İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.961 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 24 / 80

  • CVE-2026-86751
    33İzleyin

    Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Markdown

    YüksekCVSS 8,4İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86754
    34İzleyin

    Snipe-IT before 8.7.0 Authorization Bypass via OAuth Clients

    YüksekCVSS 8,5İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86757
    28İzleyin

    Snipe-IT before 8.7.0 Information Disclosure via Custom Fields

    YüksekCVSS 7,1İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86758
    28İzleyin

    Snipe-IT before 8.7.0 License Key Exposure via CSV Export

    YüksekCVSS 7,1İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86759
    28İzleyin

    Snipe-IT before 8.7.0 Missing Authorization via asset-history CSV importer

    YüksekCVSS 7,1İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86762
    34İzleyin

    Snipe-IT before 8.7.0 Authentication Bypass via API Middleware

    YüksekCVSS 8,6İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86764
    28İzleyin

    Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components

    YüksekCVSS 7,1İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86765
    28İzleyin

    Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint

    YüksekCVSS 7,1İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86766
    28İzleyin

    Snipe-IT 8.6.3 Race Condition via Consumable Checkout

    YüksekCVSS 7,1İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86770
    34İzleyin

    Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation

    YüksekCVSS 8,6İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86771
    33İzleyin

    Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num

    YüksekCVSS 8,3İstismar yokEPSS %0

    snipeitapp · snipe-it9 Eyl 2026

  • CVE-2026-86775
    35İzleyin

    knowns before 0.30.0 Path Traversal via Document API

    YüksekCVSS 8,8İstismar yokEPSS %0

    knowns-dev · knowns9 Eyl 2026

  • CVE-2026-26212
    34İzleyin

    Rara One Click Demo Import < 1.3.5 Arbitrary File Upload RCE

    YüksekCVSS 8,6İstismar yokEPSS %0

    rara themes · rara one click demo import9 Eyl 2026

  • CVE-2026-78482
    32İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali

    YüksekCVSS 7,8İstismar yokEPSS %2

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-79617
    28İzleyin

    Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    tübi̇tak bi̇lgem software technologies research institute · pardus lightdm greeter9 Eyl 2026

  • CVE-2026-79941
    40Planlayın

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali

    KritikCVSS 9,8İstismar yokEPSS %4

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-87822
    34İzleyin

    t-digest 3.1 through 3.3 Denial of Service via NaN Centroid Means in MergingDigest.fromBytes

    YüksekCVSS 8,7İstismar yokEPSS %0

    tdunning · t-digest9 Eyl 2026

  • CVE-2026-87823
    35İzleyin

    zstd-jni 1.1.1 through 1.5.7-13 Out-of-Bounds Read via Direct ByteBuffer Frame-Size Methods

    YüksekCVSS 8,8İstismar yokEPSS %0

    luben · zstd-jni9 Eyl 2026

  • CVE-2026-87824
    34İzleyin

    zstd-jni 1.3.3-1 through 1.5.7-13 Out-of-Bounds Read via Zstd.trainFromBufferDirect

    YüksekCVSS 8,7İstismar yokEPSS %0

    luben · zstd-jni9 Eyl 2026

  • CVE-2026-87825
    28İzleyin

    zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free of Compression and Decompression Dictionaries

    YüksekCVSS 7,0İstismar yokEPSS %0

    luben · zstd-jni9 Eyl 2026

  • CVE-2026-87877
    28İzleyin

    zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free via Setters Called After close()

    YüksekCVSS 7,0İstismar yokEPSS %0

    luben · zstd-jni9 Eyl 2026

  • CVE-2026-22590
    36İzleyin

    Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG  sampleSize / fragmentsInSubmessage

    KritikCVSS 9,1İstismar yokEPSS %0

    eprosima · fast-dds9 Eyl 2026

  • CVE-2026-22591
    30İzleyin

    Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)

    YüksekCVSS 7,5İstismar yokEPSS %0

    eprosima · fast-dds9 Eyl 2026

  • CVE-2026-67401
    39İzleyin

    A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    webpros · cpanel9 Eyl 2026

  • CVE-2026-67403
    36İzleyin

    Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API.

    KritikCVSS 9,0İstismar yokEPSS %0

    sage · sage ar automation9 Eyl 2026

  • CVE-2026-68484
    36İzleyin

    Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API.

    KritikCVSS 9,0İstismar yokEPSS %0

    sage · sage ar automation9 Eyl 2026

  • CVE-2026-77974
    34İzleyin

    Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function

    YüksekCVSS 8,5İstismar yokEPSS %0

    softish · earvision android application9 Eyl 2026

  • CVE-2026-78484
    32İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali

    YüksekCVSS 7,8İstismar yokEPSS %2

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-78493
    32İzleyin

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali

    YüksekCVSS 7,8İstismar yokEPSS %2

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-79689
    40Planlayın

    Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali

    KritikCVSS 9,8İstismar yokEPSS %4

    dell · secure connect gateway9 Eyl 2026

  • CVE-2026-81330
    28İzleyin

    Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information

    YüksekCVSS 7,1İstismar yokEPSS %0

    softish · earvision android application9 Eyl 2026

  • CVE-2026-81640
    34İzleyin

    Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials

    YüksekCVSS 8,7İstismar yokEPSS %0

    softish · earvision android application9 Eyl 2026

  • CVE-2026-82563
    33İzleyin

    Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing

    YüksekCVSS 8,4İstismar yokEPSS %0

    softish · earvision android application9 Eyl 2026

  • CVE-2026-87807
    34İzleyin

    siyuan before v3.8.2 SQL Injection via fullTextSearchBlock

    YüksekCVSS 8,7İstismar yokEPSS %0

    siyuan-note · siyuan9 Eyl 2026

  • CVE-2026-19233
    34İzleyin

    CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server da

    YüksekCVSS 8,6İstismar yokEPSS %0

    schneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert)9 Eyl 2026

  • CVE-2026-23855
    28İzleyin

    Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, co

    YüksekCVSS 7,2İstismar yokEPSS %1

    dell · idrac99 Eyl 2026

  • CVE-2026-47156
    37İzleyin

    MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

    KritikCVSS 9,3İstismar yokEPSS %0

    mantisbt · mantisbt9 Eyl 2026

  • CVE-2026-77120
    34İzleyin

    CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause pri

    YüksekCVSS 8,7İstismar yokEPSS %0

    schneider electric · powerlogic t3009 Eyl 2026

  • CVE-2026-87874
    32İzleyin

    Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution o

    YüksekCVSS 8,1İstismar yokEPSS %0

    red hat · red hat ceph storage 59 Eyl 2026

  • CVE-2026-87927
    35İzleyin

    MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher

    YüksekCVSS 8,8İstismar yokEPSS %0

    maxsite · maxsite cms9 Eyl 2026

  • CVE-2026-87929
    37İzleyin

    MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key

    KritikCVSS 9,3İstismar yokEPSS %0

    maxsite · maxsite cms9 Eyl 2026

  • CVE-2026-87930
    36İzleyin

    MaxSite CMS through 109.6 PHP Object Injection via ci_session

    KritikCVSS 9,2Kavram kanıtıEPSS %0

    maxsite · maxsite cms9 Eyl 2026

  • CVE-2026-8044
    34İzleyin

    CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code

    YüksekCVSS 8,6İstismar yokEPSS %0

    schneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert)9 Eyl 2026

  • CVE-2023-54355
    34İzleyin

    PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve

    YüksekCVSS 8,7İstismar yokEPSS %0

    pmmp · pocketmine-mp9 Eyl 2026

  • CVE-2023-54390
    34İzleyin

    PocketMine-MP before 5.3.1 Denial of Service via LoginPacket

    YüksekCVSS 8,7İstismar yokEPSS %0

    pmmp · pocketmine-mp9 Eyl 2026

  • CVE-2023-54392
    28İzleyin

    PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacket

    YüksekCVSS 7,1İstismar yokEPSS %0

    pmmp · pocketmine-mp9 Eyl 2026

  • CVE-2023-54393
    34İzleyin

    PocketMine-MP before 4.20.5 Denial of Service via LoginPacket

    YüksekCVSS 8,7İstismar yokEPSS %0

    pmmp · pocketmine-mp9 Eyl 2026

  • CVE-2023-54396
    28İzleyin

    PocketMine-MP before 4.8.1 Server Crash via Banner NBT

    YüksekCVSS 7,1İstismar yokEPSS %0

    pmmp · pocketmine-mp9 Eyl 2026

  • CVE-2024-58380
    28İzleyin

    PocketMine-MP before 5.11.2 Denial of Service via BookEditPacket

    YüksekCVSS 7,1İstismar yokEPSS %0

    pmmp · pocketmine-mp9 Eyl 2026

  • CVE-2024-58381
    34İzleyin

    PocketMine-MP before 5.11.1 Denial of Service via LoginPacket

    YüksekCVSS 8,7İstismar yokEPSS %0

    pmmp · pocketmine-mp9 Eyl 2026

  • CVE-2024-58382
    34İzleyin

    league/commonmark before 2.6.0 Denial of Service via Quadratic Complexity

    YüksekCVSS 8,7İstismar yokEPSS %0

    thephpleague · commonmark9 Eyl 2026

  • CVE-2025-71417
    28İzleyin

    PocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacket

    YüksekCVSS 7,1İstismar yokEPSS %0

    pmmp · pocketmine-mp9 Eyl 2026

  • CVE-2026-86201
    34İzleyin

    PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientData

    YüksekCVSS 8,7İstismar yokEPSS %0

    pmmp · pocketmine-mp9 Eyl 2026

  • CVE-2026-86204
    28İzleyin

    PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket

    YüksekCVSS 7,1İstismar yokEPSS %0

    pmmp · pocketmine-mp9 Eyl 2026

  • CVE-2026-52482
    30İzleyin

    An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spa

    YüksekCVSS 7,5İstismar yokEPSS %0

    9 Eyl 2026

  • CVE-2026-54694
    38İzleyin

    NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover

    KritikCVSS 9,6İstismar yokEPSS %0

    nationalsecurityagency · skills-service9 Eyl 2026

  • CVE-2026-79322
    34İzleyin

    SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote u

    YüksekCVSS 8,6İstismar yokEPSS %0

    mageplaza · mageplaza blog9 Eyl 2026

  • CVE-2026-79323
    30İzleyin

    Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 (magefan/module-blog-graph-ql) through 2.2.1

    YüksekCVSS 7,5İstismar yokEPSS %0

    mageplaza · magefan blog9 Eyl 2026

  • CVE-2026-61915
    28İzleyin

    An issue was discovered in Cyrus IMAP before 3.12.4.

    YüksekCVSS 7,1İstismar yokEPSS %0

    cyrus · imap9 Eyl 2026

  • CVE-2026-71612
    33İzleyin

    Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmx_

    YüksekCVSS 8,4İstismar yokEPSS %0

    9 Eyl 2026

  • CVE-2026-71613
    31İzleyin

    Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdec_p

    YüksekCVSS 7,8İstismar yokEPSS %0

    9 Eyl 2026

  • CVE-2026-71614
    33İzleyin

    An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/media_tools/dvb_mpe.c, de

    YüksekCVSS 8,4İstismar yokEPSS %0

    9 Eyl 2026

  • CVE-2026-73769
    28İzleyin

    Authenticated Remote Code Execution in CPPM Web Interface

    YüksekCVSS 7,2İstismar yokEPSS %1

    hewlett packard enterprise (hpe) · clearpass policy manager (cppm)9 Eyl 2026

  • CVE-2026-73786
    30İzleyin

    Unauthenticated Network-Based Denial of Service in CPPM systems

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    hewlett packard enterprise (hpe) · clearpass policy manager (cppm)9 Eyl 2026

  • CVE-2026-73787
    28İzleyin

    Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface

    YüksekCVSS 7,2İstismar yokEPSS %0

    hewlett packard enterprise (hpe) · clearpass policy manager (cppm)9 Eyl 2026

  • CVE-2026-79324
    30İzleyin

    Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr) through 4.2.9 allows remote u

    YüksekCVSS 7,5İstismar yokEPSS %0

    mageplaza · gdpr9 Eyl 2026

  • CVE-2026-87911
    37İzleyin

    Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server

    KritikCVSS 9,0İstismar yokEPSS %1

    aws · aws labs postgres mcp server9 Eyl 2026

  • CVE-2026-36433
    39İzleyin

    An issue in Actions Semiconductor Co.

    KritikCVSS 9,8İstismar yokEPSS %0

    9 Eyl 2026

  • CVE-2026-50165
    28İzleyin

    alf.io has Improper Access Control for Organization Owners that Exposes System Secrets

    YüksekCVSS 7,1İstismar yokEPSS %0

    alfio-event · alf.io9 Eyl 2026

  • CVE-2026-71801
    39İzleyin

    An issue was discovered in s-pms SPMS-Server through v1.0.

    KritikCVSS 9,8İstismar yokEPSS %0

    9 Eyl 2026

  • CVE-2026-71808
    35İzleyin

    A SQL Injection vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote authenticated attackers to execute arbitrary SQL commands v

    YüksekCVSS 8,8İstismar yokEPSS %0

    9 Eyl 2026

  • CVE-2026-79387
    17İzleyin

    SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields (i

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    9 Eyl 2026

  • CVE-2026-87011
    30İzleyin

    Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

    YüksekCVSS 7,5İstismar yokEPSS %0

    openwebui · open webui9 Eyl 2026

  • CVE-2026-18147
    32İzleyin

    Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url

    YüksekCVSS 8,1İstismar yokEPSS %0

    red hat · red hat enterprise linux 109 Eyl 2026

  • CVE-2026-80914
    35İzleyin

    Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux9 Eyl 2026

  • CVE-2026-80921
    35İzleyin

    KVM: s390: vsie: zero stale crypto bits

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux9 Eyl 2026

  • CVE-2026-80924
    30İzleyin

    crypto: krb5 - use kfree_sensitive() for derived key buffers

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux9 Eyl 2026

  • CVE-2026-87853
    30İzleyin

    Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat enterprise linux 109 Eyl 2026

  • CVE-2026-15913
    30İzleyin

    Path Traversal in Fortra's GoAnywhere MFT Endpoint

    YüksekCVSS 7,7İstismar yokEPSS %0

    fortra · goanywhere mft9 Eyl 2026

  • CVE-2026-71805
    39İzleyin

    An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0.

    KritikCVSS 9,8İstismar yokEPSS %0

    9 Eyl 2026

  • CVE-2026-87016
    32İzleyin

    Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

    YüksekCVSS 8,1İstismar yokEPSS %0

    openwebui · open webui9 Eyl 2026

  • CVE-2026-87995
    34İzleyin

    Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin

    YüksekCVSS 8,7İstismar yokEPSS %0

    openwebui · open webui9 Eyl 2026

  • CVE-2026-87996
    30İzleyin

    Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader

    YüksekCVSS 7,7İstismar yokEPSS %0

    openwebui · open webui9 Eyl 2026

  • CVE-2026-87998
    28İzleyin

    Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

    YüksekCVSS 7,1İstismar yokEPSS %0

    openwebui · open webui9 Eyl 2026

  • CVE-2026-87999
    28İzleyin

    Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch

    YüksekCVSS 7,1İstismar yokEPSS %0

    openwebui · open webui9 Eyl 2026

  • CVE-2026-88069
    37İzleyin

    Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis

    KritikCVSS 9,3İstismar yokEPSS %0

    pandora-analysis · pandora9 Eyl 2026

  • CVE-2026-71809
    32İzleyin

    Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote unauthenticate

    YüksekCVSS 8,1İstismar yokEPSS %0

    9 Eyl 2026

  • CVE-2026-87931
    34İzleyin

    Behavioral Technology Group Pavlok Behavioral Conditioning Wearable Apple Notification Center Service Event buffer overflow

    YüksekCVSS 8,6İstismar yokEPSS %0

    behavioral technology group · pavlok behavioral conditioning wearable9 Eyl 2026

  • CVE-2026-18351
    39İzleyin

    Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    addonsorg · drag and drop file upload for elementor forms9 Eyl 2026

  • CVE-2026-19583
    39İzleyin

    Velociraptor Required Permissions bypass by using client monitoring queries

    KritikCVSS 9,9İstismar yokEPSS %0

    rapid7 · velociraptor9 Eyl 2026

  • CVE-2026-19584
    30İzleyin

    Velociraptor VQL injection during notebook restore from backup

    YüksekCVSS 7,7İstismar yokEPSS %0

    rapid7 · velociraptor9 Eyl 2026

  • GHSA-hxjg-93wc-h8p8
    35İzleyin

    Komari: Management Interface CSRF

    YüksekCVSS 8,8İstismar yok

    Go · github.com/komari-monitor/komari9 Eyl 2026

  • CVE-2026-14873
    32İzleyin

    Bulk Password Reset <= 1.3.3 - Authenticated (Subscriber+) Arbitrary Password Reset

    YüksekCVSS 8,0İstismar yokEPSS %0

    rubenw · bulk password reset10 Eyl 2026

  • CVE-2026-15019
    30İzleyin

    Direct Download for WooCommerce <= 1.19 - Unauthenticated Arbitrary File Read via 'file_id' Path Segment

    YüksekCVSS 7,5İstismar yokEPSS %1

    kamalyon · direct download for woocommerce10 Eyl 2026

  • CVE-2026-49362
    30İzleyin

    Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creation

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · artemis10 Eyl 2026

  • CVE-2026-49363
    30İzleyin

    Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology Subscription

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · artemis10 Eyl 2026

  • CVE-2026-49364
    36İzleyin

    Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers

    KritikCVSS 9,1İstismar yokEPSS %0

    apache · artemis10 Eyl 2026

  • CVE-2026-67593
    36İzleyin

    Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion

    KritikCVSS 9,1İstismar yokEPSS %0

    apache · artemis10 Eyl 2026

  • CVE-2026-82079
    28İzleyin

    Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote Attack

    YüksekCVSS 7,0İstismar yokEPSS %0

    nintendo · nintendo switch10 Eyl 2026

  • CVE-2026-84939
    36İzleyin

    Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacks

    KritikCVSS 9,1İstismar yokEPSS %0

    apache · freemarker10 Eyl 2026