İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.961 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 25 / 80

  • CVE-2026-84063
    34İzleyin

    BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type.

    YüksekCVSS 8,5İstismar yokEPSS %0

    d-zero co.,ltd. · burgereditor10 Eyl 2026

  • CVE-2026-0303
    9İzleyin

    Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

    DüşükCVSS 2,4Kavram kanıtıEPSS %0

    palo alto networks · checkov by prisma cloud10 Eyl 2026

  • CVE-2026-19436
    30İzleyin

    Ultimate Gift Cards For WooCommerce < 3.2.10 - Unauthenticated Gift Card Value Inflation via Discounted Purchase

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · ultimate gift cards for woocommerce10 Eyl 2026

  • CVE-2026-19439
    30İzleyin

    Ultimate Gift Cards for WooCommerce 3.0.3 - 3.2.9 - Unauthenticated Gift Card Code and Customer PII Disclosure via wps_uwgc_report_details

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · ultimate gift cards for woocommerce10 Eyl 2026

  • CVE-2026-77770
    40Planlayın

    miniOrange 2FA (Free & Pro) - Unauthenticated Arbitrary Option Deletion via Out-of-Band Email Link Validator

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    unknown · miniorange 2fa10 Eyl 2026

  • CVE-2026-77771
    30İzleyin

    miniOrange 2FA (Free & Pro) - 2FA Bypass via Session-Scoped OTP Lockout

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    unknown · miniorange 2fa10 Eyl 2026

  • CVE-2026-78361
    36İzleyin

    zipMoney(Zip Co) Payments Plugin for WooCommerce < 2.4.0 - Unauthenticated Arbitrary Option Deletion

    KritikCVSS 9,1İstismar yokEPSS %0

    unknown · zipmoney(zip co) payments plugin for woocommerce10 Eyl 2026

  • CVE-2026-81431
    28İzleyin

    Registration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_id

    YüksekCVSS 7,2İstismar yokEPSS %0

    unknown · registration form for woocommerce10 Eyl 2026

  • CVE-2026-82925
    32İzleyin

    Site Reviews 7.2.2 - 8.2.2 - Unauthenticated PHP Object Injection via Form Signature

    YüksekCVSS 8,1İstismar yokEPSS %0

    unknown · site reviews10 Eyl 2026

  • CVE-2026-7188
    39İzleyin

    SQLi in Armiya Information Technologies' Access Control System

    KritikCVSS 9,8İstismar yokEPSS %0

    armiya information technologies ltd. co. · access control system10 Eyl 2026

  • CVE-2026-80351
    39İzleyin

    Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod

    KritikCVSS 9,8İstismar yokEPSS %1

    apache · camel10 Eyl 2026

  • CVE-2026-80352
    39İzleyin

    Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects

    KritikCVSS 9,8İstismar yokEPSS %0

    apache · camel10 Eyl 2026

  • CVE-2026-80354
    32İzleyin

    Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace

    YüksekCVSS 8,1İstismar yokEPSS %0

    apache · camel10 Eyl 2026

  • CVE-2026-76562
    28İzleyin

    Sidebar Manager Light <= 1.18 - Unauthenticated Stored Cross-Site Scripting via 'sbm_description' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    otwthemes · sidebar manager light10 Eyl 2026

  • CVE-2026-13745
    30İzleyin

    Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME

    YüksekCVSS 7,7İstismar yokEPSS %0

    google cloud · gemini cli10 Eyl 2026

  • CVE-2026-57967
    39İzleyin

    Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    apache · artemis10 Eyl 2026

  • CVE-2026-42804
    30İzleyin

    A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPI(C-Library) in versions up to and including commit

    YüksekCVSS 7,6İstismar yokEPSS %0

    bosch sensortec · bhi360_sensorapi (c-library)10 Eyl 2026

  • CVE-2026-42805
    33İzleyin

    A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI (C library) within the debug message parser funct

    YüksekCVSS 8,4İstismar yokEPSS %0

    bosch sensortec · bhi385 sensorapi (c library)10 Eyl 2026

  • CVE-2026-42807
    32İzleyin

    A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) all

    YüksekCVSS 8,0İstismar yokEPSS %0

    bosch sensortec · coines_sdk10 Eyl 2026

  • CVE-2026-44950
    38İzleyin

    fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2

    KritikCVSS 9,5İstismar yokEPSS %0

    suse · container suse/kiosk/tigervnc-x11vnc:1.14-63.810 Eyl 2026

  • CVE-2026-59679
    36İzleyin

    fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2

    KritikCVSS 9,2İstismar yokEPSS %0

    suse · container suse/kiosk/tigervnc-x11vnc:1.14-63.810 Eyl 2026

  • CVE-2026-84042
    31İzleyin

    Crun: crun: rootful krun with passt executes container payload as host root

    YüksekCVSS 7,8İstismar yokEPSS %0

    red hat · red hat enterprise linux 1010 Eyl 2026

  • CVE-2026-88271
    35İzleyin

    GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential Takeover

    YüksekCVSS 8,8İstismar yokEPSS %0

    geovision inc. · gv-lpc2011/lpc221110 Eyl 2026

  • CVE-2026-88272
    28İzleyin

    GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection

    YüksekCVSS 7,2İstismar yokEPSS %0

    geovision inc. · gv-lpc2011/lpc221110 Eyl 2026

  • CVE-2026-88273
    28İzleyin

    GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection

    YüksekCVSS 7,2İstismar yokEPSS %0

    geovision inc. · gv-lpc2011/lpc221110 Eyl 2026

  • CVE-2026-88274
    28İzleyin

    GV-LPC2011/LPC2211 - Wireless SSID Command Injection

    YüksekCVSS 7,2İstismar yokEPSS %0

    geovision inc. · gv-lpc2011/lpc221110 Eyl 2026

  • CVE-2026-88275
    28İzleyin

    GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection

    YüksekCVSS 7,2İstismar yokEPSS %0

    geovision inc. · gv-lpc2011/lpc221110 Eyl 2026

  • CVE-2026-88276
    28İzleyin

    GV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command Injection

    YüksekCVSS 7,2İstismar yokEPSS %0

    geovision inc. · gv-lpclpc2011/221110 Eyl 2026

  • CVE-2026-88277
    35İzleyin

    GV-LPCLPC2011/2211 - ONVIF Subscribe Address Command Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    geovision inc. · gv-lpclpc2011/221110 Eyl 2026

  • CVE-2026-88278
    39İzleyin

    GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest Replay

    KritikCVSS 9,8İstismar yokEPSS %0

    geovision inc. · gv-lpclpc2011/221110 Eyl 2026

  • CVE-2026-88282
    28İzleyin

    GV-LPCLPC2011/2211 - Stored FTP-Username Command Injection

    YüksekCVSS 7,2İstismar yokEPSS %0

    geovision inc. · gv-lpclpc2011/221110 Eyl 2026

  • CVE-2026-88285
    37İzleyin

    GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service

    KritikCVSS 9,4İstismar yokEPSS %0

    geovision inc. · gv-lpc2011/lpc221110 Eyl 2026

  • CVE-2026-88286
    30İzleyin

    GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service

    YüksekCVSS 7,5İstismar yokEPSS %0

    geovision inc. · gv-lpc2011/lpc221110 Eyl 2026

  • CVE-2026-88287
    30İzleyin

    GV-LPC2011/LPC2211 -ONVIF Discovery Probe Scopes Stack-Frame Overflow Denial of Service

    YüksekCVSS 7,5İstismar yokEPSS %0

    geovision inc. · gv-lpc2011/lpc221110 Eyl 2026

  • CVE-2026-88289
    30İzleyin

    GV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request Handlers

    YüksekCVSS 7,5İstismar yokEPSS %0

    geovision inc. · gv-lpc2011/lpc221110 Eyl 2026

  • CVE-2026-88290
    30İzleyin

    GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion

    YüksekCVSS 7,5İstismar yokEPSS %0

    geovision inc. · gv-lpc2011/lpc221110 Eyl 2026

  • CVE-2026-8323
    37İzleyin

    Open Redirect in Armiya Information Technologies' Access Control System

    KritikCVSS 9,3İstismar yokEPSS %0

    armiya information technologies ltd. co. · access control system10 Eyl 2026

  • CVE-2026-0310
    28İzleyin

    PAN-OS: Buffer Overflow Vulnerability via XML Processing

    YüksekCVSS 7,2İstismar yokEPSS %0

    palo alto networks · cloud ngfw10 Eyl 2026

  • CVE-2026-78082
    37İzleyin

    Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4

    KritikCVSS 9,3İstismar yokEPSS %0

    joomshaper.com · sp property extension for joomla10 Eyl 2026

  • CVE-2026-78083
    28İzleyin

    Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4

    YüksekCVSS 7,1İstismar yokEPSS %0

    joomshaper.com · sp property extension for joomla10 Eyl 2026

  • CVE-2026-78302
    34İzleyin

    Joomla Extension - joomshaper.com - Unauthenticated Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4

    YüksekCVSS 8,6İstismar yokEPSS %0

    joomshaper.com · sp property extension for joomla10 Eyl 2026

  • CVE-2026-87803
    28İzleyin

    An authorization bypass vulnerability exists in the Countly Server DBViewer due to flawed sub-pipeline detection in the aggregation stage sa

    YüksekCVSS 7,1İstismar yokEPSS %0

    countly · countly-server10 Eyl 2026

  • CVE-2026-87961
    28İzleyin

    ESP32-audioI2S 3.4.4 through 4.0.0 Heap-based Out-of-Bounds Read via Shadowed Length Parameter in read_ID3_Header

    YüksekCVSS 7,1İstismar yokEPSS %0

    schreibfaul1 · esp32-audioi2s10 Eyl 2026

  • CVE-2026-87962
    34İzleyin

    t-digest 3.1 through 3.3 Denial of Service via Unvalidated Length Fields in MergingDigest.fromBytes

    YüksekCVSS 8,7İstismar yokEPSS %0

    tdunning · t-digest10 Eyl 2026

  • CVE-2026-85545
    28İzleyin

    There is an Vulnerability in some HikCentral Access Control versions.

    YüksekCVSS 7,1İstismar yokEPSS %0

    hikvision · hikcentral access control10 Eyl 2026

  • CVE-2026-9163
    39İzleyin

    SQLi in GIS Informatics' GisLab Laboratory Management System

    KritikCVSS 9,8İstismar yokEPSS %0

    gis informatics · gislab laboratory management system10 Eyl 2026

  • CVE-2026-9166
    30İzleyin

    LFI in GIS Informatics' GisLab Laboratory Management System

    YüksekCVSS 7,5İstismar yokEPSS %0

    gis informatics · gislab laboratory management system10 Eyl 2026

  • CVE-2026-38626
    39İzleyin

    Garlic-Hub v1.0.1 is vulnerable to SQL Injection in src/Modules/Items/Repositories/ItemsRepository.php.

    KritikCVSS 9,8İstismar yokEPSS %0

    10 Eyl 2026

  • CVE-2026-64836
    34İzleyin

    ICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement

    YüksekCVSS 8,7İstismar yokEPSS %0

    icecoder · icecoder10 Eyl 2026

  • CVE-2026-64837
    34İzleyin

    ICEcoder through 8.1 OS Command Injection via lib/properties.php

    YüksekCVSS 8,7İstismar yokEPSS %0

    icecoder · icecoder10 Eyl 2026

  • CVE-2026-64838
    34İzleyin

    ICEcoder through 8.1 Path Traversal via oldFileName Parameter

    YüksekCVSS 8,7İstismar yokEPSS %0

    icecoder · icecoder10 Eyl 2026

  • CVE-2026-6285
    30İzleyin

    Improper Authentication in Ankaref's LIBRID/LIBREF

    YüksekCVSS 7,5İstismar yokEPSS %0

    ankaref innovation and technology inc. · librid/libref10 Eyl 2026

  • CVE-2026-75584
    34İzleyin

    ION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() Assertion

    YüksekCVSS 8,7İstismar yokEPSS %0

    nasa-jpl · ion-dtn10 Eyl 2026

  • CVE-2026-85217
    34İzleyin

    Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop

    YüksekCVSS 8,6İstismar yokEPSS %0

    autodesk · fusion10 Eyl 2026

  • CVE-2026-88863
    34İzleyin

    capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_org

    YüksekCVSS 8,6İstismar yokEPSS %0

    cap-go · capgo.app10 Eyl 2026

  • CVE-2026-88865
    34İzleyin

    AVideo Missing Authorization via getRestream.json.php

    YüksekCVSS 8,6İstismar yokEPSS %0

    wwbn · avideo10 Eyl 2026

  • CVE-2026-88866
    37İzleyin

    WWBN AVideo LoginControl Stored XSS via User-Agent Header

    KritikCVSS 9,3İstismar yokEPSS %0

    wwbn · avideo10 Eyl 2026

  • CVE-2026-88867
    37İzleyin

    WWBN AVideo Stored XSS via Category Name and Icon Class

    KritikCVSS 9,3İstismar yokEPSS %0

    wwbn · avideo10 Eyl 2026

  • CVE-2026-88868
    37İzleyin

    AVideo LiveLinks Stored XSS via title and description fields

    KritikCVSS 9,3İstismar yokEPSS %0

    wwbn · avideo10 Eyl 2026

  • CVE-2026-88869
    37İzleyin

    AVideo AD_Server Stored XSS via log.php label parameter

    KritikCVSS 9,3İstismar yokEPSS %0

    wwbn · avideo10 Eyl 2026

  • CVE-2026-88870
    28İzleyin

    WWBN AVideo LoginControl PGP Key CSRF via GET Request

    YüksekCVSS 7,1İstismar yokEPSS %0

    wwbn · avideo10 Eyl 2026

  • CVE-2026-88872
    28İzleyin

    AVideo CustomizeUser setPassword.json.php CSRF

    YüksekCVSS 7,1İstismar yokEPSS %0

    wwbn · avideo10 Eyl 2026

  • CVE-2026-88873
    28İzleyin

    WWBN AVideo Cross-Site Request Forgery via logArchive.json.php

    YüksekCVSS 7,1İstismar yokEPSS %0

    wwbn · avideo10 Eyl 2026

  • CVE-2026-88874
    34İzleyin

    AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Authentication Bypass

    YüksekCVSS 8,7İstismar yokEPSS %0

    wwbn · avideo10 Eyl 2026

  • CVE-2026-88876
    34İzleyin

    AVideo PlayerSkins seo.php Missing Authorization Password-Protected VOD

    YüksekCVSS 8,7İstismar yokEPSS %0

    wwbn · avideo10 Eyl 2026

  • CVE-2026-88895
    34İzleyin

    CyberPanel before 3.0.5 Authentication Bypass via API

    YüksekCVSS 8,6İstismar yokEPSS %0

    usmannasir · cyberpanel10 Eyl 2026

  • CVE-2026-88915
    28İzleyin

    MISP Event Template Instantiation Bypasses Sharing Group and Tagging Authorization

    YüksekCVSS 7,1İstismar yokEPSS %0

    misp · misp10 Eyl 2026

  • CVE-2026-81783
    28İzleyin

    WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    mailmunch · mailmunch – grow your email list10 Eyl 2026

  • CVE-2026-81786
    30İzleyin

    WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    villatheme · thank you page customizer for woocommerce10 Eyl 2026

  • CVE-2026-81789
    34İzleyin

    WordPress Advanced Product Fields Extended for WooCommerce plugin <= 3.1.6 - Arbitrary File Deletion vulnerability

    YüksekCVSS 8,6İstismar yokEPSS %0

    studio wombat · advanced product fields extended for woocommerce10 Eyl 2026

  • CVE-2026-81794
    30İzleyin

    WordPress Shirt Product Designer for WooCommerce plugin 1.0.4 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    mlfactory · shirt product designer for woocommerce10 Eyl 2026

  • CVE-2026-81795
    28İzleyin

    WordPress Page Visits Counter – Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    denis botić · page visits counter &#8211; lite10 Eyl 2026

  • CVE-2026-81796
    29İzleyin

    WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    wen solutions · wp travel10 Eyl 2026

  • CVE-2026-81800
    37İzleyin

    WordPress Verified Reviews (Avis Vérifiés) plugin <= 2.4.6 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    par avisverifies · verified reviews (avis vérifiés)10 Eyl 2026

  • CVE-2026-81801
    32İzleyin

    WordPress WP-Stateless plugin <= 4.4.1 - Settings Change vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    udx usability dynamics · wp-stateless10 Eyl 2026

  • CVE-2026-81803
    30İzleyin

    WordPress RepairBuddy plugin <= 4.1224 - Remote Code Execution (RCE) vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    ateeq rafeeq · repairbuddy10 Eyl 2026

  • CVE-2026-81804
    30İzleyin

    WordPress ZHBackup – Backup, Restore & Migration plugin <= 2.4.2 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    zain hassan · zhbackup – backup, restore &amp; migration10 Eyl 2026

  • CVE-2026-81805
    32İzleyin

    WordPress SiteSkite plugin <= 2.1.5 - Privilege Escalation vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    siteskite · siteskite10 Eyl 2026

  • CVE-2026-84816
    28İzleyin

    WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    realmag777 · wpcs10 Eyl 2026

  • CVE-2026-84819
    28İzleyin

    WordPress WPAdverts plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    greg winiarski · wpadverts10 Eyl 2026

  • CVE-2026-84821
    30İzleyin

    WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    epsiloncool · wp fast total search10 Eyl 2026

  • CVE-2026-88004
    28İzleyin

    Traefik entrypoint header-name sanitization bypassed via request trailers

    YüksekCVSS 7,0İstismar yokEPSS %0

    traefik · traefik10 Eyl 2026

  • CVE-2026-88007
    36İzleyin

    Traefik HTTP/3 Backend NTLM Connection Reuse

    KritikCVSS 9,1İstismar yokEPSS %0

    traefik · traefik10 Eyl 2026

  • CVE-2026-88008
    28İzleyin

    Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    traefik · traefik10 Eyl 2026

  • CVE-2026-88897
    32İzleyin

    Flextype CMS through 1.0.0-alpha.3 API Token Exposure via Query String

    YüksekCVSS 8,2İstismar yokEPSS %0

    flextype · flextype10 Eyl 2026

  • CVE-2026-88898
    28İzleyin

    AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Authorization on Bulk Publish Endpoint

    YüksekCVSS 7,1İstismar yokEPSS %0

    appflowy-io · appflowy-cloud10 Eyl 2026

  • CVE-2026-4129
    34İzleyin

    Improper Access Controls in NI SystemLink

    YüksekCVSS 8,6İstismar yokEPSS %0

    ni · systemlink10 Eyl 2026

  • CVE-2026-4130
    33İzleyin

    Storage of Sensitive Information in Cleartext in NI SystemLink

    YüksekCVSS 8,4İstismar yokEPSS %0

    ni · systemlink10 Eyl 2026

  • CVE-2026-79987
    34İzleyin

    Low-privilege RCE through element-search eager loading

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    craftcms · cms10 Eyl 2026

  • CVE-2026-81046
    37İzleyin

    Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability.

    KritikCVSS 9,4İstismar yokEPSS %0

    dell · thinos10 Eyl 2026

  • CVE-2026-81048
    36İzleyin

    Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection

    YüksekCVSS 8,8İstismar yokEPSS %2

    dell · thinos10 Eyl 2026

  • CVE-2026-81467
    40Planlayın

    Dell ThinOS 10, versions prior to 2605_10.

    KritikCVSS 9,8İstismar yokEPSS %2

    dell · thinos10 Eyl 2026

  • CVE-2026-81468
    29İzleyin

    Dell ThinOS 10, versions prior to 2605_10.

    YüksekCVSS 7,2İstismar yokEPSS %2

    dell · thinos10 Eyl 2026

  • CVE-2026-88009
    35İzleyin

    Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    traefik · traefik10 Eyl 2026

  • CVE-2026-88016
    28İzleyin

    rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

    YüksekCVSS 7,1İstismar yokEPSS %0

    rclone · rclone10 Eyl 2026

  • CVE-2026-88017
    29İzleyin

    rclone: FTP cross-session auth-proxy backend confusion

    YüksekCVSS 7,3İstismar yokEPSS %0

    rclone · rclone10 Eyl 2026

  • CVE-2026-88018
    39İzleyin

    rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass

    KritikCVSS 9,8İstismar yokEPSS %0

    rclone · rclone10 Eyl 2026

  • CVE-2026-88899
    37İzleyin

    knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    knowns-dev · knowns10 Eyl 2026

  • CVE-2026-88937
    34İzleyin

    knowns through 0.33.0 Path Traversal via Template Engine

    YüksekCVSS 8,6İstismar yokEPSS %0

    knowns-dev · knowns10 Eyl 2026

  • CVE-2026-88938
    28İzleyin

    knowns through 0.33.0 Path Traversal via code.find MCP tool

    YüksekCVSS 7,1İstismar yokEPSS %0

    knowns-dev · knowns10 Eyl 2026