İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.961 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 23 / 80

  • GHSA-26w7-cxv4-gfx2
    39İzleyin

    Astro: Remote code execution through AVIF image optimization

    KritikCVSS 9,8İstismar yok

    npm · astro8 Eyl 2026

  • GHSA-2q42-4q24-7rgv
    28İzleyin

    OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree

    YüksekCVSS 7,1İstismar yok

    npm · @typespec/openapi38 Eyl 2026

  • CVE-2026-13359
    28İzleyin

    Contact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    bestweblayout · contact form to db by bestwebsoft – messages database plugin for wordpress8 Eyl 2026

  • CVE-2026-15406
    30İzleyin

    Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter

    YüksekCVSS 7,5İstismar yokEPSS %1

    arraytics · eventin – event calendar, tickets, registration, booking & woocommerce8 Eyl 2026

  • CVE-2026-15667
    30İzleyin

    Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter

    YüksekCVSS 7,5İstismar yokEPSS %0

    arraytics · eventin – event calendar, tickets, registration, booking & woocommerce8 Eyl 2026

  • CVE-2026-76801
    35İzleyin

    FireBox <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege Escalation

    YüksekCVSS 8,8İstismar yokEPSS %0

    fireplugins · firebox – woocommerce popup builder, exit intent popup, email optin & cart abandonment8 Eyl 2026

  • CVE-2026-87021
    28İzleyin

    Tanium addressed an unauthorized code execution vulnerability in Comply.

    YüksekCVSS 7,2İstismar yokEPSS %0

    tanium · comply8 Eyl 2026

  • CVE-2026-87023
    34İzleyin

    Tanium addressed a path traversal vulnerability in Comply.

    YüksekCVSS 8,5İstismar yokEPSS %0

    tanium · comply8 Eyl 2026

  • CVE-2026-87030
    34İzleyin

    Tanium addressed a path traversal vulnerability in Comply.

    YüksekCVSS 8,5İstismar yokEPSS %0

    tanium · comply8 Eyl 2026

  • CVE-2026-87034
    33İzleyin

    Tanium addressed a SQL injection vulnerability in Comply.

    YüksekCVSS 8,3İstismar yokEPSS %0

    tanium · comply8 Eyl 2026

  • CVE-2026-87036
    32İzleyin

    Tanium addressed an improper access controls vulnerability in Comply.

    YüksekCVSS 8,1İstismar yokEPSS %0

    tanium · comply8 Eyl 2026

  • CVE-2026-87072
    28İzleyin

    Tanium addressed an improper access controls vulnerability in Comply.

    YüksekCVSS 7,1İstismar yokEPSS %0

    tanium · comply8 Eyl 2026

  • CVE-2026-87075
    32İzleyin

    Tanium addressed an improper access controls vulnerability in Comply.

    YüksekCVSS 8,1İstismar yokEPSS %0

    tanium · comply8 Eyl 2026

  • CVE-2026-87084
    30İzleyin

    Tanium addressed a server-side request forgery vulnerability in Enforce.

    YüksekCVSS 7,7İstismar yokEPSS %0

    tanium · enforce8 Eyl 2026

  • CVE-2026-87088
    28İzleyin

    Tanium addressed an unauthorized code execution vulnerability in Enforce.

    YüksekCVSS 7,0İstismar yokEPSS %0

    tanium · enforce8 Eyl 2026

  • CVE-2026-17553
    28İzleyin

    Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action

    YüksekCVSS 7,2İstismar yokEPSS %0

    levelfourstorefront · shopping cart & ecommerce store9 Eyl 2026

  • CVE-2026-49310
    34İzleyin

    Permission control vulnerability in the event notification module.

    YüksekCVSS 8,6İstismar yokEPSS %0

    huawei · harmonyos9 Eyl 2026

  • CVE-2026-49314
    29İzleyin

    OOB write vulnerability in the rendering and composition module.

    YüksekCVSS 7,3İstismar yokEPSS %0

    huawei · harmonyos9 Eyl 2026

  • CVE-2026-49315
    28İzleyin

    DoS vulnerability in the input device module.

    YüksekCVSS 7,1İstismar yokEPSS %0

    huawei · harmonyos9 Eyl 2026

  • CVE-2026-6485
    32İzleyin

    UEFI BIOS embedded Shell can be used to bypass Secure Boot

    YüksekCVSS 8,2İstismar yokEPSS %0

    insyde software · insydeh2o9 Eyl 2026

  • CVE-2026-84293
    28İzleyin

    Repeater Fields for Gravity Forms <= 3.0.4 - Unauthenticated Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values

    YüksekCVSS 7,2İstismar yokEPSS %0

    addonsorg · repeater fields for gravity forms9 Eyl 2026

  • CVE-2026-21085
    33İzleyin

    Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.

    YüksekCVSS 8,4İstismar yokEPSS %0

    samsung · android9 Eyl 2026

  • CVE-2026-21087
    34İzleyin

    Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privi

    YüksekCVSS 8,6İstismar yokEPSS %0

    samsung · android9 Eyl 2026

  • CVE-2026-21092
    35İzleyin

    Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.

    YüksekCVSS 8,8İstismar yokEPSS %0

    samsung · android9 Eyl 2026

  • CVE-2026-21095
    36İzleyin

    Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbit

    KritikCVSS 9,2İstismar yokEPSS %0

    samsung · android9 Eyl 2026

  • CVE-2026-21096
    36İzleyin

    Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbi

    KritikCVSS 9,2Kavram kanıtıEPSS %0

    samsung · android9 Eyl 2026

  • CVE-2026-21101
    33İzleyin

    Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitra

    YüksekCVSS 8,4İstismar yokEPSS %0

    samsung · android9 Eyl 2026

  • CVE-2026-21102
    37İzleyin

    Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.

    KritikCVSS 9,3İstismar yokEPSS %0

    samsung · android9 Eyl 2026

  • CVE-2026-21104
    28İzleyin

    Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code

    YüksekCVSS 7,1İstismar yokEPSS %0

    samsung · android9 Eyl 2026

  • CVE-2026-87734
    30İzleyin

    An issue was discovered in the utcp package before 0.0.6 for OCaml.

    YüksekCVSS 7,5İstismar yokEPSS %0

    ocaml · utcp9 Eyl 2026

  • CVE-2026-14962
    34İzleyin

    ELEX WooCommerce Request a Quote < 2.4.1 - Unauthenticated SQLi via variation_id

    YüksekCVSS 8,6İstismar yokEPSS %0

    unknown · elex woocommerce request a quote9 Eyl 2026

  • CVE-2026-16960
    30İzleyin

    Loops & Logic < 4.3.0 - Unauthenticated User Data and Site Option Disclosure

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · loops & logic9 Eyl 2026

  • CVE-2026-76009
    32İzleyin

    Next-Cart Store to WooCommerce Migration <= 3.9.8 - Unauthenticated Authentication Bypass via Default '__token__' Fallback in REST Migration Endpoint

    YüksekCVSS 8,1İstismar yokEPSS %0

    martinnguyen1990 · next-cart store to woocommerce migration9 Eyl 2026

  • CVE-2026-83593
    28İzleyin

    WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    quantumcloud · wpbot – ai chatbot for live support, lead generation, ai services9 Eyl 2026

  • CVE-2026-84068
    34İzleyin

    Quentn WP 1.2.13 - 1.2.14 - Unauthenticated SQLi via 'qntn_wp' Parameter

    YüksekCVSS 8,6İstismar yokEPSS %0

    unknown · quentn wp9 Eyl 2026

  • CVE-2026-75927
    28İzleyin

    PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant

    YüksekCVSS 7,2İstismar yokEPSS %0

    publishpress · user role editor – publishpress capabilities: access control and user roles9 Eyl 2026

  • CVE-2026-79636
    28İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validati

    YüksekCVSS 7,0İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-80123
    30İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Reques

    YüksekCVSS 7,5İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-12855
    32İzleyin

    H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.

    YüksekCVSS 8,2İstismar yokEPSS %0

    insyde software · insydeh2o9 Eyl 2026

  • CVE-2026-12858
    34İzleyin

    Local privilege escalation vulnerability in ESET AV Remover

    YüksekCVSS 8,5İstismar yokEPSS %0

    eset spol. s.r.o. · eset av remover (standalone)9 Eyl 2026

  • CVE-2026-14359
    35İzleyin

    YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user

    YüksekCVSS 8,8İstismar yokEPSS %0

    yith · yith woocommerce waitlist premium9 Eyl 2026

  • CVE-2026-14989
    28İzleyin

    Cookie Banner for GDPR / CCPA <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    wplegalpages · wplp cookie consent – cookie banner & consent management for gdpr, ccpa & google consent mode9 Eyl 2026

  • CVE-2026-78491
    32İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific

    YüksekCVSS 8,2İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-78494
    29İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific

    YüksekCVSS 7,4İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-79696
    40Planlayın

    Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist

    KritikCVSS 10,0İstismar yokEPSS %0

    google cloud · agent development kit (adk) for python9 Eyl 2026

  • CVE-2026-80099
    36İzleyin

    Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    newfold · wp plugin web9 Eyl 2026

  • CVE-2026-80122
    29İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific

    YüksekCVSS 7,3İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-86547
    27İzleyin

    mrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    mrubyc · mrubyc9 Eyl 2026

  • CVE-2026-87794
    34İzleyin

    bestzip 2.2.6 and 3.0.2 Argument Injection via the Native Zip Destination

    YüksekCVSS 8,6İstismar yokEPSS %0

    nfriedly · bestzip9 Eyl 2026

  • CVE-2026-87795
    35İzleyin

    zstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictCompress

    YüksekCVSS 8,8İstismar yokEPSS %0

    luben · zstd-jni9 Eyl 2026

  • CVE-2026-41869
    36İzleyin

    Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)

    KritikCVSS 9,1İstismar yokEPSS %0

    apache · nutch9 Eyl 2026

  • CVE-2026-41870
    35İzleyin

    Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · nutch9 Eyl 2026

  • CVE-2026-41871
    39İzleyin

    Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)

    KritikCVSS 9,8İstismar yokEPSS %0

    apache · nutch9 Eyl 2026

  • CVE-2026-56207
    39İzleyin

    Apache Impala: SAML authentication bypass via forged bearer token

    KritikCVSS 9,8İstismar yokEPSS %0

    apache · impala9 Eyl 2026

  • CVE-2026-57866
    35İzleyin

    Apache Impala: Secrets Exfiltration via SSRF

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · impala9 Eyl 2026

  • CVE-2026-65181
    32İzleyin

    Apache Impala: RCE via External Data Source Class Loading

    YüksekCVSS 8,1İstismar yokEPSS %0

    apache · impala9 Eyl 2026

  • CVE-2026-73334
    32İzleyin

    Apache Parquet Hadoop: File-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation

    YüksekCVSS 8,1İstismar yokEPSS %0

    apache · parquet9 Eyl 2026

  • CVE-2026-79635
    29İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Reques

    YüksekCVSS 7,3İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-79641
    30İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali

    YüksekCVSS 7,5İstismar yokEPSS %1

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-85978
    40Planlayın

    Unauthenticated Remote Code Execution in Akana API Platform

    KritikCVSS 10,0İstismar yokEPSS %1

    perforce · akana9 Eyl 2026

  • CVE-2026-87827
    40Planlayın

    KGUARD DVR unauthenticated remote command execution vulnerability

    KritikCVSS 10,0İstismar yokEPSS %1

    kguard · kguard_firmware9 Eyl 2026

  • CVE-2026-74761
    30İzleyin

    Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · activemq9 Eyl 2026

  • CVE-2026-78485
    29İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitati

    YüksekCVSS 7,3İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-78490
    30İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restrict

    YüksekCVSS 7,5İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-78492
    29İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific

    YüksekCVSS 7,4İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-79637
    30İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific

    YüksekCVSS 7,7İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-79692
    29İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control

    YüksekCVSS 7,3İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-79695
    29İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling

    YüksekCVSS 7,3İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-79963
    29İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code W

    YüksekCVSS 7,4İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-79972
    28İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali

    YüksekCVSS 7,2İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-80172
    39İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Veri

    KritikCVSS 9,8İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-87806
    36İzleyin

    Parse Server 9.0.0 Authentication Bypass via LDAP Empty Password

    KritikCVSS 9,1İstismar yokEPSS %0

    parse-community · parse-server9 Eyl 2026

  • CVE-2026-87808
    34İzleyin

    SiYuan before v3.8.2 Read-Only Boundary Bypass via fullTextSearchBlock

    YüksekCVSS 8,7İstismar yokEPSS %0

    siyuan-note · siyuan9 Eyl 2026

  • CVE-2026-87809
    28İzleyin

    Siyuan before v3.8.2 Information Disclosure via Export Preview

    YüksekCVSS 7,1İstismar yokEPSS %0

    siyuan-note · siyuan9 Eyl 2026

  • CVE-2026-87811
    33İzleyin

    SiYuan before v3.8.2 Stored XSS via notebook template paths

    YüksekCVSS 8,4İstismar yokEPSS %0

    siyuan-note · siyuan9 Eyl 2026

  • CVE-2026-87812
    29İzleyin

    SiYuan before v3.8.2 Stored XSS via Bazaar iconURL

    YüksekCVSS 7,4İstismar yokEPSS %0

    siyuan-note · siyuan9 Eyl 2026

  • CVE-2026-87813
    33İzleyin

    SiYuan before v3.8.2 Stored XSS via unescaped asset filenames

    YüksekCVSS 8,4İstismar yokEPSS %0

    siyuan-note · siyuan9 Eyl 2026

  • CVE-2026-87814
    33İzleyin

    SiYuan before v3.8.2 Stored XSS via Asset Preview

    YüksekCVSS 8,4İstismar yokEPSS %0

    siyuan-note · siyuan9 Eyl 2026

  • CVE-2026-87815
    33İzleyin

    SiYuan before v3.8.2 Path Traversal via removeRiffDeck

    YüksekCVSS 8,4İstismar yokEPSS %0

    siyuan-note · siyuan9 Eyl 2026

  • CVE-2026-87816
    34İzleyin

    PasswordPusher before 2.11.1 Race Condition View Limit Bypass

    YüksekCVSS 8,7İstismar yokEPSS %0

    pglombardo · passwordpusher9 Eyl 2026

  • CVE-2026-87817
    34İzleyin

    GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation

    YüksekCVSS 8,7İstismar yokEPSS %0

    gitpython project · gitpython9 Eyl 2026

  • CVE-2026-87818
    28İzleyin

    GitPython 3.1.59 Local File Content Oracle via --no-index

    YüksekCVSS 7,1İstismar yokEPSS %0

    gitpython project · gitpython9 Eyl 2026

  • CVE-2026-87819
    34İzleyin

    GitPython before 3.1.60 Denial of Service via ReDoS

    YüksekCVSS 8,7İstismar yokEPSS %0

    gitpython project · gitpython9 Eyl 2026

  • CVE-2026-87820
    27İzleyin

    CyberPanel 2.4.3 through 2.4.5 Information Disclosure via AI Scanner

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    usmannasir · cyberpanel9 Eyl 2026

  • CVE-2026-87821
    28İzleyin

    Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch

    YüksekCVSS 7,1İstismar yokEPSS %0

    laradashboard · laradashboard9 Eyl 2026

  • CVE-2026-16272
    36İzleyin

    Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API WHMCS Module

    KritikCVSS 9,1İstismar yokEPSS %0

    paytr payment and electronic money institution inc. · paytr virtual pos iframe api (v9x) whmcs module9 Eyl 2026

  • CVE-2026-87766
    35İzleyin

    Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat enterprise linux 109 Eyl 2026

  • CVE-2026-15140
    30İzleyin

    A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP).

    YüksekCVSS 7,7İstismar yokEPSS %0

    everpure · portworx operator9 Eyl 2026

  • CVE-2026-85102
    85Hemen

    Improper Certificate Validation in Quantum Security Gateway

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %54

    checkpoint · gaia embedded9 Eyl 2026

  • CVE-2026-85103
    40Planlayın

    Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

    KritikCVSS 9,8İstismar yokEPSS %4

    checkpoint · quantum security gateway9 Eyl 2026

  • CVE-2026-56711
    29İzleyin

    VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    videolan · vlc media player9 Eyl 2026

  • CVE-2026-79738
    30İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded

    YüksekCVSS 7,5İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-79740
    30İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded

    YüksekCVSS 7,5İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-79950
    30İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded

    YüksekCVSS 7,5İstismar yokEPSS %0

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-86099
    35İzleyin

    Chainlit through 2.12.0 Path Traversal via socket.io sessionId

    YüksekCVSS 8,8İstismar yokEPSS %0

    chainlit · chainlit9 Eyl 2026

  • CVE-2026-86199
    34İzleyin

    PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login

    YüksekCVSS 8,7İstismar yokEPSS %0

    pmmp · pocketmine-mp9 Eyl 2026

  • CVE-2026-86741
    33İzleyin

    Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA

    YüksekCVSS 8,4İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86746
    29İzleyin

    Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replay

    YüksekCVSS 7,4İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86749
    28İzleyin

    snipe-it before 8.7.0 Data Loss via Failed Image Write

    YüksekCVSS 7,0İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86750
    33İzleyin

    snipe-it before 8.7.0 Authorization Bypass via API User Create/Update

    YüksekCVSS 8,3İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026