Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.962 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 11 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2026-80133İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Travdell · secure connect gateway · CWE-23 | Yüksek8,1 | — | %0,7 | 7 Eyl 2026 |
30İzleyin | CVE-2026-80134İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-codeddell · secure connect gateway · CWE-798 | Yüksek7,7 | — | %0,3 | 7 Eyl 2026 |
31İzleyin | CVE-2026-80178İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilegdell · secure connect gateway · CWE-269 | Yüksek7,8 | — | %0,1 | 7 Eyl 2026 |
37İzleyin | CVE-2026-80238İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Undell · secure connect gateway · CWE-250 | Kritik9,3 | — | %0,1 | 7 Eyl 2026 |
28İzleyin | CVE-2026-86408İstismar yok | MISP Missing Authorization in Cryptographic Key View Exposes Signing Keys from Protected Eventsmisp-project · misp · CWE-639 | Yüksek7,1 | — | %0,3 | 7 Eyl 2026 |
28İzleyin | CVE-2026-86419İstismar yok | MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discoverymisp-project · misp · CWE-200 | Yüksek7,0 | — | %0,4 | 7 Eyl 2026 |
37İzleyin | CVE-2026-86426Kavram kanıtı | LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusionlibrenms · librenms · CWE-287 | Kritik9,2 | — | %4,3 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86427İstismar yok | LibreNMS before 26.8.0 Argument Injection via graph_titlelibrenms · librenms · CWE-77 | Yüksek8,7 | — | %0,6 | 7 Eyl 2026 |
30İzleyin | CVE-2026-14444İstismar yok | WP Fusion (Pro) <= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parametervery good plugins · wp fusion (pro) · CWE-269 | Yüksek7,5 | — | %0,3 | 7 Eyl 2026 |
30İzleyin | CVE-2026-79734İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificdell · secure connect gateway · CWE-295 | Yüksek7,5 | — | %0,2 | 7 Eyl 2026 |
39İzleyin | CVE-2026-80129İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitatidell · secure connect gateway · CWE-22 | Kritik9,8 | — | %0,6 | 7 Eyl 2026 |
35İzleyin | CVE-2026-80130İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Travdell · secure connect gateway · CWE-23 | Yüksek8,8 | — | %0,6 | 7 Eyl 2026 |
39İzleyin | CVE-2026-80131İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitatidell · secure connect gateway · CWE-22 | Kritik9,8 | — | %0,7 | 7 Eyl 2026 |
36İzleyin | CVE-2026-80164İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificdell · secure connect gateway · CWE-295 | Kritik9,1 | — | %0,2 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86452İstismar yok | MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Floodingmisp-project · misp · CWE-400 | Yüksek8,7 | — | %0,5 | 7 Eyl 2026 |
31İzleyin | CVE-2026-6377Kavram kanıtı | Path Traversal in Next4Biz's CSM (Customer Service Management)next4biz information technologies inc. · csm (customer service management) · CWE-22 | Yüksek7,5 | — | %1,7 | 7 Eyl 2026 |
30İzleyin | CVE-2026-78480İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authenticadell · secure connect gateway · CWE-306 | Yüksek7,5 | — | %0,5 | 7 Eyl 2026 |
29İzleyin | CVE-2026-79644İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificdell · secure connect gateway · CWE-295 | Yüksek7,4 | — | %0,2 | 7 Eyl 2026 |
32İzleyin | CVE-2026-79645İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authenticadell · secure connect gateway · CWE-306 | Yüksek8,2 | — | %0,4 | 7 Eyl 2026 |
39İzleyin | CVE-2026-7861İstismar yok | Code Injection in Next4Biz's CSM (Customer Service Management)next4biz information technologies inc. · csm (customer service management) · CWE-502 | Kritik9,8 | — | %0,5 | 7 Eyl 2026 |
35İzleyin | CVE-2026-86404İstismar yok | Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit dred hat · red hat jboss enterprise application platform 7.4.25 · CWE-502 | Yüksek8,8 | — | %0,7 | 7 Eyl 2026 |
29İzleyin | CVE-2026-79643İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Incorrect dell · secure connect gateway · CWE-480 | Yüksek7,3 | — | %0,3 | 7 Eyl 2026 |
29İzleyin | CVE-2026-79691İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificdell · secure connect gateway · CWE-295 | Yüksek7,3 | — | %0,1 | 7 Eyl 2026 |
28İzleyin | CVE-2026-80127İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralidell · secure connect gateway · CWE-78 | Yüksek7,2 | — | %1,3 | 7 Eyl 2026 |
28İzleyin | CVE-2022-51010İstismar yok | PocketMine-MP before 4.4.2 Server Crash via Item IDpmmp · pocketmine-mp · CWE-20 | Yüksek7,1 | — | %0,5 | 7 Eyl 2026 |
28İzleyin | CVE-2022-51012İstismar yok | PocketMine-MP before 4.2.9 Denial of Service via NBT Deserializationpmmp · pocketmine-mp · CWE-20 | Yüksek7,1 | — | %0,5 | 7 Eyl 2026 |
28İzleyin | CVE-2022-51013İstismar yok | PocketMine-MP before 4.2.3 Denial of Service via NBT Metadatapmmp · pocketmine-mp · CWE-20 | Yüksek7,1 | — | %0,5 | 7 Eyl 2026 |
28İzleyin | CVE-2022-51014İstismar yok | PocketMine-MP before 4.0.7 Denial of Service via JSON Decodingpmmp · pocketmine-mp · CWE-248 | Yüksek7,1 | — | %0,5 | 7 Eyl 2026 |
28İzleyin | CVE-2022-51015İstismar yok | PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacketpmmp · pocketmine-mp · CWE-20 | Yüksek7,1 | — | %0,7 | 7 Eyl 2026 |
34İzleyin | CVE-2022-51017İstismar yok | PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Datapmmp · pocketmine-mp · CWE-20 | Yüksek8,7 | — | %0,6 | 7 Eyl 2026 |
28İzleyin | CVE-2022-51018İstismar yok | PocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pagespmmp · pocketmine-mp · CWE-400 | Yüksek7,1 | — | %0,4 | 7 Eyl 2026 |
30İzleyin | CVE-2026-79639İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificdell · secure connect gateway · CWE-295 | Yüksek7,6 | — | %0,1 | 7 Eyl 2026 |
31İzleyin | CVE-2026-80166İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilegdell · secure connect gateway · CWE-269 | Yüksek7,8 | — | %0,1 | 7 Eyl 2026 |
39İzleyin | CVE-2026-86478Kavram kanıtı | In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeojetbrains · youtrack · CWE-290 | Kritik9,8 | — | %0,6 | 7 Eyl 2026 |
32İzleyin | CVE-2026-86479İstismar yok | In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resourcjetbrains · youtrack · CWE-862 | Yüksek8,1 | — | %0,3 | 7 Eyl 2026 |
39İzleyin | CVE-2026-86480İstismar yok | In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privilegesjetbrains · hub · CWE-306 | Kritik9,8 | — | %0,5 | 7 Eyl 2026 |
35İzleyin | CVE-2026-86482İstismar yok | In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalationjetbrains · youtrack · CWE-266 | Yüksek8,8 | — | %0,4 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86492İstismar yok | In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokensjetbrains · youtrack · CWE-488 | Yüksek8,5 | — | %0,8 | 7 Eyl 2026 |
30İzleyin | CVE-2026-86494İstismar yok | In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issuesjetbrains · youtrack · CWE-862 | Yüksek7,7 | — | %0,2 | 7 Eyl 2026 |
30İzleyin | CVE-2026-86498İstismar yok | In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without upjetbrains · youtrack · CWE-863 | Yüksek7,7 | — | %0,2 | 7 Eyl 2026 |
33İzleyin | CVE-2026-86502İstismar yok | In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Dejetbrains · intellij idea · CWE-306 | Yüksek8,4 | — | %0,2 | 7 Eyl 2026 |
31İzleyin | CVE-2026-86504İstismar yok | In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code executjetbrains · intellij idea · CWE-829 | Yüksek7,8 | — | %0,1 | 7 Eyl 2026 |
37İzleyin | CVE-2026-6223İstismar yok | OTP Bypass in Bahçelievler Muncipality's BiHayat Appbahçelievler muncipality · bihayat app · CWE-307 | Kritik9,4 | — | %0,5 | 7 Eyl 2026 |
39İzleyin | CVE-2026-76578Kavram kanıtı | Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token acired hat · red hat enterprise linux 10 · CWE-306 | Kritik9,8 | — | %1,3 | 7 Eyl 2026 |
32İzleyin | CVE-2026-79678İstismar yok | Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of servicered hat · red hat enterprise linux 10 · CWE-95 | Yüksek8,1 | — | %0,8 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86428İstismar yok | commonmark 1.5.0 before 2.10.0 Denial of Service via Attributesthephpleague · commonmark · CWE-407 | Yüksek8,7 | — | %0,4 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86429İstismar yok | commonmark before 2.9.1 Denial of Service via SmartPunct and Attributesthephpleague · commonmark · CWE-407 | Yüksek8,7 | — | %0,5 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86430İstismar yok | league/commonmark before 2.9.1 Denial of Service via parsingthephpleague · commonmark · CWE-407 | Yüksek8,7 | — | %0,4 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86433İstismar yok | commonmark 1.5.0 before 2.8.4 Denial of Service via Attributesthephpleague · commonmark · CWE-407 | Yüksek8,7 | — | %0,5 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86434İstismar yok | commonmark 2.0.0 through 2.8.3 Denial of Service via Slug Collisionthephpleague · commonmark · CWE-407 | Yüksek8,7 | — | %0,5 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86435İstismar yok | commonmark 1.5.0 before 2.8.4 Denial of Service via Footnotethephpleague · commonmark · CWE-407 | Yüksek8,7 | — | %0,4 | 7 Eyl 2026 |
30İzleyin | CVE-2026-76560İstismar yok | 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dnred hat · red hat directory server 11.7 e4s for rhel 8 · CWE-863 | Yüksek7,5 | — | %0,5 | 7 Eyl 2026 |
30İzleyin | CVE-2026-16028İstismar yok | Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream tableCWE-401 | Yüksek7,5 | — | %0,3 | 7 Eyl 2026 |
30İzleyin | CVE-2026-86287İstismar yok | Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengthsCWE-1287 | Yüksek7,5 | — | %0,6 | 7 Eyl 2026 |
30İzleyin | CVE-2026-18355İstismar yok | 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()red hat · red hat directory server 11.7 e4s for rhel 8 · CWE-191 | Yüksek7,5 | — | %0,8 | 7 Eyl 2026 |
30İzleyin | CVE-2026-18453İstismar yok | 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_searchred hat · red hat directory server 11.7 e4s for rhel 8 · CWE-476 | Yüksek7,5 | — | %0,8 | 7 Eyl 2026 |
39İzleyin | CVE-2026-18922İstismar yok | 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary propertyred hat · red hat directory server 11.7 e4s for rhel 8 · CWE-287 | Kritik9,8 | — | %0,5 | 7 Eyl 2026 |
33İzleyin | CVE-2026-19843Kavram kanıtı | 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editorred hat · red hat directory server 11.7 e4s for rhel 8 · CWE-78 | Yüksek8,4 | — | %0,4 | 7 Eyl 2026 |
80Hemen | CVE-2026-75650Silahlaştırılmış | Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)adobe · commerce · CWE-1336 | Kritik10,0 | KEV | %34,7 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86437İstismar yok | Lara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive Uploadlaradashboard · laradashboard · CWE-863 | Yüksek8,6 | — | %0,7 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86438İstismar yok | Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Actionlaradashboard · laradashboard · CWE-862 | Yüksek8,6 | — | %1,1 | 7 Eyl 2026 |
32İzleyin | CVE-2026-82586İstismar yok | AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributesash-project · ash_lua · CWE-424 | Yüksek8,2 | — | %0,5 | 7 Eyl 2026 |
32İzleyin | CVE-2026-82753İstismar yok | Unauthenticated authorize requests create unbounded, never-expiring CIMD client rows and cache entries in ash_authentication_oauth2_serverash-project · ash_authentication_oauth2_server · CWE-770 | Yüksek8,2 | — | %0,6 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86439İstismar yok | knowns before 0.30.0 Path Traversal via MCP doc and memory toolsknowns-dev · knowns · CWE-22 | Yüksek8,7 | — | %1,0 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86538İstismar yok | knowns before 0.30.0 Path Traversal via templateFile parameterknowns-dev · knowns · CWE-22 | Yüksek8,7 | — | %0,9 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86540İstismar yok | knowns before 0.30.0 Arbitrary Code Execution via LSP Binaryknowns-dev · knowns · CWE-78 | Yüksek8,5 | — | %0,2 | 7 Eyl 2026 |
28İzleyin | CVE-2026-86541İstismar yok | knowns before 0.30.0 Path Traversal via code.replace MCP actionknowns-dev · knowns · CWE-22 | Yüksek7,2 | — | %0,7 | 7 Eyl 2026 |
35İzleyin | CVE-2026-86542İstismar yok | knowns before 0.30.0 Path Traversal via Import Nameknowns-dev · knowns · CWE-22 | Yüksek8,8 | — | %0,7 | 7 Eyl 2026 |
37İzleyin | CVE-2026-86543İstismar yok | knowns before 0.30.0 Unauthenticated Management API Exposureknowns-dev · knowns · CWE-306 | Kritik9,3 | — | %0,8 | 7 Eyl 2026 |
28İzleyin | CVE-2026-86544İstismar yok | knowns before 0.30.0 Authorization Bypass via Misclassified Code Actionsknowns-dev · knowns · CWE-863 | Yüksek7,2 | — | %0,5 | 7 Eyl 2026 |
40Planlayın | CVE-2026-44756İstismar yok | Memory Corruption vulnerability in SAP Extended Passport (EPP) Processingsap_se · sap extended passport (epp) processing · CWE-120 | Kritik10,0 | — | %1,3 | 7 Eyl 2026 |
39İzleyin | CVE-2026-58240İstismar yok | Missing Authentication check in SAP NetWeaver (Message Server)sap_se · sap netweaver (message server) · CWE-308 | Kritik9,8 | — | %0,5 | 7 Eyl 2026 |
30İzleyin | CVE-2026-66767İstismar yok | Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platformsap_se · sap netweaver application server for abap and abap platform · CWE-191 | Yüksek7,7 | — | %0,4 | 7 Eyl 2026 |
36İzleyin | CVE-2026-66768İstismar yok | Improper Access Control in SAP NetWeaver (SAP GUI for Java)sap_se · sap netweaver (sap gui for java) · CWE-807 | Kritik9,0 | — | %0,6 | 7 Eyl 2026 |
34İzleyin | CVE-2026-76958İstismar yok | XML External Entity (XXE) Vulnerability in SAP Integration Suitesap_se · sap integration suite · CWE-611 | Yüksek8,5 | — | %0,3 | 7 Eyl 2026 |
31İzleyin | CVE-2026-76967İstismar yok | Insecure Deserialization in SAP NetWeaver Business Clientsap_se · sap netweaver business client · CWE-502 | Yüksek7,8 | — | %0,3 | 7 Eyl 2026 |
37İzleyin | CVE-2026-76969İstismar yok | Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)sap_se · sap cloud application programming model (cap) · CWE-522 | Kritik9,4 | — | %0,4 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86509İstismar yok | D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflowd-link · dir-895l · CWE-119 | Yüksek8,6 | — | %0,7 | 7 Eyl 2026 |
34İzleyin | CVE-2026-86510İstismar yok | D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds writed-link · dir-822a · CWE-119 | Yüksek8,6 | — | %0,8 | 7 Eyl 2026 |
30İzleyin | CVE-2026-19397İstismar yok | Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the hosasus · control center express agent · CWE-306 | Yüksek7,7 | — | %0,3 | 8 Eyl 2026 |
30İzleyin | CVE-2026-48888İstismar yok | WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerabilityautomattic · woocommerce · CWE-770 | Yüksek7,5 | — | %0,4 | 8 Eyl 2026 |
39İzleyin | CVE-2026-71374İstismar yok | Deserialization of Untrusted Data Vulnerability in Cosminexus Component Containerhitachi · cosminexus component container · CWE-502 | Kritik9,8 | — | %0,5 | 8 Eyl 2026 |
29İzleyin | CVE-2026-71375İstismar yok | XXE Vulnerability in Cosminexus Component Containerhitachi · cosminexus component container · CWE-611 | Yüksek7,4 | — | %0,4 | 8 Eyl 2026 |
28İzleyin | CVE-2026-81781İstismar yok | WordPress Unbounce Landing Pages plugin <= 1.1.4 - Broken Access Control vulnerabilityunbounce · unbounce landing pages · CWE-862 | Yüksek7,1 | — | %0,3 | 8 Eyl 2026 |
30İzleyin | CVE-2026-81790İstismar yok | WordPress Csomagpontok és szállítási címkék WooCommerce-hez plugin < 4.2.8 - Broken Access Control vulnerabilityviszt péter · csomagpontok és szállítási címkék woocommerce-hez · CWE-862 | Yüksek7,5 | — | %0,3 | 8 Eyl 2026 |
28İzleyin | CVE-2026-81798İstismar yok | WordPress Easy Appointments plugin <= 4.0.2.1 - Cross Site Scripting (XSS) vulnerabilityeasy appointments · easy appointments · CWE-79 | Yüksek7,1 | — | %0,2 | 8 Eyl 2026 |
28İzleyin | CVE-2026-81806İstismar yok | WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerabilityjohn darrel · hide my wp ghost · CWE-918 | Yüksek7,2 | — | %0,2 | 8 Eyl 2026 |
28İzleyin | CVE-2026-84817İstismar yok | WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerabilitycrocoblock · jetformbuilder · CWE-79 | Yüksek7,1 | — | %0,2 | 8 Eyl 2026 |
28İzleyin | CVE-2026-84818İstismar yok | WordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerability100plugins · open user map · CWE-79 | Yüksek7,1 | — | %0,2 | 8 Eyl 2026 |
28İzleyin | CVE-2026-84820İstismar yok | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerabilityunlimited elements · unlimited elements for elementor (free widgets, addons, templates) · CWE-79 | Yüksek7,1 | — | %0,2 | 8 Eyl 2026 |
34İzleyin | CVE-2026-34223İstismar yok | A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CCsiemens · desigo cc clickonce client v6 · CWE-94 | Yüksek8,6 | — | %0,1 | 8 Eyl 2026 |
35İzleyin | CVE-2026-50093İstismar yok | A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versionsiemens · siveillance control pro v3.0 · CWE-434 | Yüksek8,9 | — | %0,3 | 8 Eyl 2026 |
34İzleyin | CVE-2026-58113İstismar yok | A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcentesiemens · teamcenter v2412 · CWE-79 | Yüksek8,5 | — | %0,3 | 8 Eyl 2026 |
37İzleyin | CVE-2026-62645İstismar yok | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-306 | Kritik9,3 | — | %0,6 | 8 Eyl 2026 |
36İzleyin | CVE-2026-62646İstismar yok | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-331 | Kritik9,1 | — | %0,5 | 8 Eyl 2026 |
37İzleyin | CVE-2026-62647İstismar yok | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-20 | Kritik9,3 | — | %0,5 | 8 Eyl 2026 |
34İzleyin | CVE-2026-62648İstismar yok | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-787 | Yüksek8,7 | — | %0,5 | 8 Eyl 2026 |
34İzleyin | CVE-2026-62649İstismar yok | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-770 | Yüksek8,7 | — | %0,5 | 8 Eyl 2026 |
34İzleyin | CVE-2026-62650İstismar yok | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-288 | Yüksek8,7 | — | %0,5 | 8 Eyl 2026 |
28İzleyin | CVE-2026-62653İstismar yok | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).siemens · reyrolle 7sr5 · CWE-787 | Yüksek7,0 | — | %0,2 | 8 Eyl 2026 |
- CVE-2026-8013332İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Trav
YüksekCVSS 8,1İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-8013430İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded
YüksekCVSS 7,7İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-8017831İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privileg
YüksekCVSS 7,8İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-8023837İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Un
KritikCVSS 9,3İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-8640828İzleyin
MISP Missing Authorization in Cryptographic Key View Exposes Signing Keys from Protected Events
YüksekCVSS 7,1İstismar yokEPSS %0misp-project · misp7 Eyl 2026
- CVE-2026-8641928İzleyin
MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery
YüksekCVSS 7,0İstismar yokEPSS %0misp-project · misp7 Eyl 2026
- CVE-2026-8642637İzleyin
LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
KritikCVSS 9,2Kavram kanıtıEPSS %4librenms · librenms7 Eyl 2026
- CVE-2026-8642734İzleyin
LibreNMS before 26.8.0 Argument Injection via graph_title
YüksekCVSS 8,7İstismar yokEPSS %0librenms · librenms7 Eyl 2026
- CVE-2026-1444430İzleyin
WP Fusion (Pro) <= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter
YüksekCVSS 7,5İstismar yokEPSS %0very good plugins · wp fusion (pro)7 Eyl 2026
- CVE-2026-7973430İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific
YüksekCVSS 7,5İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-8012939İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitati
KritikCVSS 9,8İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-8013035İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Trav
YüksekCVSS 8,8İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-8013139İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitati
KritikCVSS 9,8İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-8016436İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific
KritikCVSS 9,1İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-8645234İzleyin
MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding
YüksekCVSS 8,7İstismar yokEPSS %0misp-project · misp7 Eyl 2026
- CVE-2026-637731İzleyin
Path Traversal in Next4Biz's CSM (Customer Service Management)
YüksekCVSS 7,5Kavram kanıtıEPSS %1next4biz information technologies inc. · csm (customer service management)7 Eyl 2026
- CVE-2026-7848030İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentica
YüksekCVSS 7,5İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-7964429İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific
YüksekCVSS 7,4İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-7964532İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentica
YüksekCVSS 8,2İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-786139İzleyin
Code Injection in Next4Biz's CSM (Customer Service Management)
KritikCVSS 9,8İstismar yokEPSS %0next4biz information technologies inc. · csm (customer service management)7 Eyl 2026
- CVE-2026-8640435İzleyin
Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit d
YüksekCVSS 8,8İstismar yokEPSS %0red hat · red hat jboss enterprise application platform 7.4.257 Eyl 2026
- CVE-2026-7964329İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Incorrect
YüksekCVSS 7,3İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-7969129İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific
YüksekCVSS 7,3İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-8012728İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali
YüksekCVSS 7,2İstismar yokEPSS %1dell · secure connect gateway7 Eyl 2026
- CVE-2022-5101028İzleyin
PocketMine-MP before 4.4.2 Server Crash via Item ID
YüksekCVSS 7,1İstismar yokEPSS %0pmmp · pocketmine-mp7 Eyl 2026
- CVE-2022-5101228İzleyin
PocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization
YüksekCVSS 7,1İstismar yokEPSS %0pmmp · pocketmine-mp7 Eyl 2026
- CVE-2022-5101328İzleyin
PocketMine-MP before 4.2.3 Denial of Service via NBT Metadata
YüksekCVSS 7,1İstismar yokEPSS %0pmmp · pocketmine-mp7 Eyl 2026
- CVE-2022-5101428İzleyin
PocketMine-MP before 4.0.7 Denial of Service via JSON Decoding
YüksekCVSS 7,1İstismar yokEPSS %0pmmp · pocketmine-mp7 Eyl 2026
- CVE-2022-5101528İzleyin
PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacket
YüksekCVSS 7,1İstismar yokEPSS %0pmmp · pocketmine-mp7 Eyl 2026
- CVE-2022-5101734İzleyin
PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Data
YüksekCVSS 8,7İstismar yokEPSS %0pmmp · pocketmine-mp7 Eyl 2026
- CVE-2022-5101828İzleyin
PocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pages
YüksekCVSS 7,1İstismar yokEPSS %0pmmp · pocketmine-mp7 Eyl 2026
- CVE-2026-7963930İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific
YüksekCVSS 7,6İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-8016631İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privileg
YüksekCVSS 7,8İstismar yokEPSS %0dell · secure connect gateway7 Eyl 2026
- CVE-2026-8647839İzleyin
In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeo
KritikCVSS 9,8Kavram kanıtıEPSS %0jetbrains · youtrack7 Eyl 2026
- CVE-2026-8647932İzleyin
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resourc
YüksekCVSS 8,1İstismar yokEPSS %0jetbrains · youtrack7 Eyl 2026
- CVE-2026-8648039İzleyin
In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges
KritikCVSS 9,8İstismar yokEPSS %0jetbrains · hub7 Eyl 2026
- CVE-2026-8648235İzleyin
In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation
YüksekCVSS 8,8İstismar yokEPSS %0jetbrains · youtrack7 Eyl 2026
- CVE-2026-8649234İzleyin
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens
YüksekCVSS 8,5İstismar yokEPSS %0jetbrains · youtrack7 Eyl 2026
- CVE-2026-8649430İzleyin
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues
YüksekCVSS 7,7İstismar yokEPSS %0jetbrains · youtrack7 Eyl 2026
- CVE-2026-8649830İzleyin
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without up
YüksekCVSS 7,7İstismar yokEPSS %0jetbrains · youtrack7 Eyl 2026
- CVE-2026-8650233İzleyin
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote De
YüksekCVSS 8,4İstismar yokEPSS %0jetbrains · intellij idea7 Eyl 2026
- CVE-2026-8650431İzleyin
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execut
YüksekCVSS 7,8İstismar yokEPSS %0jetbrains · intellij idea7 Eyl 2026
- CVE-2026-622337İzleyin
OTP Bypass in Bahçelievler Muncipality's BiHayat App
KritikCVSS 9,4İstismar yokEPSS %0bahçelievler muncipality · bihayat app7 Eyl 2026
- CVE-2026-7657839İzleyin
Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci
KritikCVSS 9,8Kavram kanıtıEPSS %1red hat · red hat enterprise linux 107 Eyl 2026
- CVE-2026-7967832İzleyin
Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service
YüksekCVSS 8,1İstismar yokEPSS %0red hat · red hat enterprise linux 107 Eyl 2026
- CVE-2026-8642834İzleyin
commonmark 1.5.0 before 2.10.0 Denial of Service via Attributes
YüksekCVSS 8,7İstismar yokEPSS %0thephpleague · commonmark7 Eyl 2026
- CVE-2026-8642934İzleyin
commonmark before 2.9.1 Denial of Service via SmartPunct and Attributes
YüksekCVSS 8,7İstismar yokEPSS %0thephpleague · commonmark7 Eyl 2026
- CVE-2026-8643034İzleyin
league/commonmark before 2.9.1 Denial of Service via parsing
YüksekCVSS 8,7İstismar yokEPSS %0thephpleague · commonmark7 Eyl 2026
- CVE-2026-8643334İzleyin
commonmark 1.5.0 before 2.8.4 Denial of Service via Attributes
YüksekCVSS 8,7İstismar yokEPSS %0thephpleague · commonmark7 Eyl 2026
- CVE-2026-8643434İzleyin
commonmark 2.0.0 through 2.8.3 Denial of Service via Slug Collision
YüksekCVSS 8,7İstismar yokEPSS %0thephpleague · commonmark7 Eyl 2026
- CVE-2026-8643534İzleyin
commonmark 1.5.0 before 2.8.4 Denial of Service via Footnote
YüksekCVSS 8,7İstismar yokEPSS %0thephpleague · commonmark7 Eyl 2026
- CVE-2026-7656030İzleyin
389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat directory server 11.7 e4s for rhel 87 Eyl 2026
- CVE-2026-1602830İzleyin
Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table
YüksekCVSS 7,5İstismar yokEPSS %07 Eyl 2026
- CVE-2026-8628730İzleyin
Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths
YüksekCVSS 7,5İstismar yokEPSS %07 Eyl 2026
- CVE-2026-1835530İzleyin
389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat directory server 11.7 e4s for rhel 87 Eyl 2026
- CVE-2026-1845330İzleyin
389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat directory server 11.7 e4s for rhel 87 Eyl 2026
- CVE-2026-1892239İzleyin
389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property
KritikCVSS 9,8İstismar yokEPSS %0red hat · red hat directory server 11.7 e4s for rhel 87 Eyl 2026
- CVE-2026-1984333İzleyin
389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor
YüksekCVSS 8,4Kavram kanıtıEPSS %0red hat · red hat directory server 11.7 e4s for rhel 87 Eyl 2026
- CVE-2026-7565080Hemen
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %34adobe · commerce7 Eyl 2026
- CVE-2026-8643734İzleyin
Lara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive Upload
YüksekCVSS 8,6İstismar yokEPSS %0laradashboard · laradashboard7 Eyl 2026
- CVE-2026-8643834İzleyin
Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Action
YüksekCVSS 8,6İstismar yokEPSS %1laradashboard · laradashboard7 Eyl 2026
- CVE-2026-8258632İzleyin
AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes
YüksekCVSS 8,2İstismar yokEPSS %0ash-project · ash_lua7 Eyl 2026
- CVE-2026-8275332İzleyin
Unauthenticated authorize requests create unbounded, never-expiring CIMD client rows and cache entries in ash_authentication_oauth2_server
YüksekCVSS 8,2İstismar yokEPSS %0ash-project · ash_authentication_oauth2_server7 Eyl 2026
- CVE-2026-8643934İzleyin
knowns before 0.30.0 Path Traversal via MCP doc and memory tools
YüksekCVSS 8,7İstismar yokEPSS %1knowns-dev · knowns7 Eyl 2026
- CVE-2026-8653834İzleyin
knowns before 0.30.0 Path Traversal via templateFile parameter
YüksekCVSS 8,7İstismar yokEPSS %0knowns-dev · knowns7 Eyl 2026
- CVE-2026-8654034İzleyin
knowns before 0.30.0 Arbitrary Code Execution via LSP Binary
YüksekCVSS 8,5İstismar yokEPSS %0knowns-dev · knowns7 Eyl 2026
- CVE-2026-8654128İzleyin
knowns before 0.30.0 Path Traversal via code.replace MCP action
YüksekCVSS 7,2İstismar yokEPSS %0knowns-dev · knowns7 Eyl 2026
- CVE-2026-8654235İzleyin
knowns before 0.30.0 Path Traversal via Import Name
YüksekCVSS 8,8İstismar yokEPSS %0knowns-dev · knowns7 Eyl 2026
- CVE-2026-8654337İzleyin
knowns before 0.30.0 Unauthenticated Management API Exposure
KritikCVSS 9,3İstismar yokEPSS %0knowns-dev · knowns7 Eyl 2026
- CVE-2026-8654428İzleyin
knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions
YüksekCVSS 7,2İstismar yokEPSS %0knowns-dev · knowns7 Eyl 2026
- CVE-2026-4475640Planlayın
Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing
KritikCVSS 10,0İstismar yokEPSS %1sap_se · sap extended passport (epp) processing7 Eyl 2026
- CVE-2026-5824039İzleyin
Missing Authentication check in SAP NetWeaver (Message Server)
KritikCVSS 9,8İstismar yokEPSS %0sap_se · sap netweaver (message server)7 Eyl 2026
- CVE-2026-6676730İzleyin
Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
YüksekCVSS 7,7İstismar yokEPSS %0sap_se · sap netweaver application server for abap and abap platform7 Eyl 2026
- CVE-2026-6676836İzleyin
Improper Access Control in SAP NetWeaver (SAP GUI for Java)
KritikCVSS 9,0İstismar yokEPSS %0sap_se · sap netweaver (sap gui for java)7 Eyl 2026
- CVE-2026-7695834İzleyin
XML External Entity (XXE) Vulnerability in SAP Integration Suite
YüksekCVSS 8,5İstismar yokEPSS %0sap_se · sap integration suite7 Eyl 2026
- CVE-2026-7696731İzleyin
Insecure Deserialization in SAP NetWeaver Business Client
YüksekCVSS 7,8İstismar yokEPSS %0sap_se · sap netweaver business client7 Eyl 2026
- CVE-2026-7696937İzleyin
Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
KritikCVSS 9,4İstismar yokEPSS %0sap_se · sap cloud application programming model (cap)7 Eyl 2026
- CVE-2026-8650934İzleyin
D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow
YüksekCVSS 8,6İstismar yokEPSS %0d-link · dir-895l7 Eyl 2026
- CVE-2026-8651034İzleyin
D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds write
YüksekCVSS 8,6İstismar yokEPSS %0d-link · dir-822a7 Eyl 2026
- CVE-2026-1939730İzleyin
Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the hos
YüksekCVSS 7,7İstismar yokEPSS %0asus · control center express agent8 Eyl 2026
- CVE-2026-4888830İzleyin
WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0automattic · woocommerce8 Eyl 2026
- CVE-2026-7137439İzleyin
Deserialization of Untrusted Data Vulnerability in Cosminexus Component Container
KritikCVSS 9,8İstismar yokEPSS %0hitachi · cosminexus component container8 Eyl 2026
- CVE-2026-7137529İzleyin
XXE Vulnerability in Cosminexus Component Container
YüksekCVSS 7,4İstismar yokEPSS %0hitachi · cosminexus component container8 Eyl 2026
- CVE-2026-8178128İzleyin
WordPress Unbounce Landing Pages plugin <= 1.1.4 - Broken Access Control vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0unbounce · unbounce landing pages8 Eyl 2026
- CVE-2026-8179030İzleyin
WordPress Csomagpontok és szállítási címkék WooCommerce-hez plugin < 4.2.8 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0viszt péter · csomagpontok és szállítási címkék woocommerce-hez8 Eyl 2026
- CVE-2026-8179828İzleyin
WordPress Easy Appointments plugin <= 4.0.2.1 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0easy appointments · easy appointments8 Eyl 2026
- CVE-2026-8180628İzleyin
WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0john darrel · hide my wp ghost8 Eyl 2026
- CVE-2026-8481728İzleyin
WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0crocoblock · jetformbuilder8 Eyl 2026
- CVE-2026-8481828İzleyin
WordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0100plugins · open user map8 Eyl 2026
- CVE-2026-8482028İzleyin
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0unlimited elements · unlimited elements for elementor (free widgets, addons, templates)8 Eyl 2026
- CVE-2026-3422334İzleyin
A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC
YüksekCVSS 8,6İstismar yokEPSS %0siemens · desigo cc clickonce client v68 Eyl 2026
- CVE-2026-5009335İzleyin
A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All version
YüksekCVSS 8,9İstismar yokEPSS %0siemens · siveillance control pro v3.08 Eyl 2026
- CVE-2026-5811334İzleyin
A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcente
YüksekCVSS 8,5İstismar yokEPSS %0siemens · teamcenter v24128 Eyl 2026
- CVE-2026-6264537İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
KritikCVSS 9,3İstismar yokEPSS %0siemens · reyrolle 7sr58 Eyl 2026
- CVE-2026-6264636İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
KritikCVSS 9,1İstismar yokEPSS %0siemens · reyrolle 7sr58 Eyl 2026
- CVE-2026-6264737İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
KritikCVSS 9,3İstismar yokEPSS %0siemens · reyrolle 7sr58 Eyl 2026
- CVE-2026-6264834İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
YüksekCVSS 8,7İstismar yokEPSS %0siemens · reyrolle 7sr58 Eyl 2026
- CVE-2026-6264934İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
YüksekCVSS 8,7İstismar yokEPSS %0siemens · reyrolle 7sr58 Eyl 2026
- CVE-2026-6265034İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
YüksekCVSS 8,7İstismar yokEPSS %0siemens · reyrolle 7sr58 Eyl 2026
- CVE-2026-6265328İzleyin
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
YüksekCVSS 7,0İstismar yokEPSS %0siemens · reyrolle 7sr58 Eyl 2026