Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.953 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 1 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-19573İstismar yok | Affiliate Super Assistent <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ functionworschtebrot · affiliate super assistent · CWE-79 | Yüksek7,2 | — | %0,2 | 1 Eyl 2026 |
28İzleyin | CVE-2026-19796İstismar yok | Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.8.1 - Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameterwebilia · listdom: ai-powered business directory with classifieds ads listings · CWE-79 | Yüksek7,2 | — | %0,2 | 1 Eyl 2026 |
35İzleyin | CVE-2026-19806İstismar yok | Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Tokendevitemsllc · support genix – helpdesk, ai chatbot, knowledge base & customer support ticketing system · CWE-287 | Yüksek8,8 | — | %0,3 | 1 Eyl 2026 |
30İzleyin | CVE-2026-19952Kavram kanıtı | Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tagshabti · frontend admin by dynamiapps · CWE-22 | Yüksek7,5 | — | %0,9 | 1 Eyl 2026 |
28İzleyin | CVE-2026-75921İstismar yok | Master Addons for Elementor <= 3.1.9 - Incorrect Authorization to Authenticated (Editor+) Arbitrary File Upload via upload_template_kit AJAX ZIP Extractionpixarlabs · master addons for elementor – elementor addons, widgets, mega menu builder, popup builder, widget builder & template kits · CWE-863 | Yüksek7,2 | — | %1,1 | 1 Eyl 2026 |
25İzleyin | CVE-2026-75965İstismar yok | User Profile Builder <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attributecozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editor · CWE-79 | Orta6,4 | — | %0,3 | 1 Eyl 2026 |
35İzleyin | CVE-2026-83772İstismar yok | Cobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c_set_reports_decode command injectioncobham · satcom vsat7090 maritime satellite router · CWE-74 | Yüksek8,6 | — | %3,2 | 1 Eyl 2026 |
37İzleyin | CVE-2026-78319İstismar yok | TOCTOU Vulnerability in file exchangesauter · modu680-as · CWE-367 | Kritik9,3 | — | %0,6 | 1 Eyl 2026 |
34İzleyin | CVE-2026-65643Kavram kanıtı | Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.cpanel · cpanel · CWE-95 | Yüksek8,7 | — | %0,8 | 1 Eyl 2026 |
28İzleyin | CVE-2026-19914İstismar yok | Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameteruscnanbu · welcart e-commerce · CWE-79 | Yüksek7,2 | — | %0,3 | 1 Eyl 2026 |
30İzleyin | CVE-2026-25706İstismar yok | yast2-samba-client: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied)suse · yast2-samba-client · CWE-78 | Yüksek7,5 | — | %0,4 | 1 Eyl 2026 |
34İzleyin | CVE-2026-59680İstismar yok | yast2-users: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attributesuse · yast2-users · CWE-78 | Yüksek8,6 | — | %1,5 | 1 Eyl 2026 |
34İzleyin | CVE-2026-59681İstismar yok | yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD joinsuse · yast2-auth-client · CWE-78 | Yüksek8,7 | — | %1,4 | 1 Eyl 2026 |
37İzleyin | CVE-2026-4813Kavram kanıtı | Code injection in the Lutece Corelutece · lutece core · CWE-94 | Kritik9,4 | — | %0,5 | 1 Eyl 2026 |
34İzleyin | CVE-2026-84165İstismar yok | Lack of authorisation in OpenNebula by OpenNebula Systemsopennebula systems · opennebula · CWE-284 | Yüksek8,7 | — | %0,4 | 1 Eyl 2026 |
39İzleyin | CVE-2026-18550İstismar yok | Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameterscriptsbundle · nokri – job board wordpress theme · CWE-269 | Kritik9,8 | — | %0,3 | 1 Eyl 2026 |
28İzleyin | CVE-2026-83595İstismar yok | AVideo Cross-Site Request Forgery via plugin/API/set.json.phpwwbn · avideo · CWE-352 | Yüksek7,2 | — | %0,2 | 1 Eyl 2026 |
35İzleyin | CVE-2026-84187İstismar yok | AVideo on_publish.php Missing Authentication Check via RTMP Callbackwwbn · avideo · CWE-284 | Yüksek8,8 | — | %0,5 | 1 Eyl 2026 |
34İzleyin | CVE-2026-84194İstismar yok | LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostnamelibrenms · librenms · CWE-78 | Yüksek8,6 | — | %1,5 | 1 Eyl 2026 |
33İzleyin | CVE-2026-84195İstismar yok | Kyverno before 1.16.4 Credential Leak via apiCallkyverno · kyverno · CWE-200 | Yüksek8,3 | — | %0,3 | 1 Eyl 2026 |
33İzleyin | CVE-2026-84196İstismar yok | Kyverno before 1.18.0 Server-Side Request Forgery via apiCallkyverno · kyverno · CWE-918 | Yüksek8,3 | — | %0,3 | 1 Eyl 2026 |
37İzleyin | CVE-2026-84200İstismar yok | Kyverno before v1.13.0 Policy Bypass via Multiple Exceptionskyverno · kyverno · CWE-284 | Kritik9,4 | — | %0,2 | 1 Eyl 2026 |
39İzleyin | CVE-2026-18765İstismar yok | SQL Injection in Teracity Sotware's Teracity E-OSB Platformteracity software technologies inc. · e-osb · CWE-89 | Kritik9,8 | — | %0,2 | 1 Eyl 2026 |
34İzleyin | CVE-2026-19472İstismar yok | Rockwell Automation ArmorStart® LT Denial Of Servicerockwell automation · armorstart® lt · CWE-770 | Yüksek8,7 | — | %0,3 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51741İstismar yok | Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase diCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
36İzleyin | CVE-2026-51743İstismar yok | Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to disable guCWE-284 | Kritik9,1 | — | %0,5 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51744İstismar yok | Incorrect access control in the recv_mesh_info_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to force CWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51747İstismar yok | Incorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to emit indirect meCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
35İzleyin | CVE-2026-84117İstismar yok | Privilege escalation in Firefox for Androidmozilla · firefox mobile · CWE-284 | Yüksek8,8 | — | %0,3 | 1 Eyl 2026 |
21İzleyin | CVE-2026-84118Kavram kanıtı | Use-after-free in the JavaScript: GC componentmozilla · firefox · CWE-416 | Orta5,4 | — | %0,2 | 1 Eyl 2026 |
38İzleyin | CVE-2026-84119İstismar yok | Sandbox escape due to use-after-free in the DOM: Navigation componentmozilla · firefox · CWE-416 | Kritik9,6 | — | %0,3 | 1 Eyl 2026 |
38İzleyin | CVE-2026-84121İstismar yok | Sandbox escape due to use-after-free in the DOM: Security componentmozilla · firefox · CWE-416 | Kritik9,6 | — | %0,3 | 1 Eyl 2026 |
35İzleyin | CVE-2026-84123İstismar yok | Privilege escalation due to use-after-free in the Graphics: WebGPU componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,4 | 1 Eyl 2026 |
35İzleyin | CVE-2026-84128İstismar yok | Privilege escalation in the WebDriver BiDi componentmozilla · firefox · CWE-284 | Yüksek8,8 | — | %0,4 | 1 Eyl 2026 |
39İzleyin | CVE-2026-84129İstismar yok | Site isolation issue in the DOM: Navigation componentmozilla · firefox · CWE-346 | Kritik9,8 | — | %0,1 | 1 Eyl 2026 |
30İzleyin | CVE-2026-84130İstismar yok | Information disclosure in the Graphics: WebGPU componentmozilla · firefox · CWE-200 | Yüksek7,5 | — | %0,4 | 1 Eyl 2026 |
35İzleyin | CVE-2026-84131İstismar yok | Privilege escalation due to invalid pointer in the Graphics componentmozilla · firefox · CWE-763 | Yüksek8,8 | — | %0,3 | 1 Eyl 2026 |
30İzleyin | CVE-2026-84132İstismar yok | Information disclosure in the Networking: HTTP componentmozilla · firefox · CWE-200 | Yüksek7,5 | — | %0,2 | 1 Eyl 2026 |
39İzleyin | CVE-2026-84133İstismar yok | Site isolation issue in the DOM: Push Subscriptions componentmozilla · firefox · CWE-346 | Kritik9,8 | — | %0,1 | 1 Eyl 2026 |
39İzleyin | CVE-2026-84134İstismar yok | Other issue in the Profile Backup componentmozilla · firefox · CWE-200 | Kritik9,8 | — | %0,5 | 1 Eyl 2026 |
39İzleyin | CVE-2026-84135İstismar yok | Other issue in Firefox Focus for Androidmozilla · firefox mobile · CWE-20 | Kritik9,8 | — | %0,4 | 1 Eyl 2026 |
39İzleyin | CVE-2026-84140İstismar yok | Site isolation issue in the DOM: Navigation componentmozilla · firefox · CWE-346 | Kritik9,8 | — | %0,1 | 1 Eyl 2026 |
39İzleyin | CVE-2026-84141İstismar yok | Integer overflow in the Graphics: ImageLib componentmozilla · firefox · CWE-190 | Kritik9,8 | — | %0,3 | 1 Eyl 2026 |
39İzleyin | CVE-2026-84142İstismar yok | Internally found bugs fixed in Thunderbird 155mozilla · firefox · CWE-119 | Kritik9,8 | — | %0,5 | 1 Eyl 2026 |
39İzleyin | CVE-2026-84143İstismar yok | Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15mozilla · firefox · CWE-119 | Kritik9,8 | — | %0,3 | 1 Eyl 2026 |
30İzleyin | CVE-2026-84144İstismar yok | Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2mozilla · firefox · CWE-119 | Yüksek7,5 | — | %0,4 | 1 Eyl 2026 |
30İzleyin | CVE-2026-84145İstismar yok | Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15mozilla · firefox · CWE-119 | Yüksek7,5 | — | %0,3 | 1 Eyl 2026 |
40Planlayın | CVE-2026-84147İstismar yok | Remote Code Execution Vulnerability in Manacle Technologies ERP Systemmanacle technologies · multi-tenant erp system · CWE-434 | Kritik10,0 | — | %0,9 | 1 Eyl 2026 |
36İzleyin | CVE-2026-84148İstismar yok | Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP Systemmanacle technologies · multi-tenant erp system · CWE-639 | Kritik9,2 | — | %0,6 | 1 Eyl 2026 |
36İzleyin | CVE-2026-84149İstismar yok | Information Disclosure Vulnerability in Manacle Technologies ERP Systemmanacle technologies · multi-tenant erp system · CWE-527 | Kritik9,2 | — | %0,5 | 1 Eyl 2026 |
34İzleyin | CVE-2026-84235İstismar yok | Rockwell Automation 1756-ENBT Denial of Service Vulnerabilityrockwell automation · 1756-enbt module · CWE-400 | Yüksek8,7 | — | %0,4 | 1 Eyl 2026 |
32İzleyin | CVE-2024-10085İstismar yok | CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communicschneider electric · ecostruxure™ opc ua server expert · CWE-770 | Yüksek8,2 | — | %0,3 | 1 Eyl 2026 |
28İzleyin | CVE-2024-14047İstismar yok | Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of Serviceelastic · winlogbeat · CWE-59 | Yüksek7,1 | — | %0,1 | 1 Eyl 2026 |
28İzleyin | CVE-2026-12663İstismar yok | ControlFLASH ® – Improper Access Controlrockwell automation · controlflash ® · CWE-306 | Yüksek7,0 | — | %0,1 | 1 Eyl 2026 |
29İzleyin | CVE-2026-13336İstismar yok | CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause exeschneider electric · netbotz 5 - 750/755 · CWE-78 | Yüksek7,3 | — | %0,6 | 1 Eyl 2026 |
34İzleyin | CVE-2026-16675İstismar yok | Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalationrockwell automation · factorytalk® activation manager · CWE-307 | Yüksek8,5 | — | %0,1 | 1 Eyl 2026 |
39İzleyin | CVE-2026-18210İstismar yok | SQL Injection in TRtek Technological Products's Storetrtek technological products computer software hardware industry and trade limited company · products's store · CWE-89 | Kritik9,8 | — | %0,3 | 1 Eyl 2026 |
39İzleyin | CVE-2026-18808İstismar yok | Unauthenticated Remote Code Execution via Code Injection in Klemsan's KIOklemsan electrical electronics inc. · kio (klemsan internet objects) · CWE-94 | Kritik9,8 | — | %0,3 | 1 Eyl 2026 |
32İzleyin | CVE-2026-19513İstismar yok | Gravity Forms <= 3.0.2 - Unauthenticated Arbitrary File Upload via State/Chunk Hash Confusiongravity forms · gravity forms · CWE-434 | Yüksek8,1 | — | %0,5 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51750İstismar yok | Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rescan anCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51751İstismar yok | Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove a spCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51754İstismar yok | Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to overwritCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51757İstismar yok | Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start a fiCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51760İstismar yok | Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to mass-triggCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51762İstismar yok | Incorrect access control in the meshInfoKick function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to kick or cleanCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51763İstismar yok | Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forcibly disCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51764İstismar yok | Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to CWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51765İstismar yok | Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to inserCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
30İzleyin | CVE-2026-51766İstismar yok | Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reboot the loCWE-284 | Yüksek7,5 | — | %0,6 | 1 Eyl 2026 |
31İzleyin | CVE-2026-80047İstismar yok | Hugging Face Transformers library writes remote code to disk prior to consent checkhugging face · transformers · CWE-273 | Yüksek7,8 | — | %0,0 | 1 Eyl 2026 |
32İzleyin | CVE-2026-84218İstismar yok | Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)red hat · red hat amq broker 7 · CWE-184 | Yüksek8,1 | — | %0,9 | 1 Eyl 2026 |
36İzleyin | CVE-2026-9621İstismar yok | RSLinx Classic® - Multiple Vulnerabilitiesrockwell automation · rslinx classic® · CWE-190 | Kritik9,2 | — | %0,4 | 1 Eyl 2026 |
34İzleyin | CVE-2026-9622İstismar yok | RSLinx Classic® - Multiple Vulnerabilitiesrockwell automation · rslinx classic® · CWE-191 | Yüksek8,7 | — | %0,4 | 1 Eyl 2026 |
34İzleyin | CVE-2026-9624İstismar yok | RSLinx Classic® - Multiple Vulnerabilitiesrockwell automation · rslinx classic® · CWE-191 | Yüksek8,7 | — | %0,4 | 1 Eyl 2026 |
34İzleyin | CVE-2026-9625İstismar yok | RSLinx Classic® - Multiple Vulnerabilitiesrockwell automation · rslinx classic® · CWE-120 | Yüksek8,7 | — | %0,4 | 1 Eyl 2026 |
28İzleyin | CVE-2026-9633İstismar yok | Redundancy Module Configuration Tool - Multiple Vulnerabilitiesrockwell automation · redundancy module configuration tool · CWE-276 | Yüksek7,0 | — | %0,1 | 1 Eyl 2026 |
28İzleyin | CVE-2026-9634İstismar yok | Redundancy Module Configuration Tool - Multiple Vulnerabilitiesrockwell automation · redundancy module configuration tool · CWE-276 | Yüksek7,0 | — | %0,1 | 1 Eyl 2026 |
34İzleyin | CVE-2026-9637İstismar yok | CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilitiesrockwell automation · compactlogix® 5380 / controllogix® 5580 · CWE-119 | Yüksek8,7 | — | %0,4 | 1 Eyl 2026 |
35İzleyin | CVE-2026-18630İstismar yok | SQL Injection in TMT Machine's Talassoft Industrial Management Softwaretmt machine industry and trade ltd. co. · talassoft industrial management software · CWE-89 | Yüksek8,8 | — | %0,2 | 1 Eyl 2026 |
30İzleyin | CVE-2026-18771İstismar yok | Missing Authentication for Critical Function in TMT Machine's Talassoft Industrial Management Softwaretmt machine industry and trade ltd. co. · talassoft industrial management software · CWE-306 | Yüksek7,5 | — | %0,4 | 1 Eyl 2026 |
28İzleyin | CVE-2026-18780İstismar yok | CSRF in TMT Machine's Talassoft Industrial Management Softwaretmt machine industry and trade ltd. co. · talassoft industrial management software · CWE-352 | Yüksek7,1 | — | %0,1 | 1 Eyl 2026 |
32İzleyin | CVE-2026-55951İstismar yok | httpc memory exhaustion via unbounded response header accumulationerlang · otp · CWE-770 | Yüksek8,2 | — | %0,6 | 1 Eyl 2026 |
33İzleyin | CVE-2026-66357İstismar yok | inets,httpd:HTTP Request Smuggling via obs-fold Header Continuationerlang · otp · CWE-444 | Yüksek8,3 | — | %0,5 | 1 Eyl 2026 |
32İzleyin | CVE-2026-66835İstismar yok | httpd mod_auth directory protection bypassed by a doubled slash in the request patherlang · otp · CWE-50 | Yüksek8,2 | — | %0,9 | 1 Eyl 2026 |
34İzleyin | CVE-2026-69664İstismar yok | httpd parks a request worker indefinitely on a malformed chunk size sent after the headerserlang · otp · CWE-772 | Yüksek8,7 | — | %0,9 | 1 Eyl 2026 |
34İzleyin | CVE-2026-70399İstismar yok | httpd does not enforce the documented default max_clients connection limiterlang · otp · CWE-770 | Yüksek8,7 | — | %0,9 | 1 Eyl 2026 |
34İzleyin | CVE-2026-71380İstismar yok | httpd applies no timeout while receiving a request body, parking a worker on a stalled clienterlang · otp · CWE-772 | Yüksek8,7 | — | %0,6 | 1 Eyl 2026 |
32İzleyin | CVE-2026-73270İstismar yok | httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystemserlang · otp · CWE-178 | Yüksek8,2 | — | %0,9 | 1 Eyl 2026 |
33İzleyin | CVE-2026-73276İstismar yok | inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping ierlang · otp · CWE-444 | Yüksek8,3 | — | %0,5 | 1 Eyl 2026 |
33İzleyin | CVE-2026-73812İstismar yok | inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Lengtherlang · otp · CWE-444 | Yüksek8,3 | — | %0,5 | 1 Eyl 2026 |
34İzleyin | CVE-2026-74835İstismar yok | inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Receptionerlang · otp · CWE-770 | Yüksek8,7 | — | %0,5 | 1 Eyl 2026 |
32İzleyin | CVE-2026-75538İstismar yok | A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peererlang · otp · CWE-122 | Yüksek8,2 | — | %0,8 | 1 Eyl 2026 |
37İzleyin | CVE-2026-78012İstismar yok | Stack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP Stackpyramid solutions · ethernet/ip adapter dll kit (eipa) · CWE-121 | Kritik9,3 | — | %0,6 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83605İstismar yok | xmldom: Attribute name injection via setAttribute() bypasses requireWellFormedxmldom · xmldom · CWE-91 | Yüksek8,7 | — | %0,6 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83606İstismar yok | xmldom PI grammar regex ReDoS: quadratic backtracking on unterminated processing instructionsxmldom · xmldom · CWE-400 | Yüksek8,7 | — | %0,5 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83607İstismar yok | xmldom: Element name injection via createElement() bypasses requireWellFormedxmldom · xmldom · CWE-91 | Yüksek8,7 | — | %0,6 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83608İstismar yok | xmldom: DocType `name` Injection Bypasses requireWellFormedxmldom · xmldom · CWE-91 | Yüksek8,7 | — | %0,6 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83609İstismar yok | xmldom: Creation-time XML Name/QName validation is bypassable via an embedded line terminator, allowing injection on the default serialization pathxmldom · xmldom · CWE-91 | Yüksek8,7 | — | %0,5 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83612İstismar yok | xmldom: HTML raw-text closing-tag case mismatch causes output amplificationxmldom · xmldom · CWE-178 | Yüksek8,7 | — | %0,5 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83613İstismar yok | xmldom: Quadratic-time attribute deduplicationxmldom · xmldom · CWE-407 | Yüksek8,7 | — | %0,6 | 1 Eyl 2026 |
- CVE-2026-1957328İzleyin
Affiliate Super Assistent <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via ‘doCommentShortcode’ function
YüksekCVSS 7,2İstismar yokEPSS %0worschtebrot · affiliate super assistent1 Eyl 2026
- CVE-2026-1979628İzleyin
Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.8.1 - Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter
YüksekCVSS 7,2İstismar yokEPSS %0webilia · listdom: ai-powered business directory with classifieds ads listings1 Eyl 2026
- CVE-2026-1980635İzleyin
Support Genix <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token
YüksekCVSS 8,8İstismar yokEPSS %0devitemsllc · support genix – helpdesk, ai chatbot, knowledge base & customer support ticketing system1 Eyl 2026
- CVE-2026-1995230İzleyin
Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag
YüksekCVSS 7,5Kavram kanıtıEPSS %0shabti · frontend admin by dynamiapps1 Eyl 2026
- CVE-2026-7592128İzleyin
Master Addons for Elementor <= 3.1.9 - Incorrect Authorization to Authenticated (Editor+) Arbitrary File Upload via upload_template_kit AJAX ZIP Extraction
YüksekCVSS 7,2İstismar yokEPSS %1pixarlabs · master addons for elementor – elementor addons, widgets, mega menu builder, popup builder, widget builder & template kits1 Eyl 2026
- CVE-2026-7596525İzleyin
User Profile Builder <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute
OrtaCVSS 6,4İstismar yokEPSS %0cozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editor1 Eyl 2026
- CVE-2026-8377235İzleyin
Cobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c_set_reports_decode command injection
YüksekCVSS 8,6İstismar yokEPSS %3cobham · satcom vsat7090 maritime satellite router1 Eyl 2026
- CVE-2026-7831937İzleyin
TOCTOU Vulnerability in file exchange
KritikCVSS 9,3İstismar yokEPSS %0sauter · modu680-as1 Eyl 2026
- CVE-2026-6564334İzleyin
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.
YüksekCVSS 8,7Kavram kanıtıEPSS %0cpanel · cpanel1 Eyl 2026
- CVE-2026-1991428İzleyin
Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter
YüksekCVSS 7,2İstismar yokEPSS %0uscnanbu · welcart e-commerce1 Eyl 2026
- CVE-2026-2570630İzleyin
yast2-samba-client: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied)
YüksekCVSS 7,5İstismar yokEPSS %0suse · yast2-samba-client1 Eyl 2026
- CVE-2026-5968034İzleyin
yast2-users: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute
YüksekCVSS 8,6İstismar yokEPSS %1suse · yast2-users1 Eyl 2026
- CVE-2026-5968134İzleyin
yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join
YüksekCVSS 8,7İstismar yokEPSS %1suse · yast2-auth-client1 Eyl 2026
- CVE-2026-481337İzleyin
Code injection in the Lutece Core
KritikCVSS 9,4Kavram kanıtıEPSS %0lutece · lutece core1 Eyl 2026
- CVE-2026-8416534İzleyin
Lack of authorisation in OpenNebula by OpenNebula Systems
YüksekCVSS 8,7İstismar yokEPSS %0opennebula systems · opennebula1 Eyl 2026
- CVE-2026-1855039İzleyin
Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter
KritikCVSS 9,8İstismar yokEPSS %0scriptsbundle · nokri – job board wordpress theme1 Eyl 2026
- CVE-2026-8359528İzleyin
AVideo Cross-Site Request Forgery via plugin/API/set.json.php
YüksekCVSS 7,2İstismar yokEPSS %0wwbn · avideo1 Eyl 2026
- CVE-2026-8418735İzleyin
AVideo on_publish.php Missing Authentication Check via RTMP Callback
YüksekCVSS 8,8İstismar yokEPSS %0wwbn · avideo1 Eyl 2026
- CVE-2026-8419434İzleyin
LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname
YüksekCVSS 8,6İstismar yokEPSS %1librenms · librenms1 Eyl 2026
- CVE-2026-8419533İzleyin
Kyverno before 1.16.4 Credential Leak via apiCall
YüksekCVSS 8,3İstismar yokEPSS %0kyverno · kyverno1 Eyl 2026
- CVE-2026-8419633İzleyin
Kyverno before 1.18.0 Server-Side Request Forgery via apiCall
YüksekCVSS 8,3İstismar yokEPSS %0kyverno · kyverno1 Eyl 2026
- CVE-2026-8420037İzleyin
Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions
KritikCVSS 9,4İstismar yokEPSS %0kyverno · kyverno1 Eyl 2026
- CVE-2026-1876539İzleyin
SQL Injection in Teracity Sotware's Teracity E-OSB Platform
KritikCVSS 9,8İstismar yokEPSS %0teracity software technologies inc. · e-osb1 Eyl 2026
- CVE-2026-1947234İzleyin
Rockwell Automation ArmorStart® LT Denial Of Service
YüksekCVSS 8,7İstismar yokEPSS %0rockwell automation · armorstart® lt1 Eyl 2026
- CVE-2026-5174139İzleyin
Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase di
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5174336İzleyin
Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to disable gu
KritikCVSS 9,1İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5174439İzleyin
Incorrect access control in the recv_mesh_info_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to force
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5174739İzleyin
Incorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to emit indirect me
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-8411735İzleyin
Privilege escalation in Firefox for Android
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox mobile1 Eyl 2026
- CVE-2026-8411821İzleyin
Use-after-free in the JavaScript: GC component
OrtaCVSS 5,4Kavram kanıtıEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8411938İzleyin
Sandbox escape due to use-after-free in the DOM: Navigation component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8412138İzleyin
Sandbox escape due to use-after-free in the DOM: Security component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8412335İzleyin
Privilege escalation due to use-after-free in the Graphics: WebGPU component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8412835İzleyin
Privilege escalation in the WebDriver BiDi component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8412939İzleyin
Site isolation issue in the DOM: Navigation component
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8413030İzleyin
Information disclosure in the Graphics: WebGPU component
YüksekCVSS 7,5İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8413135İzleyin
Privilege escalation due to invalid pointer in the Graphics component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8413230İzleyin
Information disclosure in the Networking: HTTP component
YüksekCVSS 7,5İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8413339İzleyin
Site isolation issue in the DOM: Push Subscriptions component
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8413439İzleyin
Other issue in the Profile Backup component
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8413539İzleyin
Other issue in Firefox Focus for Android
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox mobile1 Eyl 2026
- CVE-2026-8414039İzleyin
Site isolation issue in the DOM: Navigation component
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8414139İzleyin
Integer overflow in the Graphics: ImageLib component
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8414239İzleyin
Internally found bugs fixed in Thunderbird 155
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8414339İzleyin
Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8414430İzleyin
Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2
YüksekCVSS 7,5İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8414530İzleyin
Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15
YüksekCVSS 7,5İstismar yokEPSS %0mozilla · firefox1 Eyl 2026
- CVE-2026-8414740Planlayın
Remote Code Execution Vulnerability in Manacle Technologies ERP System
KritikCVSS 10,0İstismar yokEPSS %0manacle technologies · multi-tenant erp system1 Eyl 2026
- CVE-2026-8414836İzleyin
Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP System
KritikCVSS 9,2İstismar yokEPSS %0manacle technologies · multi-tenant erp system1 Eyl 2026
- CVE-2026-8414936İzleyin
Information Disclosure Vulnerability in Manacle Technologies ERP System
KritikCVSS 9,2İstismar yokEPSS %0manacle technologies · multi-tenant erp system1 Eyl 2026
- CVE-2026-8423534İzleyin
Rockwell Automation 1756-ENBT Denial of Service Vulnerability
YüksekCVSS 8,7İstismar yokEPSS %0rockwell automation · 1756-enbt module1 Eyl 2026
- CVE-2024-1008532İzleyin
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communic
YüksekCVSS 8,2İstismar yokEPSS %0schneider electric · ecostruxure™ opc ua server expert1 Eyl 2026
- CVE-2024-1404728İzleyin
Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of Service
YüksekCVSS 7,1İstismar yokEPSS %0elastic · winlogbeat1 Eyl 2026
- CVE-2026-1266328İzleyin
ControlFLASH ® – Improper Access Control
YüksekCVSS 7,0İstismar yokEPSS %0rockwell automation · controlflash ®1 Eyl 2026
- CVE-2026-1333629İzleyin
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause exe
YüksekCVSS 7,3İstismar yokEPSS %0schneider electric · netbotz 5 - 750/7551 Eyl 2026
- CVE-2026-1667534İzleyin
Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation
YüksekCVSS 8,5İstismar yokEPSS %0rockwell automation · factorytalk® activation manager1 Eyl 2026
- CVE-2026-1821039İzleyin
SQL Injection in TRtek Technological Products's Store
KritikCVSS 9,8İstismar yokEPSS %0trtek technological products computer software hardware industry and trade limited company · products's store1 Eyl 2026
- CVE-2026-1880839İzleyin
Unauthenticated Remote Code Execution via Code Injection in Klemsan's KIO
KritikCVSS 9,8İstismar yokEPSS %0klemsan electrical electronics inc. · kio (klemsan internet objects)1 Eyl 2026
- CVE-2026-1951332İzleyin
Gravity Forms <= 3.0.2 - Unauthenticated Arbitrary File Upload via State/Chunk Hash Confusion
YüksekCVSS 8,1İstismar yokEPSS %0gravity forms · gravity forms1 Eyl 2026
- CVE-2026-5175039İzleyin
Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rescan an
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5175139İzleyin
Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove a sp
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5175439İzleyin
Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to overwrit
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5175739İzleyin
Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start a fi
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5176039İzleyin
Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to mass-trigg
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5176239İzleyin
Incorrect access control in the meshInfoKick function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to kick or clean
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5176339İzleyin
Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forcibly dis
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5176439İzleyin
Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5176539İzleyin
Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to inser
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5176630İzleyin
Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reboot the lo
YüksekCVSS 7,5İstismar yokEPSS %01 Eyl 2026
- CVE-2026-8004731İzleyin
Hugging Face Transformers library writes remote code to disk prior to consent check
YüksekCVSS 7,8İstismar yokEPSS %0hugging face · transformers1 Eyl 2026
- CVE-2026-8421832İzleyin
Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)
YüksekCVSS 8,1İstismar yokEPSS %0red hat · red hat amq broker 71 Eyl 2026
- CVE-2026-962136İzleyin
RSLinx Classic® - Multiple Vulnerabilities
KritikCVSS 9,2İstismar yokEPSS %0rockwell automation · rslinx classic®1 Eyl 2026
- CVE-2026-962234İzleyin
RSLinx Classic® - Multiple Vulnerabilities
YüksekCVSS 8,7İstismar yokEPSS %0rockwell automation · rslinx classic®1 Eyl 2026
- CVE-2026-962434İzleyin
RSLinx Classic® - Multiple Vulnerabilities
YüksekCVSS 8,7İstismar yokEPSS %0rockwell automation · rslinx classic®1 Eyl 2026
- CVE-2026-962534İzleyin
RSLinx Classic® - Multiple Vulnerabilities
YüksekCVSS 8,7İstismar yokEPSS %0rockwell automation · rslinx classic®1 Eyl 2026
- CVE-2026-963328İzleyin
Redundancy Module Configuration Tool - Multiple Vulnerabilities
YüksekCVSS 7,0İstismar yokEPSS %0rockwell automation · redundancy module configuration tool1 Eyl 2026
- CVE-2026-963428İzleyin
Redundancy Module Configuration Tool - Multiple Vulnerabilities
YüksekCVSS 7,0İstismar yokEPSS %0rockwell automation · redundancy module configuration tool1 Eyl 2026
- CVE-2026-963734İzleyin
CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities
YüksekCVSS 8,7İstismar yokEPSS %0rockwell automation · compactlogix® 5380 / controllogix® 55801 Eyl 2026
- CVE-2026-1863035İzleyin
SQL Injection in TMT Machine's Talassoft Industrial Management Software
YüksekCVSS 8,8İstismar yokEPSS %0tmt machine industry and trade ltd. co. · talassoft industrial management software1 Eyl 2026
- CVE-2026-1877130İzleyin
Missing Authentication for Critical Function in TMT Machine's Talassoft Industrial Management Software
YüksekCVSS 7,5İstismar yokEPSS %0tmt machine industry and trade ltd. co. · talassoft industrial management software1 Eyl 2026
- CVE-2026-1878028İzleyin
CSRF in TMT Machine's Talassoft Industrial Management Software
YüksekCVSS 7,1İstismar yokEPSS %0tmt machine industry and trade ltd. co. · talassoft industrial management software1 Eyl 2026
- CVE-2026-5595132İzleyin
httpc memory exhaustion via unbounded response header accumulation
YüksekCVSS 8,2İstismar yokEPSS %0erlang · otp1 Eyl 2026
- CVE-2026-6635733İzleyin
inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation
YüksekCVSS 8,3İstismar yokEPSS %0erlang · otp1 Eyl 2026
- CVE-2026-6683532İzleyin
httpd mod_auth directory protection bypassed by a doubled slash in the request path
YüksekCVSS 8,2İstismar yokEPSS %0erlang · otp1 Eyl 2026
- CVE-2026-6966434İzleyin
httpd parks a request worker indefinitely on a malformed chunk size sent after the headers
YüksekCVSS 8,7İstismar yokEPSS %0erlang · otp1 Eyl 2026
- CVE-2026-7039934İzleyin
httpd does not enforce the documented default max_clients connection limit
YüksekCVSS 8,7İstismar yokEPSS %0erlang · otp1 Eyl 2026
- CVE-2026-7138034İzleyin
httpd applies no timeout while receiving a request body, parking a worker on a stalled client
YüksekCVSS 8,7İstismar yokEPSS %0erlang · otp1 Eyl 2026
- CVE-2026-7327032İzleyin
httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems
YüksekCVSS 8,2İstismar yokEPSS %0erlang · otp1 Eyl 2026
- CVE-2026-7327633İzleyin
inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i
YüksekCVSS 8,3İstismar yokEPSS %0erlang · otp1 Eyl 2026
- CVE-2026-7381233İzleyin
inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length
YüksekCVSS 8,3İstismar yokEPSS %0erlang · otp1 Eyl 2026
- CVE-2026-7483534İzleyin
inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception
YüksekCVSS 8,7İstismar yokEPSS %0erlang · otp1 Eyl 2026
- CVE-2026-7553832İzleyin
A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer
YüksekCVSS 8,2İstismar yokEPSS %0erlang · otp1 Eyl 2026
- CVE-2026-7801237İzleyin
Stack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP Stack
KritikCVSS 9,3İstismar yokEPSS %0pyramid solutions · ethernet/ip adapter dll kit (eipa)1 Eyl 2026
- CVE-2026-8360534İzleyin
xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026
- CVE-2026-8360634İzleyin
xmldom PI grammar regex ReDoS: quadratic backtracking on unterminated processing instructions
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026
- CVE-2026-8360734İzleyin
xmldom: Element name injection via createElement() bypasses requireWellFormed
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026
- CVE-2026-8360834İzleyin
xmldom: DocType `name` Injection Bypasses requireWellFormed
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026
- CVE-2026-8360934İzleyin
xmldom: Creation-time XML Name/QName validation is bypassable via an embedded line terminator, allowing injection on the default serialization path
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026
- CVE-2026-8361234İzleyin
xmldom: HTML raw-text closing-tag case mismatch causes output amplification
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026
- CVE-2026-8361334İzleyin
xmldom: Quadratic-time attribute deduplication
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026