | %0,4 | 6 Ağu 2026 |
32İzleyin | CVE-2026-16315İstismar yok | Authentication and authorization bypass via cryptographic timing side-channel attack in StationGuardomicron electronics gmbh · omicron stationguard · CWE-208 | Yüksek8,1 | — | %0,4 | 6 Ağu 2026 |
33İzleyin | CVE-2026-16731İstismar yok | Authentication and authorization bypass via cryptographic timing side-channel attack in StationScoutomicron electronics gmbh · omicron stationscout · CWE-208 | Yüksek8,3 | — | %0,4 | 6 Ağu 2026 |
39İzleyin | CVE-2026-5134İstismar yok | SQLi in Loca Software's CMSloca software informatics technology ltd. co. · cms · CWE-89 | Kritik9,8 | — | %0,4 | 6 Ağu 2026 |
36İzleyin | CVE-2026-64993İstismar yok | Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector.dell · rvtools · CWE-295 | Kritik9,1 | — | %0,2 | 6 Ağu 2026 |
39İzleyin | CVE-2026-28005İstismar yok | WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerabilitynexcess · kadence woocommerce email designer · CWE-862 | Kritik9,8 | — | %0,4 | 6 Ağu 2026 |
28İzleyin | CVE-2026-28082İstismar yok | WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerabilitycrocoblock. jetimpex inc. · jetengine · CWE-79 | Yüksek7,1 | — | %0,2 | 6 Ağu 2026 |
35İzleyin | CVE-2026-28111İstismar yok | WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerabilitywpmu dev · forminator · CWE-266 | Yüksek8,8 | — | %0,4 | 6 Ağu 2026 |
39İzleyin | CVE-2026-28139İstismar yok | WordPress Ajax Search Lite plugin <= 4.14.4 - PHP Object Injection vulnerabilitywpdreams · ajax search lite · CWE-502 | Kritik9,8 | — | %0,5 | 6 Ağu 2026 |
30İzleyin | CVE-2026-28140İstismar yok | WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerabilityjetmonsters · jetformbuilder · CWE-862 | Yüksek7,5 | — | %0,3 | 6 Ağu 2026 |
28İzleyin | CVE-2026-28141Kavram kanıtı | WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerabilitysyed balkhi · nextgen gallery · CWE-79 | Yüksek7,1 | — | %0,4 | 6 Ağu 2026 |
28İzleyin | CVE-2026-28143İstismar yok | WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerabilitywpmu dev · forminator · CWE-79 | Yüksek7,1 | — | %0,2 | 6 Ağu 2026 |
28İzleyin | CVE-2026-28172İstismar yok | WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerabilitydata443 risk mitigation, inc. · tracking code manager · CWE-352 | Yüksek7,1 | — | %0,1 | 6 Ağu 2026 |
28İzleyin | CVE-2026-28177İstismar yok | WordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerabilitydaniel iser · popup maker · CWE-79 | Yüksek7,1 | — | %0,2 | 6 Ağu 2026 |
28İzleyin | CVE-2026-28183İstismar yok | WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerabilitypublishpress · publishpress capabilities · CWE-266 | Yüksek7,2 | — | %0,4 | 6 Ağu 2026 |
36İzleyin | CVE-2026-32327İstismar yok | Apache Portable Runtime Utility: apr-util XML stack recursion crashapache · apr-util · CWE-674 | Kritik9,1 | — | %0,4 | 6 Ağu 2026 |
36İzleyin | CVE-2026-34191İstismar yok | Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracleapache · apr-util · CWE-89 | Kritik9,1 | — | %0,5 | 6 Ağu 2026 |
30İzleyin | CVE-2026-34501İstismar yok | Apache Portable Runtime Utility: Heap buffer overflow in APR redis clientapache · apr-util · CWE-122 | Yüksek7,5 | — | %0,5 | 6 Ağu 2026 |
30İzleyin | CVE-2026-34502İstismar yok | Apache Portable Runtime Utility: Heap buffer overflow in APR memcached clientapache · apr-util · CWE-122 | Yüksek7,5 | — | %0,5 | 6 Ağu 2026 |
38İzleyin | CVE-2026-53975İstismar yok | OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/execbohdan triapitsyn · openchamber · CWE-78 | Kritik9,3 | — | %1,6 | 6 Ağu 2026 |
38İzleyin | CVE-2026-53976Kavram kanıtı | OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameterbohdan triapitsyn · openchamber · CWE-22 | Kritik9,3 | — | %2,6 | 6 Ağu 2026 |
39İzleyin | CVE-2026-54489İstismar yok | Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulnerdell · virtual storage integrator · CWE-200 | Kritik9,8 | — | %0,6 | 6 Ağu 2026 |
- CVE-2026-2027334İzleyin
Cisco IOS XE Software Security Hardening Release
YüksekCVSS 8,6İstismar yokEPSS %0cisco · ios xe5 Ağu 2026
- CVE-2026-1758333İzleyin
Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check
YüksekCVSS 8,3Kavram kanıtıEPSS %0thermofisher · abi prism 310 data collection software5 Ağu 2026
- CVE-2026-1841128İzleyin
Use of hard-coded cryptographic key in Acrisure KARR BT and DR-100
YüksekCVSS 7,2İstismar yokEPSS %0acrisure · karr bt5 Ağu 2026
- CVE-2026-7130934İzleyin
rclone: Incomplete path validation allows backend root escape in serve restic
YüksekCVSS 8,6İstismar yokEPSS %0rclone · rclone5 Ağu 2026
- CVE-2026-7131232İzleyin
rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution
YüksekCVSS 8,0İstismar yokEPSS %0rclone · rclone5 Ağu 2026
- CVE-2026-7131430İzleyin
Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering
YüksekCVSS 7,5İstismar yokEPSS %0nuxt · nuxt5 Ağu 2026
- CVE-2026-7131532İzleyin
Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)
YüksekCVSS 8,2İstismar yokEPSS %0nuxt · nuxt5 Ağu 2026
- CVE-2026-6786430İzleyin
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation log
YüksekCVSS 7,5İstismar yokEPSS %05 Ağu 2026
- CVE-2026-6786530İzleyin
S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling.
YüksekCVSS 7,5İstismar yokEPSS %05 Ağu 2026
- CVE-2026-7131630İzleyin
Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients
YüksekCVSS 7,5İstismar yokEPSS %0nuxt · nuxt5 Ağu 2026
- CVE-2026-7131938İzleyin
Nuxt.js Unauthenticated WebSocket RPC Call Leading to Remote Code Execution
KritikCVSS 9,6İstismar yokEPSS %0nuxt · devtools5 Ağu 2026
- CVE-2026-7132032İzleyin
Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props
YüksekCVSS 8,1İstismar yokEPSS %0nuxt · nuxt5 Ağu 2026
- CVE-2026-7132130İzleyin
Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validation
YüksekCVSS 7,5İstismar yokEPSS %0nuxt · nuxt5 Ağu 2026
- CVE-2026-7060828İzleyin
Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path
YüksekCVSS 7,2İstismar yokEPSS %0electronjs · electron5 Ağu 2026
- CVE-2026-1902432İzleyin
HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message
YüksekCVSS 8,2İstismar yokEPSS %0the hdf group · hdf55 Ağu 2026
- CVE-2026-6786330İzleyin
In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path.
YüksekCVSS 7,5İstismar yokEPSS %05 Ağu 2026
- CVE-2026-6786630İzleyin
Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMac_ProcessMsg_
YüksekCVSS 7,5İstismar yokEPSS %05 Ağu 2026
- CVE-2026-6786730İzleyin
Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper
YüksekCVSS 7,5İstismar yokEPSS %05 Ağu 2026
- CVE-2026-5246639İzleyin
Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control.
KritikCVSS 9,8İstismar yokEPSS %05 Ağu 2026
- CVE-2026-6753137İzleyin
FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool
KritikCVSS 9,3İstismar yokEPSS %0agentfront · frontmcp5 Ağu 2026
- CVE-2026-6786930İzleyin
Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input
YüksekCVSS 7,5İstismar yokEPSS %05 Ağu 2026
- CVE-2026-6787039İzleyin
In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId target
KritikCVSS 9,8İstismar yokEPSS %15 Ağu 2026
- CVE-2026-6787130İzleyin
Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the AddNodes, address_space_
YüksekCVSS 7,5İstismar yokEPSS %05 Ağu 2026
- CVE-2026-6787230İzleyin
An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored-item queue resize handling
YüksekCVSS 7,5İstismar yokEPSS %05 Ağu 2026
- CVE-2026-6787339İzleyin
A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path.
KritikCVSS 9,8İstismar yokEPSS %05 Ağu 2026
- CVE-2026-3496633İzleyin
Gitea prior to 1.27.0 SSRF via Migration URI Fetch Bypass
YüksekCVSS 8,3İstismar yokEPSS %0gitea · gitea5 Ağu 2026
- CVE-2025-6382232İzleyin
SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control.
YüksekCVSS 8,1İstismar yokEPSS %05 Ağu 2026
- CVE-2025-6382339İzleyin
My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass
KritikCVSS 9,8İstismar yokEPSS %05 Ağu 2026
- CVE-2026-1599135İzleyin
File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter
YüksekCVSS 8,8İstismar yokEPSS %1bitpressadmin · file manager6 Ağu 2026
- CVE-2026-1663628İzleyin
FluentSMTP <= 2.2.95 - Unauthenticated Stored Cross-Site Scripting via Recipient Display Name (to.name) in Email Logs
YüksekCVSS 7,2İstismar yokEPSS %0wpmanageninja · fluentsmtp – wp smtp plugin with amazon ses, sendgrid, mailgun, postmark, cloudflare, tosend, gmail and any smtp6 Ağu 2026
- CVE-2026-1832528İzleyin
Forminator Forms <= 1.56.1 - Unauthenticated Stored Cross-Site Scripting via Forged Upload Record via Select Field
YüksekCVSS 7,2İstismar yokEPSS %0wpmudev · forminator forms – contact form, payment form & custom form builder6 Ağu 2026
- CVE-2026-1545932İzleyin
WPMU DEV Dashboard <= 5.0.0 - Authentication Bypass to Arbitrary Plugin Installation (Remote Code Execution) via Forged WDP_AUTH HMAC on ?wpmudev-hub= Endpoint
YüksekCVSS 8,1İstismar yokEPSS %0wpmudev · wpmu dev dashboard6 Ağu 2026
- CVE-2026-1271336İzleyin
WPCargo Track & Trace < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_number
KritikCVSS 9,1İstismar yokEPSS %0unknown · wpcargo track & trace6 Ağu 2026
- CVE-2026-1315330İzleyin
Essential Blocks < 6.4.0 - Unauthenticated WooCommerce Sales Data Disclosure via REST products Endpoint
YüksekCVSS 7,5Kavram kanıtıEPSS %1unknown · gutenberg essential blocks6 Ağu 2026
- CVE-2026-1315430İzleyin
Essential Blocks < 6.4.0 - Unauthenticated Non-Public Custom Post Type Content Disclosure via queries Endpoint
YüksekCVSS 7,5İstismar yokEPSS %0unknown · gutenberg essential blocks6 Ağu 2026
- CVE-2026-1482932İzleyin
Checkimate <= 1.0.13 - Unauthenticated License Deactivation via Hardcoded Secret
YüksekCVSS 8,2İstismar yokEPSS %0unknown · checkimate — woocommerce checkout, abandoned cart recovery & order bumps6 Ağu 2026
- CVE-2026-1605436İzleyin
Drag and Drop Multiple File Upload for WooCommerce < 1.1.8 - Unauthenticated File Deletion via Nonce Oracle
KritikCVSS 9,1İstismar yokEPSS %0unknown · drag and drop multiple file upload for woocommerce6 Ağu 2026
- CVE-2026-1626832İzleyin
Newsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler
YüksekCVSS 8,2Kavram kanıtıEPSS %0unknown · newsletters6 Ağu 2026
- CVE-2026-1673430İzleyin
Stripe Payment Forms by WP Full Pay < 8.5.2 - Unauthenticated Payment Intent Amount Manipulation
YüksekCVSS 7,5İstismar yokEPSS %0unknown · stripe payment forms by wp full pay6 Ağu 2026
- CVE-2026-1805030İzleyin
Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads
YüksekCVSS 7,5İstismar yokEPSS %0unknown · events manager6 Ağu 2026
- CVE-2026-1851028İzleyin
TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content
YüksekCVSS 7,2İstismar yokEPSS %0cozmoslabs · translatepress – translate multilingual sites with ai translation6 Ağu 2026
- CVE-2026-1896732İzleyin
Keycloak-services: keycloak-services: saml onetimeuse assertion replay in idp-initiated broker flow
YüksekCVSS 8,1İstismar yokEPSS %0redhat · build of keycloak6 Ağu 2026
- CVE-2024-683230İzleyin
Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks
YüksekCVSS 7,5İstismar yokEPSS %0wso2 · api control plane6 Ağu 2026
- CVE-2026-1859734İzleyin
Blind SSRF on Foxit PDF Services API
YüksekCVSS 8,5İstismar yokEPSS %0foxit software inc. · foxit pdf services api6 Ağu 2026
- CVE-2026-1864930İzleyin
Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders
YüksekCVSS 7,5Kavram kanıtıEPSS %0red hat · red hat enterprise linux 106 Ağu 2026
- CVE-2026-172839İzleyin
Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account Takeover
KritikCVSS 9,8İstismar yokEPSS %0wso2 · api control plane6 Ağu 2026
- CVE-2026-543070Bu hafta
Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %0wso2 · api control plane6 Ağu 2026
- CVE-2026-6458331İzleyin
usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Ağu 2026
- CVE-2026-6458431İzleyin
usb: gadget: f_midi: cancel pending IN work before freeing the midi object
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Ağu 2026
- CVE-2026-6458531İzleyin
can: esd_usb: kill anchored URBs before freeing netdevs
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Ağu 2026
- CVE-2026-6458728İzleyin
net: ethernet: arc: emac: quiesce interrupts before requesting IRQ
YüksekCVSS 7,0İstismar yokEPSS %0linux · linux6 Ağu 2026
- CVE-2026-6458831İzleyin
fuse-uring: fix data races on ring->ready
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Ağu 2026
- CVE-2026-6460131İzleyin
ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Ağu 2026
- CVE-2026-6464021İzleyin
Apache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validation
OrtaCVSS 5,3Kavram kanıtıEPSS %0apache · polaris6 Ağu 2026
- CVE-2026-5597833İzleyin
Improper access control vulnerability in CatchPulse
YüksekCVSS 8,4İstismar yokEPSS %0secureage · catchpulse6 Ağu 2026
- CVE-2026-1903430İzleyin
Shibby Tomato qoslimittc_stop.sh new_qoslimit_stop os command injection
YüksekCVSS 7,3İstismar yokEPSS %3shibby · tomato6 Ağu 2026
- CVE-2026-5422530İzleyin
Apache CXF: Denial of Service attack via large attachments
YüksekCVSS 7,5İstismar yokEPSS %0apache · cxf6 Ağu 2026
- CVE-2026-5781732İzleyin
Apache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow
YüksekCVSS 8,1İstismar yokEPSS %0apache · cxf6 Ağu 2026
- CVE-2026-5781930İzleyin
Apache CXF: No default restriction on the amount of form parameters per message
YüksekCVSS 7,5İstismar yokEPSS %0apache · cxf6 Ağu 2026
- CVE-2026-6495830İzleyin
Apache CXF: Denial of service via message header attachments
YüksekCVSS 7,5İstismar yokEPSS %0apache · cxf6 Ağu 2026
- CVE-2026-6543230İzleyin
Apache CXF: XXE via WSDL/XSD import parsing
YüksekCVSS 7,5İstismar yokEPSS %0apache · cxf6 Ağu 2026
- CVE-2026-6690939İzleyin
Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage
KritikCVSS 9,8İstismar yokEPSS %1apache · cxf6 Ağu 2026
- CVE-2026-1903530İzleyin
Shibby Tomato qoslimit new_qoslimit_start os command injection
YüksekCVSS 7,3İstismar yokEPSS %3shibby · tomato6 Ağu 2026
- CVE-2026-5781832İzleyin
Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider
YüksekCVSS 8,1İstismar yokEPSS %0apache · cxf6 Ağu 2026
- CVE-2026-6146636İzleyin
Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalation
KritikCVSS 9,1İstismar yokEPSS %0apache · cxf6 Ağu 2026
- CVE-2026-6368736İzleyin
Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters
KritikCVSS 9,1İstismar yokEPSS %0apache · cxf6 Ağu 2026
- CVE-2026-6558336İzleyin
Apache CXF: Self-issued ID token claims validation skipped
KritikCVSS 9,1İstismar yokEPSS %0apache · cxf6 Ağu 2026
- CVE-2026-6807939İzleyin
Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay
KritikCVSS 9,8İstismar yokEPSS %0apache · cxf6 Ağu 2026
- CVE-2026-6848130İzleyin
Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProvider
YüksekCVSS 7,5İstismar yokEPSS %0apache · cxf6 Ağu 2026
- CVE-2025-1503937İzleyin
Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products
KritikCVSS 9,4İstismar yokEPSS %0wso2 · api control plane6 Ağu 2026
- CVE-2026-6458635İzleyin
wifi: brcmfmac: drain bus_reset work on device removal
YüksekCVSS 8,8İstismar yokEPSS %0linux · linux6 Ağu 2026
- CVE-2026-6459739İzleyin
smb: client: fix double-free in SMB2_close() replay
KritikCVSS 9,8İstismar yokEPSS %0linux · linux6 Ağu 2026
- CVE-2026-6459835İzleyin
smb/client: Fix error code in smb2_aead_req_alloc()
YüksekCVSS 8,8İstismar yokEPSS %0linux · linux6 Ağu 2026
- CVE-2026-6459931İzleyin
crypto: amlogic - avoid double cleanup in meson_crypto_probe()
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux6 Ağu 2026
- CVE-2026-1903630İzleyin
Shibby Tomato wanoptions sub_40F88C os command injection
YüksekCVSS 7,3İstismar yokEPSS %3shibby · tomato6 Ağu 2026
- CVE-2026-6555130İzleyin
WordPress Breakdance plugin < 2.7 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0soflyy · breakdance6 Ağu 2026
- CVE-2026-6673233İzleyin
Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager
YüksekCVSS 8,3İstismar yokEPSS %0eukaryot · sonic3air6 Ağu 2026
- CVE-2026-6673334İzleyin
Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache
YüksekCVSS 8,7İstismar yokEPSS %1eukaryot · sonic3air6 Ağu 2026
- CVE-2026-1260538İzleyin
In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-co
KritikCVSS 9,6İstismar yokEPSS %0eclipse · glassfish6 Ağu 2026
- CVE-2026-1631532İzleyin
Authentication and authorization bypass via cryptographic timing side-channel attack in StationGuard
YüksekCVSS 8,1İstismar yokEPSS %0omicron electronics gmbh · omicron stationguard6 Ağu 2026
- CVE-2026-1673133İzleyin
Authentication and authorization bypass via cryptographic timing side-channel attack in StationScout
YüksekCVSS 8,3İstismar yokEPSS %0omicron electronics gmbh · omicron stationscout6 Ağu 2026
- CVE-2026-513439İzleyin
SQLi in Loca Software's CMS
KritikCVSS 9,8İstismar yokEPSS %0loca software informatics technology ltd. co. · cms6 Ağu 2026
- CVE-2026-6499336İzleyin
Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector.
KritikCVSS 9,1İstismar yokEPSS %0dell · rvtools6 Ağu 2026
- CVE-2026-2800539İzleyin
WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerability
KritikCVSS 9,8İstismar yokEPSS %0nexcess · kadence woocommerce email designer6 Ağu 2026
- CVE-2026-2808228İzleyin
WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0crocoblock. jetimpex inc. · jetengine6 Ağu 2026
- CVE-2026-2811135İzleyin
WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0wpmu dev · forminator6 Ağu 2026
- CVE-2026-2813939İzleyin
WordPress Ajax Search Lite plugin <= 4.14.4 - PHP Object Injection vulnerability
KritikCVSS 9,8İstismar yokEPSS %0wpdreams · ajax search lite6 Ağu 2026
- CVE-2026-2814030İzleyin
WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0jetmonsters · jetformbuilder6 Ağu 2026
- CVE-2026-2814128İzleyin
WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1Kavram kanıtıEPSS %0syed balkhi · nextgen gallery6 Ağu 2026
- CVE-2026-2814328İzleyin
WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wpmu dev · forminator6 Ağu 2026
- CVE-2026-2817228İzleyin
WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0data443 risk mitigation, inc. · tracking code manager6 Ağu 2026
- CVE-2026-2817728İzleyin
WordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0daniel iser · popup maker6 Ağu 2026
- CVE-2026-2818328İzleyin
WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0publishpress · publishpress capabilities6 Ağu 2026
- CVE-2026-3232736İzleyin
Apache Portable Runtime Utility: apr-util XML stack recursion crash
KritikCVSS 9,1İstismar yokEPSS %0apache · apr-util6 Ağu 2026
- CVE-2026-3419136İzleyin
Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle
KritikCVSS 9,1İstismar yokEPSS %0apache · apr-util6 Ağu 2026
- CVE-2026-3450130İzleyin
Apache Portable Runtime Utility: Heap buffer overflow in APR redis client
YüksekCVSS 7,5İstismar yokEPSS %0apache · apr-util6 Ağu 2026
- CVE-2026-3450230İzleyin
Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
YüksekCVSS 7,5İstismar yokEPSS %0apache · apr-util6 Ağu 2026
- CVE-2026-5397538İzleyin
OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/exec
KritikCVSS 9,3İstismar yokEPSS %1bohdan triapitsyn · openchamber6 Ağu 2026
- CVE-2026-5397638İzleyin
OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameter
KritikCVSS 9,3Kavram kanıtıEPSS %2bohdan triapitsyn · openchamber6 Ağu 2026
- CVE-2026-5448939İzleyin
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulner
KritikCVSS 9,8İstismar yokEPSS %0dell · virtual storage integrator6 Ağu 2026