Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.953 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 2 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-83614İstismar yok | xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text mergexmldom · xmldom · CWE-400 | Yüksek8,7 | — | %0,5 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83615İstismar yok | xmldom: Quadratic-memory consumptionxmldom · xmldom · CWE-770 | Yüksek8,7 | — | %0,5 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83616İstismar yok | xmldom: Processing Instruction Target Injection Bypasses requireWellFormedxmldom · xmldom · CWE-91 | Yüksek8,7 | — | %0,6 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83617İstismar yok | xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminatorxmldom · xmldom · CWE-91 | Yüksek8,7 | — | %0,5 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83618İstismar yok | xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminatorxmldom · xmldom · CWE-91 | Yüksek8,7 | — | %0,5 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83619İstismar yok | xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parserxmldom · xmldom · CWE-400 | Yüksek8,7 | — | %0,5 | 1 Eyl 2026 |
35İzleyin | CVE-2026-10195İstismar yok | FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Settingfs-code · fs poster - wordpress social media auto poster & scheduler [facebook, instagram, twitter, pinterest] · CWE-77 | Yüksek8,8 | — | %0,5 | 1 Eyl 2026 |
36İzleyin | CVE-2026-18931İstismar yok | Hardcoded Credentials in TMT Machine's Talassoft Industrial Management Softwaretmt machine industry and trade ltd. co. · talassoft industrial management software · CWE-798 | Kritik9,1 | — | %0,2 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51767İstismar yok | Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset paiCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
30İzleyin | CVE-2026-51768İstismar yok | Incorrect access control in the setElinkQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify pCWE-284 | Yüksek7,5 | — | %0,4 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51769İstismar yok | Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to resCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51770İstismar yok | Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forwCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61750İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61751İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61752İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61753İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-22 | Yüksek7,8 | — | %0,5 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61754İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61755İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61756İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61757İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61758İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61759İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61760İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61761İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61762İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61763İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61764İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61765İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61766İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61767İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61768İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61769İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61770İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61771İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61772İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61773İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
37İzleyin | CVE-2023-54356İstismar yok | Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suiteskyverno · kyverno · CWE-326 | Kritik9,3 | — | %0,1 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61774İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61775İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61776İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61777İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61778İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
31İzleyin | CVE-2026-61779İstismar yok | NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 | Yüksek7,8 | — | %0,4 | 1 Eyl 2026 |
34İzleyin | CVE-2026-84202İstismar yok | ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loadingmodelscope · modelscope · CWE-502 | Yüksek8,7 | — | %0,6 | 1 Eyl 2026 |
34İzleyin | CVE-2026-84203İstismar yok | Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Changeusememos · memos · CWE-613 | Yüksek8,6 | — | %0,4 | 1 Eyl 2026 |
28İzleyin | CVE-2026-84204İstismar yok | GROWI through 8.0.2 Missing Authorization on apiv3 Attachment Retrievalgrowilabs · growi · CWE-862 | Yüksek7,1 | — | %0,4 | 1 Eyl 2026 |
28İzleyin | CVE-2026-84205İstismar yok | GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrievalgrowilabs · growi · CWE-639 | Yüksek7,1 | — | %0,4 | 1 Eyl 2026 |
35İzleyin | CVE-2026-76111İstismar yok | Dell PowerStore contains an Incorrect Authorization vulnerability.dell · powerstoreos · CWE-863 | Yüksek8,8 | — | %0,4 | 1 Eyl 2026 |
36İzleyin | CVE-2026-84189İstismar yok | LibreNMS before 26.7.0 Stored XSS via Oxidized APIlibrenms · librenms · CWE-79 | Kritik9,2 | — | %0,3 | 1 Eyl 2026 |
34İzleyin | CVE-2026-84190İstismar yok | LibreNMS before 26.5.0 Remote Code Execution via AboutControllerlibrenms · librenms · CWE-77 | Yüksek8,7 | — | %0,8 | 1 Eyl 2026 |
28İzleyin | CVE-2026-84192İstismar yok | LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Datalibrenms · librenms · CWE-79 | Yüksek7,1 | — | %0,3 | 1 Eyl 2026 |
30İzleyin | CVE-2026-51788Kavram kanıtı | An issue in cleverange_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account_verification function and the accCWE-400 | Yüksek7,5 | — | %0,7 | 1 Eyl 2026 |
39İzleyin | CVE-2026-51934İstismar yok | Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd.CWE-120 | Kritik9,8 | — | %1,1 | 1 Eyl 2026 |
32İzleyin | CVE-2026-51956İstismar yok | A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0.CWE-284 | Yüksek8,1 | — | %0,4 | 1 Eyl 2026 |
35İzleyin | CVE-2026-58566İstismar yok | Dell PowerStore, an Incorrect Authorization vulnerability.dell · powerstore 500t · CWE-863 | Yüksek8,8 | — | %0,4 | 1 Eyl 2026 |
35İzleyin | CVE-2026-58575İstismar yok | Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability.dell · powerstoreos · CWE-290 | Yüksek8,8 | — | %0,5 | 1 Eyl 2026 |
35İzleyin | CVE-2026-79683İstismar yok | Dell PowerStore contains a Protection Mechanism Failure vulnerability.dell · powerstoreos · CWE-693 | Yüksek8,8 | — | %0,4 | 1 Eyl 2026 |
34İzleyin | CVE-2025-12768İstismar yok | FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerabilityrockwell automation · factorytalk® historian machine edition · CWE-787 | Yüksek8,6 | — | %0,3 | 1 Eyl 2026 |
35İzleyin | CVE-2026-58571İstismar yok | Dell PowerStore contains an OS Command Injection vulnerability.dell · powerstoreos · CWE-78 | Yüksek8,8 | — | %0,7 | 1 Eyl 2026 |
35İzleyin | CVE-2026-58572İstismar yok | Dell PowerStore contains a Code Injection vulnerability.dell · powerstoreos · CWE-94 | Yüksek8,8 | — | %0,2 | 1 Eyl 2026 |
34İzleyin | CVE-2024-7952İstismar yok | DataEdgePlatform DataMosaix™ Private Cloudrockwell automation · dataedgeplatform datamosaix™ private cloud · CWE-798 | Yüksek8,7 | — | %0,4 | 1 Eyl 2026 |
34İzleyin | CVE-2024-7953İstismar yok | DataEdgePlatform DataMosaix™ Private Cloudrockwell automation · dataedgeplatform datamosaix™ private cloud · CWE-284 | Yüksek8,7 | — | %0,2 | 1 Eyl 2026 |
29İzleyin | CVE-2026-19590İstismar yok | OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repositoopenai · codex desktop · CWE-427 | Yüksek7,3 | — | %0,1 | 1 Eyl 2026 |
35İzleyin | CVE-2026-19591İstismar yok | OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe becopenai · codex cli · CWE-150 | Yüksek8,8 | — | %0,3 | 1 Eyl 2026 |
29İzleyin | CVE-2026-19592İstismar yok | OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata withoopenai · codex cli · CWE-15 | Yüksek7,3 | — | %0,1 | 1 Eyl 2026 |
35İzleyin | CVE-2026-79684İstismar yok | Dell PowerStore contains a Protection Mechanism Failure vulnerability.dell · powerstoreos · CWE-693 | Yüksek8,8 | — | %0,4 | 1 Eyl 2026 |
35İzleyin | CVE-2026-51974İstismar yok | An eval() injection vulnerability in the get_list function in modules/meta_parser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remoCWE-94 | Yüksek8,8 | — | %0,7 | 1 Eyl 2026 |
30İzleyin | CVE-2026-52022İstismar yok | An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling compokamailio · kamailio · CWE-400 | Yüksek7,5 | — | %0,5 | 1 Eyl 2026 |
39İzleyin | CVE-2026-52111İstismar yok | An issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes autCWE-284 | Kritik9,8 | — | %0,6 | 1 Eyl 2026 |
30İzleyin | CVE-2026-52130İstismar yok | llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.ggml · llama.cpp · CWE-674 | Yüksek7,5 | — | %0,4 | 1 Eyl 2026 |
30İzleyin | CVE-2026-52131İstismar yok | llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.ggml · llama.cpp · CWE-617 | Yüksek7,5 | — | %0,4 | 1 Eyl 2026 |
30İzleyin | CVE-2026-52132İstismar yok | llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_allggml · llama.cpp · CWE-674 | Yüksek7,5 | — | %0,5 | 1 Eyl 2026 |
35İzleyin | CVE-2026-58569İstismar yok | Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability.dell · powerstoreos · CWE-829 | Yüksek8,8 | — | %0,1 | 1 Eyl 2026 |
34İzleyin | CVE-2026-83551İstismar yok | Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline pathaws · sagemaker-python-sdk · CWE-312 | Yüksek8,5 | — | %0,8 | 1 Eyl 2026 |
35İzleyin | CVE-2026-79686İstismar yok | Dell PowerStore contains a Protection Mechanism Failure vulnerability.dell · powerstoreos · CWE-693 | Yüksek8,8 | — | %0,4 | 1 Eyl 2026 |
34İzleyin | CVE-2026-84304İstismar yok | gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentationgrpc · grpc-go · CWE-400 | Yüksek8,7 | — | %0,6 | 1 Eyl 2026 |
27İzleyin | CVE-2026-8712Kavram kanıtı | Wyoming < 1.10.2 SSRF via uri Query Parameterohf-voice · wyoming · CWE-918 | Orta6,9 | — | %0,3 | 1 Eyl 2026 |
28İzleyin | CVE-2026-84233İstismar yok | Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenamesred hat · red hat enterprise linux 10 · CWE-78 | Yüksek7,0 | — | %0,1 | 1 Eyl 2026 |
30İzleyin | CVE-2026-49329İstismar yok | Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpointsred hat · red hat openshift container platform 4 · CWE-407 | Yüksek7,5 | — | %0,8 | 1 Eyl 2026 |
35İzleyin | CVE-2026-58567İstismar yok | Dell PowerStore contains an OS Command Injection vulnerability.dell · powerstoreos · CWE-78 | Yüksek8,8 | — | %0,7 | 1 Eyl 2026 |
38İzleyin | CVE-2026-19766İstismar yok | Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-287 | Kritik9,6 | — | %0,2 | 1 Eyl 2026 |
34İzleyin | CVE-2026-45221İstismar yok | Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Patheasybyte software · konga · CWE-427 | Yüksek8,5 | — | %0,1 | 1 Eyl 2026 |
33İzleyin | CVE-2026-63137İstismar yok | Incorrect Authorization in Kibana Leading to Privilege Escalationelastic · kibana · CWE-863 | Yüksek8,3 | — | %0,5 | 1 Eyl 2026 |
35İzleyin | CVE-2026-72649İstismar yok | Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Executionelastic · elasticsearch · CWE-502 | Yüksek8,8 | — | %0,9 | 1 Eyl 2026 |
36İzleyin | CVE-2026-73700İstismar yok | Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interfacearubanetworks · fabric composer · CWE-79 | Kritik9,0 | — | %0,4 | 1 Eyl 2026 |
36İzleyin | CVE-2026-73701İstismar yok | Unauthenticated Remote Code Execution in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-94 | Kritik9,0 | — | %0,6 | 1 Eyl 2026 |
35İzleyin | CVE-2026-73702İstismar yok | Authenticated Privilege Escalation Vulnerability in the API of HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-863 | Yüksek8,8 | — | %0,4 | 1 Eyl 2026 |
35İzleyin | CVE-2026-73703İstismar yok | Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interfacearubanetworks · fabric composer · CWE-79 | Yüksek8,8 | — | %0,3 | 1 Eyl 2026 |
35İzleyin | CVE-2026-73704İstismar yok | Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer APIarubanetworks · fabric composer · CWE-77 | Yüksek8,8 | — | %0,5 | 1 Eyl 2026 |
35İzleyin | CVE-2026-73705İstismar yok | Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-552 | Yüksek8,8 | — | %0,6 | 1 Eyl 2026 |
34İzleyin | CVE-2026-73706İstismar yok | Authentication Bypass in the API of HPE Networking Fabric Composer allows Data Exposure and Unauthorized Changesarubanetworks · fabric composer · CWE-306 | Yüksek8,6 | — | %0,4 | 1 Eyl 2026 |
34İzleyin | CVE-2026-73707İstismar yok | Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer APIarubanetworks · fabric composer · CWE-863 | Yüksek8,5 | — | %0,3 | 1 Eyl 2026 |
33İzleyin | CVE-2026-73708İstismar yok | Fault in Business Logic allows Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-863 | Yüksek8,3 | — | %0,4 | 1 Eyl 2026 |
33İzleyin | CVE-2026-73709İstismar yok | Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Processarubanetworks · fabric composer · CWE-78 | Yüksek8,3 | — | %0,3 | 1 Eyl 2026 |
32İzleyin | CVE-2026-73710İstismar yok | Unauthenticated Denial of Service Vulnerabilities in API Endpoint of HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-306 | Yüksek8,2 | — | %0,4 | 1 Eyl 2026 |
32İzleyin | CVE-2026-73711İstismar yok | Unauthenticated Privilege Escalation allows Administrative Access in HPE Networking Fabric Composer APIarubanetworks · fabric composer · CWE-269 | Yüksek8,1 | — | %0,4 | 1 Eyl 2026 |
32İzleyin | CVE-2026-73712İstismar yok | Unauthenticated Remote Code Execution in HPE Networking Fabric Composer APIarubanetworks · fabric composer · CWE-78 | Yüksek8,1 | — | %0,6 | 1 Eyl 2026 |
31İzleyin | CVE-2026-73713İstismar yok | Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-269 | Yüksek7,8 | — | %0,1 | 1 Eyl 2026 |
30İzleyin | CVE-2026-73714İstismar yok | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer APIarubanetworks · fabric composer · CWE-269 | Yüksek7,6 | — | %0,3 | 1 Eyl 2026 |
30İzleyin | CVE-2026-73715İstismar yok | Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-400 | Yüksek7,5 | — | %0,5 | 1 Eyl 2026 |
- CVE-2026-8361434İzleyin
xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026
- CVE-2026-8361534İzleyin
xmldom: Quadratic-memory consumption
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026
- CVE-2026-8361634İzleyin
xmldom: Processing Instruction Target Injection Bypasses requireWellFormed
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026
- CVE-2026-8361734İzleyin
xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminator
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026
- CVE-2026-8361834İzleyin
xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026
- CVE-2026-8361934İzleyin
xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser
YüksekCVSS 8,7İstismar yokEPSS %0xmldom · xmldom1 Eyl 2026
- CVE-2026-1019535İzleyin
FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Setting
YüksekCVSS 8,8İstismar yokEPSS %0fs-code · fs poster - wordpress social media auto poster & scheduler [facebook, instagram, twitter, pinterest]1 Eyl 2026
- CVE-2026-1893136İzleyin
Hardcoded Credentials in TMT Machine's Talassoft Industrial Management Software
KritikCVSS 9,1İstismar yokEPSS %0tmt machine industry and trade ltd. co. · talassoft industrial management software1 Eyl 2026
- CVE-2026-5176739İzleyin
Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset pai
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5176830İzleyin
Incorrect access control in the setElinkQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify p
YüksekCVSS 7,5İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5176939İzleyin
Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to res
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5177039İzleyin
Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forw
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-6175031İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6175131İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6175231İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6175331İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6175431İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6175531İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6175631İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6175731İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6175831İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6175931İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6176031İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6176131İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6176231İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6176331İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6176431İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6176531İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6176631İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6176731İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6176831İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6176931İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6177031İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6177131İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6177231İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6177331İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2023-5435637İzleyin
Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites
KritikCVSS 9,3İstismar yokEPSS %0kyverno · kyverno1 Eyl 2026
- CVE-2026-6177431İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6177531İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6177631İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6177731İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6177831İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-6177931İzleyin
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0nvidia · nemo megatron bridge1 Eyl 2026
- CVE-2026-8420234İzleyin
ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading
YüksekCVSS 8,7İstismar yokEPSS %0modelscope · modelscope1 Eyl 2026
- CVE-2026-8420334İzleyin
Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Change
YüksekCVSS 8,6İstismar yokEPSS %0usememos · memos1 Eyl 2026
- CVE-2026-8420428İzleyin
GROWI through 8.0.2 Missing Authorization on apiv3 Attachment Retrieval
YüksekCVSS 7,1İstismar yokEPSS %0growilabs · growi1 Eyl 2026
- CVE-2026-8420528İzleyin
GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrieval
YüksekCVSS 7,1İstismar yokEPSS %0growilabs · growi1 Eyl 2026
- CVE-2026-7611135İzleyin
Dell PowerStore contains an Incorrect Authorization vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · powerstoreos1 Eyl 2026
- CVE-2026-8418936İzleyin
LibreNMS before 26.7.0 Stored XSS via Oxidized API
KritikCVSS 9,2İstismar yokEPSS %0librenms · librenms1 Eyl 2026
- CVE-2026-8419034İzleyin
LibreNMS before 26.5.0 Remote Code Execution via AboutController
YüksekCVSS 8,7İstismar yokEPSS %0librenms · librenms1 Eyl 2026
- CVE-2026-8419228İzleyin
LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data
YüksekCVSS 7,1İstismar yokEPSS %0librenms · librenms1 Eyl 2026
- CVE-2026-5178830İzleyin
An issue in cleverange_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account_verification function and the acc
YüksekCVSS 7,5Kavram kanıtıEPSS %01 Eyl 2026
- CVE-2026-5193439İzleyin
Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd.
KritikCVSS 9,8İstismar yokEPSS %11 Eyl 2026
- CVE-2026-5195632İzleyin
A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0.
YüksekCVSS 8,1İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5856635İzleyin
Dell PowerStore, an Incorrect Authorization vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · powerstore 500t1 Eyl 2026
- CVE-2026-5857535İzleyin
Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · powerstoreos1 Eyl 2026
- CVE-2026-7968335İzleyin
Dell PowerStore contains a Protection Mechanism Failure vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · powerstoreos1 Eyl 2026
- CVE-2025-1276834İzleyin
FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0rockwell automation · factorytalk® historian machine edition1 Eyl 2026
- CVE-2026-5857135İzleyin
Dell PowerStore contains an OS Command Injection vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · powerstoreos1 Eyl 2026
- CVE-2026-5857235İzleyin
Dell PowerStore contains a Code Injection vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · powerstoreos1 Eyl 2026
- CVE-2024-795234İzleyin
DataEdgePlatform DataMosaix™ Private Cloud
YüksekCVSS 8,7İstismar yokEPSS %0rockwell automation · dataedgeplatform datamosaix™ private cloud1 Eyl 2026
- CVE-2024-795334İzleyin
DataEdgePlatform DataMosaix™ Private Cloud
YüksekCVSS 8,7İstismar yokEPSS %0rockwell automation · dataedgeplatform datamosaix™ private cloud1 Eyl 2026
- CVE-2026-1959029İzleyin
OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the reposito
YüksekCVSS 7,3İstismar yokEPSS %0openai · codex desktop1 Eyl 2026
- CVE-2026-1959135İzleyin
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe bec
YüksekCVSS 8,8İstismar yokEPSS %0openai · codex cli1 Eyl 2026
- CVE-2026-1959229İzleyin
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata witho
YüksekCVSS 7,3İstismar yokEPSS %0openai · codex cli1 Eyl 2026
- CVE-2026-7968435İzleyin
Dell PowerStore contains a Protection Mechanism Failure vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · powerstoreos1 Eyl 2026
- CVE-2026-5197435İzleyin
An eval() injection vulnerability in the get_list function in modules/meta_parser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remo
YüksekCVSS 8,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5202230İzleyin
An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling compo
YüksekCVSS 7,5İstismar yokEPSS %0kamailio · kamailio1 Eyl 2026
- CVE-2026-5211139İzleyin
An issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes aut
KritikCVSS 9,8İstismar yokEPSS %01 Eyl 2026
- CVE-2026-5213030İzleyin
llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.
YüksekCVSS 7,5İstismar yokEPSS %0ggml · llama.cpp1 Eyl 2026
- CVE-2026-5213130İzleyin
llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.
YüksekCVSS 7,5İstismar yokEPSS %0ggml · llama.cpp1 Eyl 2026
- CVE-2026-5213230İzleyin
llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_all
YüksekCVSS 7,5İstismar yokEPSS %0ggml · llama.cpp1 Eyl 2026
- CVE-2026-5856935İzleyin
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · powerstoreos1 Eyl 2026
- CVE-2026-8355134İzleyin
Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path
YüksekCVSS 8,5İstismar yokEPSS %0aws · sagemaker-python-sdk1 Eyl 2026
- CVE-2026-7968635İzleyin
Dell PowerStore contains a Protection Mechanism Failure vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · powerstoreos1 Eyl 2026
- CVE-2026-8430434İzleyin
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
YüksekCVSS 8,7İstismar yokEPSS %0grpc · grpc-go1 Eyl 2026
- CVE-2026-871227İzleyin
Wyoming < 1.10.2 SSRF via uri Query Parameter
OrtaCVSS 6,9Kavram kanıtıEPSS %0ohf-voice · wyoming1 Eyl 2026
- CVE-2026-8423328İzleyin
Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames
YüksekCVSS 7,0İstismar yokEPSS %0red hat · red hat enterprise linux 101 Eyl 2026
- CVE-2026-4932930İzleyin
Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat openshift container platform 41 Eyl 2026
- CVE-2026-5856735İzleyin
Dell PowerStore contains an OS Command Injection vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · powerstoreos1 Eyl 2026
- CVE-2026-1976638İzleyin
Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer
KritikCVSS 9,6İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-4522134İzleyin
Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path
YüksekCVSS 8,5İstismar yokEPSS %0easybyte software · konga1 Eyl 2026
- CVE-2026-6313733İzleyin
Incorrect Authorization in Kibana Leading to Privilege Escalation
YüksekCVSS 8,3İstismar yokEPSS %0elastic · kibana1 Eyl 2026
- CVE-2026-7264935İzleyin
Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution
YüksekCVSS 8,8İstismar yokEPSS %0elastic · elasticsearch1 Eyl 2026
- CVE-2026-7370036İzleyin
Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface
KritikCVSS 9,0İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7370136İzleyin
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer
KritikCVSS 9,0İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7370235İzleyin
Authenticated Privilege Escalation Vulnerability in the API of HPE Networking Fabric Composer
YüksekCVSS 8,8İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7370335İzleyin
Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface
YüksekCVSS 8,8İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7370435İzleyin
Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API
YüksekCVSS 8,8İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7370535İzleyin
Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composer
YüksekCVSS 8,8İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7370634İzleyin
Authentication Bypass in the API of HPE Networking Fabric Composer allows Data Exposure and Unauthorized Changes
YüksekCVSS 8,6İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7370734İzleyin
Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API
YüksekCVSS 8,5İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7370833İzleyin
Fault in Business Logic allows Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
YüksekCVSS 8,3İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7370933İzleyin
Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process
YüksekCVSS 8,3İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7371032İzleyin
Unauthenticated Denial of Service Vulnerabilities in API Endpoint of HPE Networking Fabric Composer
YüksekCVSS 8,2İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7371132İzleyin
Unauthenticated Privilege Escalation allows Administrative Access in HPE Networking Fabric Composer API
YüksekCVSS 8,1İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7371232İzleyin
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer API
YüksekCVSS 8,1İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7371331İzleyin
Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer
YüksekCVSS 7,8İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7371430İzleyin
Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API
YüksekCVSS 7,6İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026
- CVE-2026-7371530İzleyin
Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer
YüksekCVSS 7,5İstismar yokEPSS %0arubanetworks · fabric composer1 Eyl 2026