Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.961 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 10 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-83625İstismar yok | Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Headersupsysticcom · contact form by supsystic · CWE-79 | Yüksek7,2 | — | %0,5 | 5 Eyl 2026 |
28İzleyin | CVE-2026-86111İstismar yok | BookWyrm through 0.9.1 Insecure Direct Object Reference in EditStatus Exposes Followers-Only and Direct Statusesbookwyrm-social · bookwyrm · CWE-639 | Yüksek7,1 | — | %0,4 | 5 Eyl 2026 |
28İzleyin | CVE-2026-86113İstismar yok | BookWyrm through 0.9.1 Insecure Direct Object Reference in edit-readthrough Allows Tampering with Other Users' Reading Recordsbookwyrm-social · bookwyrm · CWE-639 | Yüksek7,1 | — | %0,4 | 5 Eyl 2026 |
28İzleyin | CVE-2026-86114İstismar yok | Arcane before 2.0.0 Missing Administrator Authorization on the Compose Template Mutation Endpointsgetarcaneapp · arcane · CWE-862 | Yüksek7,1 | — | %0,4 | 5 Eyl 2026 |
28İzleyin | CVE-2026-86116İstismar yok | Metabase before 0.63.1 Missing Function-Level Authorization on the Glossary Management APImetabase · metabase · CWE-862 | Yüksek7,1 | — | %0,4 | 5 Eyl 2026 |
36İzleyin | CVE-2026-86117İstismar yok | Coolify through 4.3.17 OAuth Account Takeover via Unverified Email Matchingcoollabsio · coolify · CWE-287 | Kritik9,2 | — | %0,6 | 5 Eyl 2026 |
36İzleyin | CVE-2026-86119İstismar yok | Webstudio through 0.296.0 SSRF via /cgi proxy routeswebstudio-is · webstudio · CWE-918 | Kritik9,2 | — | %0,5 | 5 Eyl 2026 |
37İzleyin | CVE-2026-86121İstismar yok | Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Controltrycua · cua-computer-server · CWE-306 | Kritik9,3 | — | %1,1 | 5 Eyl 2026 |
37İzleyin | CVE-2026-86123İstismar yok | SQL Chat Unauthenticated Database-Connection Proxy in the /api/connection Endpointssqlchat · sqlchat · CWE-918 | Kritik9,4 | — | %0,4 | 5 Eyl 2026 |
37İzleyin | CVE-2026-86124İstismar yok | AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Serverhkuds · autoagent · CWE-306 | Kritik9,3 | — | %0,9 | 5 Eyl 2026 |
34İzleyin | CVE-2026-86169İstismar yok | Axolotl before 0.19.0 Remote Code Execution via Multipack Patchingaxolotl-ai-cloud · axolotl · CWE-829 | Yüksek8,7 | — | %0,9 | 5 Eyl 2026 |
34İzleyin | CVE-2026-86173İstismar yok | MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawlermindsdb · mindsdb · CWE-918 | Yüksek8,7 | — | %0,6 | 5 Eyl 2026 |
28İzleyin | CVE-2026-86175İstismar yok | NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIsnetbox-community · netbox · CWE-522 | Yüksek7,1 | — | %0,4 | 5 Eyl 2026 |
34İzleyin | CVE-2026-86177İstismar yok | Pterodactyl Panel before 1.14.1 Privilege Escalation via Schedule Taskspterodactyl · panel · CWE-862 | Yüksek8,7 | — | %0,5 | 5 Eyl 2026 |
36İzleyin | GHSA-22mg-8gw7-636xİstismar yok | Path traversal and arbitrary directory deletion/overwrite via agent profile import in local-operatorCWE-22 | Kritik9,1 | — | — | 5 Eyl 2026 |
30İzleyin | GHSA-3xjw-9qpc-53mhİstismar yok | Arbitrary file read via workspace confinement bypass in local-operator /v1/chat/agents/{id}/editCWE-22 | Yüksek7,5 | — | — | 5 Eyl 2026 |
39İzleyin | CVE-2026-10196Kavram kanıtı | Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fieldsgetwpfunnels · mail mint – email marketing, newsletter, email automation & woocommerce emails · CWE-502 | Kritik9,8 | — | %1,1 | 5 Eyl 2026 |
37İzleyin | CVE-2026-86184İstismar yok | Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Routelaradashboard · laradashboard · CWE-306 | Kritik9,3 | — | %1,0 | 5 Eyl 2026 |
34İzleyin | CVE-2026-86185İstismar yok | Bilibili Desktop through 1.18.0 Remote Code Execution via TLS Verification Bypassbilibili · bilibili desktop · CWE-295 | Yüksek8,6 | — | %0,1 | 5 Eyl 2026 |
39İzleyin | CVE-2024-11080İstismar yok | Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injectionpickplugins · post grid · CWE-94 | Kritik9,8 | — | %0,8 | 5 Eyl 2026 |
29İzleyin | CVE-2026-86187İstismar yok | WWBN AVideo Weak PRNG Password Generation via External Loginwwbn · avideo · CWE-330 | Yüksek7,4 | — | %0,3 | 5 Eyl 2026 |
37İzleyin | CVE-2026-86189İstismar yok | WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.phpwwbn · avideo · CWE-73 | Kritik9,3 | — | %0,7 | 5 Eyl 2026 |
37İzleyin | CVE-2026-86190İstismar yok | WWBN AVideo Broken Access Control via videoViewsInfo hash Parameterwwbn · avideo · CWE-200 | Kritik9,3 | — | %0,4 | 5 Eyl 2026 |
28İzleyin | CVE-2026-86192İstismar yok | SiYuan before v3.8.2 Information Disclosure via Attribute-Viewsiyuan-note · siyuan · CWE-639 | Yüksek7,1 | — | %0,3 | 5 Eyl 2026 |
34İzleyin | CVE-2026-86193İstismar yok | Grav API Plugin Authentication Bypass via Group-Inherited Supergetgrav · grav-plugin-api · CWE-863 | Yüksek8,7 | — | %0,3 | 5 Eyl 2026 |
34İzleyin | CVE-2026-86195İstismar yok | grav-plugin-api 1.0.0 through 1.0.19 Privilege Escalation via Dot-Keyed Super Flaggetgrav · grav-plugin-api · CWE-269 | Yüksek8,7 | — | %0,3 | 5 Eyl 2026 |
34İzleyin | CVE-2026-86196İstismar yok | Grav API Plugin before 1.0.20 Authentication Bypass via Host Headergetgrav · grav-plugin-api · CWE-290 | Yüksek8,7 | — | %0,4 | 5 Eyl 2026 |
35İzleyin | CVE-2025-9049İstismar yok | Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeoverscriptsbundle · nokri – job board wordpress theme · CWE-862 | Yüksek8,8 | — | %0,4 | 5 Eyl 2026 |
34İzleyin | CVE-2026-0799İstismar yok | OOBR and OOBW in libpcap before 1.10.7the tcpdump group · libpcap · CWE-125 | Yüksek8,7 | — | %0,1 | 5 Eyl 2026 |
30İzleyin | CVE-2026-86207Kavram kanıtı | Authentication bypass leads to unauthorised access to N-centraln-able · n-central · CWE-305 | Yüksek7,7 | — | %1,2 | 5 Eyl 2026 |
39İzleyin | CVE-2026-67276Kavram kanıtı | SSH user impersonation possible in Mikrotik RouterOSmikrotik · routeros · CWE-347 | Kritik9,2 | — | %8,9 | 5 Eyl 2026 |
65Bu hafta | CVE-2026-67277Silahlaştırılmış | Kernel memory disclosure and denial of service in MikroTik RouterOS btest servicemikrotik · routeros · CWE-306 | Yüksek8,8 | KEV | %1,5 | 5 Eyl 2026 |
25İzleyin | CVE-2026-67278İstismar yok | TLS server impersonation possible in Mikrotik RouterOSmikrotik · routeros · CWE-347 | Orta6,3 | — | %0,2 | 5 Eyl 2026 |
60Bu hafta | CVE-2026-67279Silahlaştırılmış | SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOSmikrotik · routeros · CWE-841 | Orta6,9 | KEV | %2,2 | 5 Eyl 2026 |
34İzleyin | CVE-2026-67281Kavram kanıtı | Unauthenticated file read in Mikrotik RouterOSmikrotik · routeros · CWE-22 | Yüksek8,7 | — | %0,7 | 5 Eyl 2026 |
68Bu hafta | CVE-2026-86060Silahlaştırılmış | SSH session privilege manipulation via a crafted username in Mikrotik RouterOSmikrotik · routeros · CWE-88 | Kritik9,2 | KEV | %6,3 | 5 Eyl 2026 |
27İzleyin | CVE-2026-86206Kavram kanıtı | Access control filter bypass allows unauthorised access to APIsn-able · n-central · CWE-791 | Orta6,9 | — | %1,1 | 5 Eyl 2026 |
38İzleyin | CVE-2026-86148İstismar yok | Tenda CP3 Kylin system.c SystemAsh os command injectiontenda · cp3 · CWE-77 | Kritik9,4 | — | %2,9 | 5 Eyl 2026 |
38İzleyin | CVE-2026-86149İstismar yok | Tenda CP3 NetCheckPing.cpp os command injectiontenda · cp3 · CWE-77 | Kritik9,4 | — | %2,9 | 5 Eyl 2026 |
30İzleyin | CVE-2026-6554İstismar yok | infinte loop in libpcap before 1.10.7the tcpdump group · libpcap · CWE-835 | Yüksek7,5 | — | %0,4 | 5 Eyl 2026 |
38İzleyin | CVE-2026-86151İstismar yok | Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injectiontenda · cp3 · CWE-77 | Kritik9,4 | — | %2,9 | 5 Eyl 2026 |
41Planlayın | CVE-2026-86152İstismar yok | Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injectiontenda · cp3 · CWE-77 | Kritik10,0 | — | %2,8 | 5 Eyl 2026 |
37İzleyin | CVE-2026-86153İstismar yok | Tenda CP3 Redirect.cpp SetRedirectEnable privileges managementtenda · cp3 · CWE-266 | Kritik9,4 | — | %0,7 | 5 Eyl 2026 |
39İzleyin | CVE-2026-16310İstismar yok | MemberDash <= 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameterlearndash · memberdash · CWE-639 | Kritik9,8 | — | %0,5 | 5 Eyl 2026 |
30İzleyin | CVE-2026-18056İstismar yok | HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticatorhivepress · hivepress authentication · CWE-287 | Yüksek7,5 | — | %0,5 | 5 Eyl 2026 |
39İzleyin | CVE-2026-75816Kavram kanıtı | Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifiershabti · frontend admin by dynamiapps · CWE-287 | Kritik9,8 | — | %0,9 | 5 Eyl 2026 |
75Bu hafta | CVE-2026-86218Silahlaştırılmış | pre-authentication remote code executionn-able · n-central · CWE-96 | Kritik10,0 | KEV | %15,3 | 5 Eyl 2026 |
35İzleyin | CVE-2026-86165İstismar yok | Tenda HG10 formURL buffer overflowtenda · hg10 · CWE-119 | Yüksek8,9 | — | %1,1 | 6 Eyl 2026 |
29İzleyin | CVE-2026-86166İstismar yok | Tenda HG10 Boa Web Server formWanRedirect buffer overflowtenda · hg10 · CWE-119 | Yüksek7,4 | — | %0,8 | 6 Eyl 2026 |
35İzleyin | CVE-2026-86167İstismar yok | Tenda HG10 Boa formgponConf os command injectiontenda · hg10 · CWE-77 | Yüksek8,6 | — | %2,7 | 6 Eyl 2026 |
35İzleyin | CVE-2026-18480İstismar yok | SureCart < 4.6.3 - Subscriber+ Administrator Account Takeoverunknown · surecart · CWE-269 | Yüksek8,8 | — | %0,4 | 6 Eyl 2026 |
30İzleyin | CVE-2026-84219İstismar yok | Kirki 6.2.1 - 6.2.5 - Unauthenticated Stored XSS via HTML Entity Decodingunknown · kirki · CWE-79 | Yüksek7,5 | — | %0,3 | 6 Eyl 2026 |
33İzleyin | CVE-2026-86242Kavram kanıtı | Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Buildsmaximhq · bifrost · CWE-94 | Yüksek8,1 | — | %3,5 | 6 Eyl 2026 |
34İzleyin | CVE-2026-86250İstismar yok | h3 before 2.0.1-rc.18 Denial of Service via Unbounded Chunked Cookieh3js · h3 · CWE-400 | Yüksek8,7 | — | %0,4 | 6 Eyl 2026 |
32İzleyin | CVE-2026-86251İstismar yok | h3 before 1.15.9 Path Traversal via Double Decodingh3js · h3 · CWE-22 | Yüksek8,2 | — | %0,4 | 6 Eyl 2026 |
32İzleyin | CVE-2026-86253İstismar yok | h3 before 1.15.6 Path Traversal via Percent-Encoded Dot Segmentsh3js · h3 · CWE-22 | Yüksek8,2 | — | %0,6 | 6 Eyl 2026 |
28İzleyin | CVE-2026-86255İstismar yok | wger before 2.5 Uncontrolled Resource Consumption via date_sequencewger-project · wger · CWE-400 | Yüksek7,1 | — | %0,4 | 6 Eyl 2026 |
32İzleyin | CVE-2026-86258İstismar yok | nbviewer through 1.0.1 Path Traversal via LocalFileHandlerjupyter · nbviewer · CWE-22 | Yüksek8,2 | — | %0,5 | 6 Eyl 2026 |
36İzleyin | CVE-2026-86259Kavram kanıtı | OpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validationthu-maic · openmaic · CWE-306 | Kritik9,0 | — | %0,4 | 6 Eyl 2026 |
28İzleyin | CVE-2026-86283Kavram kanıtı | MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event Datamisp · misp · CWE-285 | Yüksek7,1 | — | %0,3 | 6 Eyl 2026 |
35İzleyin | CVE-2026-19633İstismar yok | PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueriesdalibo · postgresql anonymizer · CWE-89 | Yüksek8,8 | — | %0,6 | 6 Eyl 2026 |
28İzleyin | CVE-2020-37277İstismar yok | PocketMine-MP before 3.15.4 Denial of Service via InventoryTransactionpmmp · pocketmine-mp · CWE-400 | Yüksek7,1 | — | %0,5 | 6 Eyl 2026 |
28İzleyin | CVE-2021-48007İstismar yok | PocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacketpmmp · pocketmine-mp · CWE-20 | Yüksek7,1 | — | %0,5 | 6 Eyl 2026 |
34İzleyin | CVE-2022-51009İstismar yok | PocketMine-MP before 4.7.2 Denial of Service via Skin Geometrypmmp · pocketmine-mp · CWE-248 | Yüksek8,7 | — | %0,6 | 6 Eyl 2026 |
33İzleyin | CVE-2026-82750İstismar yok | Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegationzenhive · mpp · CWE-1284 | Yüksek8,3 | — | %0,5 | 6 Eyl 2026 |
33İzleyin | CVE-2026-82751İstismar yok | Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioningzenhive · mpp · CWE-1284 | Yüksek8,3 | — | %0,5 | 6 Eyl 2026 |
29İzleyin | CVE-2026-13608İstismar yok | OpenLDAP SASL authentication bypasshaxx · curl · CWE-923 | Yüksek7,4 | — | %0,5 | 6 Eyl 2026 |
36İzleyin | CVE-2026-18924İstismar yok | HTTP/2 server push UAFhaxx · curl · CWE-416 | Kritik9,1 | — | %0,5 | 6 Eyl 2026 |
39İzleyin | CVE-2026-19931İstismar yok | Negotiate ambient user conn reusehaxx · curl · CWE-488 | Kritik9,8 | — | %1,1 | 6 Eyl 2026 |
30İzleyin | CVE-2026-80229İstismar yok | OpenSSL provider use-after-freehaxx · curl · CWE-416 | Yüksek7,5 | — | %0,5 | 6 Eyl 2026 |
30İzleyin | CVE-2026-80230İstismar yok | OpenSSL pinning bypasshaxx · curl · CWE-295 | Yüksek7,5 | — | %0,3 | 6 Eyl 2026 |
30İzleyin | CVE-2026-80231İstismar yok | native CA store conn reusehaxx · curl · CWE-488 | Yüksek7,5 | — | %0,8 | 6 Eyl 2026 |
30İzleyin | CVE-2026-80255İstismar yok | secure cookie attribute bypass with tabhaxx · curl · CWE-201 | Yüksek7,5 | — | %0,4 | 6 Eyl 2026 |
30İzleyin | CVE-2026-82208İstismar yok | wolfSSL CA-cache hit overrides callbackhaxx · curl · CWE-295 | Yüksek7,5 | — | %0,4 | 6 Eyl 2026 |
32İzleyin | CVE-2026-82209İstismar yok | domain-scoped PSL domain cookiehaxx · curl · CWE-201 | Yüksek8,2 | — | %0,3 | 6 Eyl 2026 |
39İzleyin | CVE-2026-86219İstismar yok | Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_stepCWE-294 | Kritik9,8 | — | %0,4 | 6 Eyl 2026 |
39İzleyin | CVE-2026-86304İstismar yok | MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust aCWE-347 | Kritik9,8 | — | %0,3 | 6 Eyl 2026 |
37İzleyin | CVE-2026-16876İstismar yok | An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V.nec corporation · univerge ix-r/ix-v · CWE-306 | Kritik9,3 | — | %0,5 | 6 Eyl 2026 |
33İzleyin | CVE-2026-20501İstismar yok | In vdec, there is a possible out of bounds write due to a heap buffer overflow.mediatek · mt2718 firmware · CWE-122 | Yüksek8,4 | — | %0,1 | 6 Eyl 2026 |
33İzleyin | CVE-2026-20502İstismar yok | In vdec, there is a possible out of bounds write due to a missing bounds check.mediatek · mt2718 firmware · CWE-122 | Yüksek8,4 | — | %0,1 | 6 Eyl 2026 |
22İzleyin | CVE-2026-20516Kavram kanıtı | In MiracastService, there is a possible escalation of privilege due to a confused deputy.mediatek, inc. · mediatek chipset · CWE-926 | Orta5,5 | — | %0,1 | 6 Eyl 2026 |
35İzleyin | CVE-2026-79697İstismar yok | Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injectionadvantech · wise-6610-nb · CWE-74 | Yüksek8,6 | — | %4,9 | 7 Eyl 2026 |
35İzleyin | CVE-2026-79698İstismar yok | Advantech WISE-6610-NB Node-RED nodered_lib_apply command injectionadvantech · wise-6610-nb · CWE-74 | Yüksek8,6 | — | %3,1 | 7 Eyl 2026 |
31İzleyin | CVE-2026-86313İstismar yok | Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers.samsung opensource · walrus · CWE-787 | Yüksek7,8 | — | %0,1 | 7 Eyl 2026 |
30İzleyin | CVE-2026-14296İstismar yok | nRF54H20: MCUBoot can be tricked to executing unauthenticated codenordic semiconductor asa · nrf54h20 · CWE-347 | Yüksek7,5 | — | %0,1 | 7 Eyl 2026 |
29İzleyin | CVE-2026-78254İstismar yok | Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file writeapache · ant · CWE-23 | Yüksek7,4 | — | %0,5 | 7 Eyl 2026 |
34İzleyin | CVE-2026-84226İstismar yok | OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting aopenvpn · openvpn · CWE-426 | Yüksek8,5 | — | %0,1 | 7 Eyl 2026 |
34İzleyin | CVE-2026-14297İstismar yok | The Continuous Glucose Monitoring Service's Record Access Control Point (RACP) write handler `memcpy`s the entire attacker-supplied ATT write value into a fixednordic semiconductor asa · nrf connect sdk · CWE-787 | Yüksek8,7 | — | %0,2 | 7 Eyl 2026 |
34İzleyin | CVE-2026-84732İstismar yok | Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service viaopenvpn · openvpn · CWE-190 | Yüksek8,7 | — | %0,3 | 7 Eyl 2026 |
33İzleyin | CVE-2026-84173İstismar yok | In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates multi-segment allow ruleclipse foundation · eclipse ankaios · CWE-863 | Yüksek8,3 | — | %0,1 | 7 Eyl 2026 |
28İzleyin | CVE-2026-86347İstismar yok | MISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustionmisp-project · misp · CWE-400 | Yüksek7,1 | — | %0,4 | 7 Eyl 2026 |
34İzleyin | CVE-2026-19204İstismar yok | A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memoryeclipse foundation · eclipse jetty · CWE-770 | Yüksek8,7 | — | %0,4 | 7 Eyl 2026 |
38İzleyin | CVE-2026-86296İstismar yok | D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflowd-link · dir-822a · CWE-119 | Kritik9,3 | — | %2,3 | 7 Eyl 2026 |
32İzleyin | CVE-2026-86297İstismar yok | D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-oned-link · dir-605 · CWE-189 | Yüksek8,2 | — | %1,1 | 7 Eyl 2026 |
30İzleyin | CVE-2026-84256İstismar yok | An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to exopenvpn · openvpn · CWE-78 | Yüksek7,7 | — | %0,3 | 7 Eyl 2026 |
35İzleyin | CVE-2026-86299İstismar yok | Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injectionlinksys · re7000 · CWE-77 | Yüksek8,6 | — | %3,7 | 7 Eyl 2026 |
29İzleyin | CVE-2026-61409İstismar yok | Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements usedell · secure connect gateway · CWE-78 | Yüksek7,3 | — | %1,4 | 7 Eyl 2026 |
37İzleyin | CVE-2026-61410İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorizatdell · secure connect gateway · CWE-862 | Kritik9,4 | — | %0,8 | 7 Eyl 2026 |
28İzleyin | CVE-2026-6431İstismar yok | User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Fieldcozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editor · CWE-79 | Yüksek7,2 | — | %0,4 | 7 Eyl 2026 |
32İzleyin | CVE-2026-80132İstismar yok | ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authenticatdell · secure connect gateway · CWE-306 | Yüksek8,1 | — | %0,4 | 7 Eyl 2026 |
- CVE-2026-8362528İzleyin
Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header
YüksekCVSS 7,2İstismar yokEPSS %0supsysticcom · contact form by supsystic5 Eyl 2026
- CVE-2026-8611128İzleyin
BookWyrm through 0.9.1 Insecure Direct Object Reference in EditStatus Exposes Followers-Only and Direct Statuses
YüksekCVSS 7,1İstismar yokEPSS %0bookwyrm-social · bookwyrm5 Eyl 2026
- CVE-2026-8611328İzleyin
BookWyrm through 0.9.1 Insecure Direct Object Reference in edit-readthrough Allows Tampering with Other Users' Reading Records
YüksekCVSS 7,1İstismar yokEPSS %0bookwyrm-social · bookwyrm5 Eyl 2026
- CVE-2026-8611428İzleyin
Arcane before 2.0.0 Missing Administrator Authorization on the Compose Template Mutation Endpoints
YüksekCVSS 7,1İstismar yokEPSS %0getarcaneapp · arcane5 Eyl 2026
- CVE-2026-8611628İzleyin
Metabase before 0.63.1 Missing Function-Level Authorization on the Glossary Management API
YüksekCVSS 7,1İstismar yokEPSS %0metabase · metabase5 Eyl 2026
- CVE-2026-8611736İzleyin
Coolify through 4.3.17 OAuth Account Takeover via Unverified Email Matching
KritikCVSS 9,2İstismar yokEPSS %0coollabsio · coolify5 Eyl 2026
- CVE-2026-8611936İzleyin
Webstudio through 0.296.0 SSRF via /cgi proxy routes
KritikCVSS 9,2İstismar yokEPSS %0webstudio-is · webstudio5 Eyl 2026
- CVE-2026-8612137İzleyin
Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control
KritikCVSS 9,3İstismar yokEPSS %1trycua · cua-computer-server5 Eyl 2026
- CVE-2026-8612337İzleyin
SQL Chat Unauthenticated Database-Connection Proxy in the /api/connection Endpoints
KritikCVSS 9,4İstismar yokEPSS %0sqlchat · sqlchat5 Eyl 2026
- CVE-2026-8612437İzleyin
AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server
KritikCVSS 9,3İstismar yokEPSS %0hkuds · autoagent5 Eyl 2026
- CVE-2026-8616934İzleyin
Axolotl before 0.19.0 Remote Code Execution via Multipack Patching
YüksekCVSS 8,7İstismar yokEPSS %0axolotl-ai-cloud · axolotl5 Eyl 2026
- CVE-2026-8617334İzleyin
MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler
YüksekCVSS 8,7İstismar yokEPSS %0mindsdb · mindsdb5 Eyl 2026
- CVE-2026-8617528İzleyin
NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs
YüksekCVSS 7,1İstismar yokEPSS %0netbox-community · netbox5 Eyl 2026
- CVE-2026-8617734İzleyin
Pterodactyl Panel before 1.14.1 Privilege Escalation via Schedule Tasks
YüksekCVSS 8,7İstismar yokEPSS %0pterodactyl · panel5 Eyl 2026
- GHSA-22mg-8gw7-636x36İzleyin
Path traversal and arbitrary directory deletion/overwrite via agent profile import in local-operator
KritikCVSS 9,1İstismar yok5 Eyl 2026
- GHSA-3xjw-9qpc-53mh30İzleyin
Arbitrary file read via workspace confinement bypass in local-operator /v1/chat/agents/{id}/edit
YüksekCVSS 7,5İstismar yok5 Eyl 2026
- CVE-2026-1019639İzleyin
Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fields
KritikCVSS 9,8Kavram kanıtıEPSS %1getwpfunnels · mail mint – email marketing, newsletter, email automation & woocommerce emails5 Eyl 2026
- CVE-2026-8618437İzleyin
Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route
KritikCVSS 9,3İstismar yokEPSS %1laradashboard · laradashboard5 Eyl 2026
- CVE-2026-8618534İzleyin
Bilibili Desktop through 1.18.0 Remote Code Execution via TLS Verification Bypass
YüksekCVSS 8,6İstismar yokEPSS %0bilibili · bilibili desktop5 Eyl 2026
- CVE-2024-1108039İzleyin
Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection
KritikCVSS 9,8İstismar yokEPSS %0pickplugins · post grid5 Eyl 2026
- CVE-2026-8618729İzleyin
WWBN AVideo Weak PRNG Password Generation via External Login
YüksekCVSS 7,4İstismar yokEPSS %0wwbn · avideo5 Eyl 2026
- CVE-2026-8618937İzleyin
WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php
KritikCVSS 9,3İstismar yokEPSS %0wwbn · avideo5 Eyl 2026
- CVE-2026-8619037İzleyin
WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter
KritikCVSS 9,3İstismar yokEPSS %0wwbn · avideo5 Eyl 2026
- CVE-2026-8619228İzleyin
SiYuan before v3.8.2 Information Disclosure via Attribute-View
YüksekCVSS 7,1İstismar yokEPSS %0siyuan-note · siyuan5 Eyl 2026
- CVE-2026-8619334İzleyin
Grav API Plugin Authentication Bypass via Group-Inherited Super
YüksekCVSS 8,7İstismar yokEPSS %0getgrav · grav-plugin-api5 Eyl 2026
- CVE-2026-8619534İzleyin
grav-plugin-api 1.0.0 through 1.0.19 Privilege Escalation via Dot-Keyed Super Flag
YüksekCVSS 8,7İstismar yokEPSS %0getgrav · grav-plugin-api5 Eyl 2026
- CVE-2026-8619634İzleyin
Grav API Plugin before 1.0.20 Authentication Bypass via Host Header
YüksekCVSS 8,7İstismar yokEPSS %0getgrav · grav-plugin-api5 Eyl 2026
- CVE-2025-904935İzleyin
Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover
YüksekCVSS 8,8İstismar yokEPSS %0scriptsbundle · nokri – job board wordpress theme5 Eyl 2026
- CVE-2026-079934İzleyin
OOBR and OOBW in libpcap before 1.10.7
YüksekCVSS 8,7İstismar yokEPSS %0the tcpdump group · libpcap5 Eyl 2026
- CVE-2026-8620730İzleyin
Authentication bypass leads to unauthorised access to N-central
YüksekCVSS 7,7Kavram kanıtıEPSS %1n-able · n-central5 Eyl 2026
- CVE-2026-6727639İzleyin
SSH user impersonation possible in Mikrotik RouterOS
KritikCVSS 9,2Kavram kanıtıEPSS %8mikrotik · routeros5 Eyl 2026
- CVE-2026-6727765Bu hafta
Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %1mikrotik · routeros5 Eyl 2026
- CVE-2026-6727825İzleyin
TLS server impersonation possible in Mikrotik RouterOS
OrtaCVSS 6,3İstismar yokEPSS %0mikrotik · routeros5 Eyl 2026
- CVE-2026-6727960Bu hafta
SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
OrtaCVSS 6,9KEVSilahlaştırılmışEPSS %2mikrotik · routeros5 Eyl 2026
- CVE-2026-6728134İzleyin
Unauthenticated file read in Mikrotik RouterOS
YüksekCVSS 8,7Kavram kanıtıEPSS %0mikrotik · routeros5 Eyl 2026
- CVE-2026-8606068Bu hafta
SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
KritikCVSS 9,2KEVSilahlaştırılmışEPSS %6mikrotik · routeros5 Eyl 2026
- CVE-2026-8620627İzleyin
Access control filter bypass allows unauthorised access to APIs
OrtaCVSS 6,9Kavram kanıtıEPSS %1n-able · n-central5 Eyl 2026
- CVE-2026-8614838İzleyin
Tenda CP3 Kylin system.c SystemAsh os command injection
KritikCVSS 9,4İstismar yokEPSS %2tenda · cp35 Eyl 2026
- CVE-2026-8614938İzleyin
Tenda CP3 NetCheckPing.cpp os command injection
KritikCVSS 9,4İstismar yokEPSS %2tenda · cp35 Eyl 2026
- CVE-2026-655430İzleyin
infinte loop in libpcap before 1.10.7
YüksekCVSS 7,5İstismar yokEPSS %0the tcpdump group · libpcap5 Eyl 2026
- CVE-2026-8615138İzleyin
Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection
KritikCVSS 9,4İstismar yokEPSS %2tenda · cp35 Eyl 2026
- CVE-2026-8615241Planlayın
Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection
KritikCVSS 10,0İstismar yokEPSS %2tenda · cp35 Eyl 2026
- CVE-2026-8615337İzleyin
Tenda CP3 Redirect.cpp SetRedirectEnable privileges management
KritikCVSS 9,4İstismar yokEPSS %0tenda · cp35 Eyl 2026
- CVE-2026-1631039İzleyin
MemberDash <= 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter
KritikCVSS 9,8İstismar yokEPSS %0learndash · memberdash5 Eyl 2026
- CVE-2026-1805630İzleyin
HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator
YüksekCVSS 7,5İstismar yokEPSS %0hivepress · hivepress authentication5 Eyl 2026
- CVE-2026-7581639İzleyin
Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier
KritikCVSS 9,8Kavram kanıtıEPSS %0shabti · frontend admin by dynamiapps5 Eyl 2026
- CVE-2026-8621875Bu hafta
pre-authentication remote code execution
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %15n-able · n-central5 Eyl 2026
- CVE-2026-8616535İzleyin
Tenda HG10 formURL buffer overflow
YüksekCVSS 8,9İstismar yokEPSS %1tenda · hg106 Eyl 2026
- CVE-2026-8616629İzleyin
Tenda HG10 Boa Web Server formWanRedirect buffer overflow
YüksekCVSS 7,4İstismar yokEPSS %0tenda · hg106 Eyl 2026
- CVE-2026-8616735İzleyin
Tenda HG10 Boa formgponConf os command injection
YüksekCVSS 8,6İstismar yokEPSS %2tenda · hg106 Eyl 2026
- CVE-2026-1848035İzleyin
SureCart < 4.6.3 - Subscriber+ Administrator Account Takeover
YüksekCVSS 8,8İstismar yokEPSS %0unknown · surecart6 Eyl 2026
- CVE-2026-8421930İzleyin
Kirki 6.2.1 - 6.2.5 - Unauthenticated Stored XSS via HTML Entity Decoding
YüksekCVSS 7,5İstismar yokEPSS %0unknown · kirki6 Eyl 2026
- CVE-2026-8624233İzleyin
Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds
YüksekCVSS 8,1Kavram kanıtıEPSS %3maximhq · bifrost6 Eyl 2026
- CVE-2026-8625034İzleyin
h3 before 2.0.1-rc.18 Denial of Service via Unbounded Chunked Cookie
YüksekCVSS 8,7İstismar yokEPSS %0h3js · h36 Eyl 2026
- CVE-2026-8625132İzleyin
h3 before 1.15.9 Path Traversal via Double Decoding
YüksekCVSS 8,2İstismar yokEPSS %0h3js · h36 Eyl 2026
- CVE-2026-8625332İzleyin
h3 before 1.15.6 Path Traversal via Percent-Encoded Dot Segments
YüksekCVSS 8,2İstismar yokEPSS %0h3js · h36 Eyl 2026
- CVE-2026-8625528İzleyin
wger before 2.5 Uncontrolled Resource Consumption via date_sequence
YüksekCVSS 7,1İstismar yokEPSS %0wger-project · wger6 Eyl 2026
- CVE-2026-8625832İzleyin
nbviewer through 1.0.1 Path Traversal via LocalFileHandler
YüksekCVSS 8,2İstismar yokEPSS %0jupyter · nbviewer6 Eyl 2026
- CVE-2026-8625936İzleyin
OpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validation
KritikCVSS 9,0Kavram kanıtıEPSS %0thu-maic · openmaic6 Eyl 2026
- CVE-2026-8628328İzleyin
MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event Data
YüksekCVSS 7,1Kavram kanıtıEPSS %0misp · misp6 Eyl 2026
- CVE-2026-1963335İzleyin
PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries
YüksekCVSS 8,8İstismar yokEPSS %0dalibo · postgresql anonymizer6 Eyl 2026
- CVE-2020-3727728İzleyin
PocketMine-MP before 3.15.4 Denial of Service via InventoryTransaction
YüksekCVSS 7,1İstismar yokEPSS %0pmmp · pocketmine-mp6 Eyl 2026
- CVE-2021-4800728İzleyin
PocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacket
YüksekCVSS 7,1İstismar yokEPSS %0pmmp · pocketmine-mp6 Eyl 2026
- CVE-2022-5100934İzleyin
PocketMine-MP before 4.7.2 Denial of Service via Skin Geometry
YüksekCVSS 8,7İstismar yokEPSS %0pmmp · pocketmine-mp6 Eyl 2026
- CVE-2026-8275033İzleyin
Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation
YüksekCVSS 8,3İstismar yokEPSS %0zenhive · mpp6 Eyl 2026
- CVE-2026-8275133İzleyin
Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning
YüksekCVSS 8,3İstismar yokEPSS %0zenhive · mpp6 Eyl 2026
- CVE-2026-1360829İzleyin
OpenLDAP SASL authentication bypass
YüksekCVSS 7,4İstismar yokEPSS %0haxx · curl6 Eyl 2026
- CVE-2026-1892436İzleyin
HTTP/2 server push UAF
KritikCVSS 9,1İstismar yokEPSS %0haxx · curl6 Eyl 2026
- CVE-2026-1993139İzleyin
Negotiate ambient user conn reuse
KritikCVSS 9,8İstismar yokEPSS %1haxx · curl6 Eyl 2026
- CVE-2026-8022930İzleyin
OpenSSL provider use-after-free
YüksekCVSS 7,5İstismar yokEPSS %0haxx · curl6 Eyl 2026
- CVE-2026-8023030İzleyin
OpenSSL pinning bypass
YüksekCVSS 7,5İstismar yokEPSS %0haxx · curl6 Eyl 2026
- CVE-2026-8023130İzleyin
native CA store conn reuse
YüksekCVSS 7,5İstismar yokEPSS %0haxx · curl6 Eyl 2026
- CVE-2026-8025530İzleyin
secure cookie attribute bypass with tab
YüksekCVSS 7,5İstismar yokEPSS %0haxx · curl6 Eyl 2026
- CVE-2026-8220830İzleyin
wolfSSL CA-cache hit overrides callback
YüksekCVSS 7,5İstismar yokEPSS %0haxx · curl6 Eyl 2026
- CVE-2026-8220932İzleyin
domain-scoped PSL domain cookie
YüksekCVSS 8,2İstismar yokEPSS %0haxx · curl6 Eyl 2026
- CVE-2026-8621939İzleyin
Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step
KritikCVSS 9,8İstismar yokEPSS %06 Eyl 2026
- CVE-2026-8630439İzleyin
MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust a
KritikCVSS 9,8İstismar yokEPSS %06 Eyl 2026
- CVE-2026-1687637İzleyin
An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V.
KritikCVSS 9,3İstismar yokEPSS %0nec corporation · univerge ix-r/ix-v6 Eyl 2026
- CVE-2026-2050133İzleyin
In vdec, there is a possible out of bounds write due to a heap buffer overflow.
YüksekCVSS 8,4İstismar yokEPSS %0mediatek · mt2718 firmware6 Eyl 2026
- CVE-2026-2050233İzleyin
In vdec, there is a possible out of bounds write due to a missing bounds check.
YüksekCVSS 8,4İstismar yokEPSS %0mediatek · mt2718 firmware6 Eyl 2026
- CVE-2026-2051622İzleyin
In MiracastService, there is a possible escalation of privilege due to a confused deputy.
OrtaCVSS 5,5Kavram kanıtıEPSS %0mediatek, inc. · mediatek chipset6 Eyl 2026
- CVE-2026-7969735İzleyin
Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection
YüksekCVSS 8,6İstismar yokEPSS %4advantech · wise-6610-nb7 Eyl 2026
- CVE-2026-7969835İzleyin
Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection
YüksekCVSS 8,6İstismar yokEPSS %3advantech · wise-6610-nb7 Eyl 2026
- CVE-2026-8631331İzleyin
Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers.
YüksekCVSS 7,8İstismar yokEPSS %0samsung opensource · walrus7 Eyl 2026
- CVE-2026-1429630İzleyin
nRF54H20: MCUBoot can be tricked to executing unauthenticated code
YüksekCVSS 7,5İstismar yokEPSS %0nordic semiconductor asa · nrf54h207 Eyl 2026
- CVE-2026-7825429İzleyin
Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
YüksekCVSS 7,4İstismar yokEPSS %0apache · ant7 Eyl 2026
- CVE-2026-8422634İzleyin
OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting a
YüksekCVSS 8,5İstismar yokEPSS %0openvpn · openvpn7 Eyl 2026
- CVE-2026-1429734İzleyin
The Continuous Glucose Monitoring Service's Record Access Control Point (RACP) write handler `memcpy`s the entire attacker-supplied ATT write value into a fixed
YüksekCVSS 8,7İstismar yokEPSS %0nordic semiconductor asa · nrf connect sdk7 Eyl 2026
- CVE-2026-8473234İzleyin
Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via
YüksekCVSS 8,7İstismar yokEPSS %0openvpn · openvpn7 Eyl 2026
- CVE-2026-8417333İzleyin
In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates multi-segment allow rul
YüksekCVSS 8,3İstismar yokEPSS %0eclipse foundation · eclipse ankaios7 Eyl 2026
- CVE-2026-8634728İzleyin
MISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustion
YüksekCVSS 7,1İstismar yokEPSS %0misp-project · misp7 Eyl 2026
- CVE-2026-1920434İzleyin
A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory
YüksekCVSS 8,7İstismar yokEPSS %0eclipse foundation · eclipse jetty7 Eyl 2026
- CVE-2026-8629638İzleyin
D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow
KritikCVSS 9,3İstismar yokEPSS %2d-link · dir-822a7 Eyl 2026
- CVE-2026-8629732İzleyin
D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one
YüksekCVSS 8,2İstismar yokEPSS %1d-link · dir-6057 Eyl 2026
- CVE-2026-8425630İzleyin
An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to ex
YüksekCVSS 7,7İstismar yokEPSS %0openvpn · openvpn7 Eyl 2026
- CVE-2026-8629935İzleyin
Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection
YüksekCVSS 8,6İstismar yokEPSS %3linksys · re70007 Eyl 2026
- CVE-2026-6140929İzleyin
Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements use
YüksekCVSS 7,3İstismar yokEPSS %1dell · secure connect gateway7 Eyl 2026
- CVE-2026-6141037İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorizat
KritikCVSS 9,4İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-643128İzleyin
User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field
YüksekCVSS 7,2İstismar yokEPSS %0cozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editor7 Eyl 2026
- CVE-2026-8013232İzleyin
ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authenticat
YüksekCVSS 8,1İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026