Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.963 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 26 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-88939İstismar yok | knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemptionknowns-dev · knowns · CWE-863 | Yüksek8,7 | — | %0,4 | 10 Eyl 2026 |
34İzleyin | CVE-2026-88959İstismar yok | Anchor CMS through 0.12.7 Privilege Escalation via Missing Authorization on Admin User-Management Endpointsanchorcms · anchor cms · CWE-862 | Yüksek8,7 | — | %0,5 | 10 Eyl 2026 |
39İzleyin | CVE-2026-52098İstismar yok | An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpointflowiseai · flowise · CWE-94 | Kritik9,8 | — | %1,1 | 10 Eyl 2026 |
37İzleyin | CVE-2026-65638İstismar yok | Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commawebpros · configserver security & firewall · CWE-78 | Kritik9,2 | — | %2,3 | 10 Eyl 2026 |
38İzleyin | CVE-2026-65639İstismar yok | OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allowebpros · configserver security & firewall · CWE-78 | Kritik9,5 | — | %1,4 | 10 Eyl 2026 |
39İzleyin | CVE-2026-68487İstismar yok | Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.webpros · plesk · CWE-36 | Kritik9,9 | — | %0,6 | 10 Eyl 2026 |
39İzleyin | CVE-2026-68488İstismar yok | A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to rootwebpros · plesk · CWE-367 | Kritik9,9 | — | %0,3 | 10 Eyl 2026 |
35İzleyin | CVE-2026-73693İstismar yok | FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handlerfilerun · filerun · CWE-78 | Yüksek8,7 | — | %2,7 | 10 Eyl 2026 |
35İzleyin | CVE-2026-73694İstismar yok | FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinitionfilerun · filerun · CWE-78 | Yüksek8,6 | — | %2,2 | 10 Eyl 2026 |
34İzleyin | CVE-2026-73698İstismar yok | FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add Actionfilerun · filerun · CWE-89 | Yüksek8,6 | — | %0,6 | 10 Eyl 2026 |
34İzleyin | CVE-2026-73699İstismar yok | FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()filerun · filerun · CWE-502 | Yüksek8,6 | — | %0,7 | 10 Eyl 2026 |
35İzleyin | CVE-2026-85228İstismar yok | Integer overflow in tensor buffer validation in Deep Java Libraryamazon · deep java library · CWE-190 | Yüksek8,8 | — | %0,5 | 10 Eyl 2026 |
36İzleyin | CVE-2026-88044İstismar yok | rclone: RC per-server auth-proxy bypassrclone · rclone · CWE-863 | Kritik9,1 | — | %0,4 | 10 Eyl 2026 |
30İzleyin | CVE-2026-88045İstismar yok | rclone: S3 multipart declared-length memory exhaustionrclone · rclone · CWE-789 | Yüksek7,5 | — | %0,6 | 10 Eyl 2026 |
34İzleyin | CVE-2026-88047İstismar yok | Tesseract: ReadNormProtos stack buffer overflowtesseract-ocr · tesseract ocr · CWE-121 | Yüksek8,6 | — | %0,1 | 10 Eyl 2026 |
34İzleyin | CVE-2026-88048İstismar yok | Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatchtesseract-ocr · tesseract ocr · CWE-125 | Yüksek8,6 | — | %0,1 | 10 Eyl 2026 |
34İzleyin | CVE-2026-88049İstismar yok | Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatchtesseract-ocr · tesseract ocr · CWE-787 | Yüksek8,6 | — | %0,1 | 10 Eyl 2026 |
37İzleyin | CVE-2026-88860İstismar yok | Capgo Authorization Bypass via Stale Channel Permission Overridescap-go · capgo.app · CWE-863 | Kritik9,3 | — | %0,2 | 10 Eyl 2026 |
34İzleyin | CVE-2026-88861Kavram kanıtı | Capgo AAL1 Session MFA Bypass via Direct RBAC Authorizationcap-go · capgo.app · CWE-288 | Yüksek8,7 | — | %0,5 | 10 Eyl 2026 |
34İzleyin | CVE-2026-88862İstismar yok | Capgo API Key Manager Authentication Bypass via x-limited-key-idcap-go · capgo.app · CWE-863 | Yüksek8,7 | — | %0,4 | 10 Eyl 2026 |
37İzleyin | CVE-2026-88864İstismar yok | Capgo SSO Provider Authentication Bypass via PostgREST Direct Writecap-go · capgo.app · CWE-284 | Kritik9,3 | — | %0,3 | 10 Eyl 2026 |
37İzleyin | CVE-2026-88877Kavram kanıtı | Traefik v3.7.0 Authentication Bypass via from-to-www-redirecttraefik · traefik · CWE-639 | Kritik9,3 | — | %0,6 | 10 Eyl 2026 |
36İzleyin | CVE-2026-88880İstismar yok | Renovate before 44.11.3 Credential Exfiltration via Link Headerrenovatebot · renovate · CWE-601 | Kritik9,2 | — | %0,5 | 10 Eyl 2026 |
36İzleyin | CVE-2026-88881İstismar yok | Renovate before 44.11.3 Credential Exfiltration via Link Headerrenovatebot · renovate · CWE-601 | Kritik9,2 | — | %0,4 | 10 Eyl 2026 |
36İzleyin | CVE-2026-88882İstismar yok | Renovate before 44.11.2 Credential Exfiltration via Link Headerrenovatebot · renovate · CWE-601 | Kritik9,2 | — | %0,4 | 10 Eyl 2026 |
33İzleyin | CVE-2026-88883İstismar yok | Renovate before 44.14.4 TLS Private Key Log Sanitisationrenovatebot · renovate · CWE-532 | Yüksek8,3 | — | %0,3 | 10 Eyl 2026 |
29İzleyin | CVE-2026-88885İstismar yok | Renovate before 44.14.7 Command Injection via depNamerenovatebot · renovate · CWE-78 | Yüksek7,3 | — | %0,8 | 10 Eyl 2026 |
34İzleyin | CVE-2026-88886İstismar yok | Renovate before 44.14.7 Command Injection via gradle-wrapperrenovatebot · renovate · CWE-78 | Yüksek8,5 | — | %0,2 | 10 Eyl 2026 |
36İzleyin | CVE-2026-88887İstismar yok | Renovate before 44.11.2 Credential Exfiltration via Link Headerrenovatebot · renovate · CWE-601 | Kritik9,2 | — | %0,4 | 10 Eyl 2026 |
29İzleyin | CVE-2026-88888İstismar yok | Renovate before 44.14.7 Command Injection via Mix organizationrenovatebot · renovate · CWE-78 | Yüksek7,3 | — | %0,8 | 10 Eyl 2026 |
34İzleyin | CVE-2026-88889İstismar yok | Renovate before 44.14.7 Command Injection via distributionTyperenovatebot · renovate · CWE-78 | Yüksek8,5 | — | %1,0 | 10 Eyl 2026 |
33İzleyin | CVE-2026-88890İstismar yok | OpenPanel through 2.3.0 SQL Injection via unvalidated profile filter column identifieropenpanel-dev · openpanel · CWE-89 | Yüksek8,4 | — | %0,3 | 10 Eyl 2026 |
28İzleyin | CVE-2026-88891İstismar yok | OpenPanel through 2.3.0 Read-Only Access Level Enforcement Bypass via Mutationsopenpanel-dev · openpanel · CWE-269 | Yüksek7,2 | — | %0,4 | 10 Eyl 2026 |
34İzleyin | CVE-2026-88893İstismar yok | OpenPanel through 2.3.0 Unauthenticated Share Lookup Information Disclosureopenpanel-dev · openpanel · CWE-200 | Yüksek8,7 | — | %0,4 | 10 Eyl 2026 |
28İzleyin | CVE-2026-15419İstismar yok | CP210x Driver Memory Corruption results in Arbitrary Code Executionsilicon labs · silabser.sys driver · CWE-121 | Yüksek7,0 | — | %0,2 | 10 Eyl 2026 |
36İzleyin | CVE-2026-68006İstismar yok | An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_parser.rl fileCWE-444 | Kritik9,1 | — | %0,5 | 10 Eyl 2026 |
34İzleyin | CVE-2026-88051İstismar yok | Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fieldstesseract-ocr · tesseract ocr · CWE-787 | Yüksek8,6 | — | %0,1 | 10 Eyl 2026 |
31İzleyin | CVE-2026-88052İstismar yok | Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronizationtesseract-ocr · tesseract ocr · CWE-129 | Yüksek7,8 | — | %0,1 | 10 Eyl 2026 |
34İzleyin | CVE-2026-88053İstismar yok | Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddatatesseract-ocr · tesseract ocr · CWE-787 | Yüksek8,6 | — | %0,1 | 10 Eyl 2026 |
37İzleyin | CVE-2026-89042İstismar yok | passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verificationkrakenjs · passport-saml-encrypted · CWE-347 | Kritik9,3 | — | %0,3 | 10 Eyl 2026 |
36İzleyin | CVE-2026-89043İstismar yok | passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prependingkrakenjs · passport-saml-encrypted · CWE-347 | Kritik9,1 | — | %0,3 | 10 Eyl 2026 |
35İzleyin | CVE-2026-89046İstismar yok | zstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative Offsetluben · zstd-jni · CWE-125 | Yüksek8,8 | — | %0,6 | 10 Eyl 2026 |
32İzleyin | GHSA-x7m8-jrm8-hpvxİstismar yok | @eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family namenpm · @eigenpal/docx-editor-core · CWE-79 | Yüksek8,1 | — | — | 10 Eyl 2026 |
30İzleyin | CVE-2026-45747İstismar yok | Suricata lua/tls: null dereference in TlsGetCertInfooisf · suricata · CWE-476 | Yüksek7,5 | — | %0,4 | 10 Eyl 2026 |
30İzleyin | CVE-2026-46387İstismar yok | Suricata http2: decompression bomb can cause denial of service in Suricataoisf · suricata · CWE-409 | Yüksek7,5 | — | %0,8 | 10 Eyl 2026 |
33İzleyin | CVE-2026-87090İstismar yok | Consul vulnerable to an authorization bypass in the catalog node-write pathhashicorp · consul · CWE-863 | Yüksek8,3 | — | %0,3 | 10 Eyl 2026 |
30İzleyin | CVE-2026-87993İstismar yok | Consul-template vulnerable to an information disclosure issue in error handlinghashicorp · tooling · CWE-532 | Yüksek7,7 | — | %0,3 | 10 Eyl 2026 |
28İzleyin | CVE-2026-88021İstismar yok | Consul vulnerable to an authorization bypass in the Connect service meshhashicorp · consul · CWE-185 | Yüksek7,1 | — | %0,3 | 10 Eyl 2026 |
32İzleyin | CVE-2026-88032İstismar yok | Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Drivermongodb · java driver · CWE-416 | Yüksek8,2 | — | %0,2 | 10 Eyl 2026 |
34İzleyin | CVE-2026-89049İstismar yok | Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agentaws · amazon ssm agent · CWE-918 | Yüksek8,5 | — | %0,6 | 10 Eyl 2026 |
30İzleyin | CVE-2026-9336İstismar yok | IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesibm · websphere application server · CWE-306 | Yüksek7,5 | — | %0,7 | 10 Eyl 2026 |
32İzleyin | CVE-2026-81784İstismar yok | WordPress Wise Chat plugin <= 3.4.2 - PHP Object Injection vulnerabilitymarcin · wise chat · CWE-502 | Yüksek8,1 | — | %0,4 | 10 Eyl 2026 |
30İzleyin | CVE-2026-81799İstismar yok | WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerabilitywp swings · return refund and exchange for woocommerce · CWE-862 | Yüksek7,5 | — | %0,3 | 10 Eyl 2026 |
28İzleyin | CVE-2026-88924İstismar yok | Gvfs: gvfs-admin socket ownership race permits local rootgnome · gvfs · CWE-367 | Yüksek7,0 | — | %0,2 | 10 Eyl 2026 |
28İzleyin | CVE-2026-89011İstismar yok | isomorphic-git < 1.42.0 Prototype Pollution via getRemoteInfoisomorphic-git · isomorphic-git · CWE-1321 | Yüksek7,1 | — | %0,4 | 10 Eyl 2026 |
32İzleyin | CVE-2026-89054İstismar yok | OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changesthe opennms group · horizon · CWE-862 | Yüksek8,2 | — | %0,5 | 10 Eyl 2026 |
36İzleyin | CVE-2026-89086İstismar yok | In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proocaml · jose · CWE-347 | Kritik9,1 | — | %0,2 | 10 Eyl 2026 |
29İzleyin | CVE-2026-89087İstismar yok | The cstruct package before 6.3.0 for OCaml mishandles indexes.ocaml · cstruct · CWE-573 | Yüksek7,3 | — | %0,3 | 10 Eyl 2026 |
34İzleyin | CVE-2026-11813İstismar yok | A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated uslenovo · filez client · CWE-276 | Yüksek8,5 | — | %0,1 | 10 Eyl 2026 |
33İzleyin | CVE-2026-18994İstismar yok | A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in thelenovo · file manager application · CWE-926 | Yüksek8,4 | — | %0,1 | 10 Eyl 2026 |
33İzleyin | CVE-2026-19136İstismar yok | A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese markelenovo · tianxi ai agent pc application · CWE-78 | Yüksek8,4 | — | %1,1 | 10 Eyl 2026 |
30İzleyin | CVE-2026-45759İstismar yok | Suricata http1: quadratic Content-Disposition processing can lead to denial of serviceoisf · suricata · CWE-400 | Yüksek7,5 | — | %0,8 | 10 Eyl 2026 |
34İzleyin | CVE-2026-63427İstismar yok | An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrarlenovo · software fix · CWE-290 | Yüksek8,5 | — | %0,1 | 10 Eyl 2026 |
37İzleyin | CVE-2026-75940İstismar yok | A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacklenovo · health application · CWE-798 | Kritik9,3 | — | %0,4 | 10 Eyl 2026 |
31İzleyin | CVE-2026-79591İstismar yok | A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation oCWE-122 | Yüksek7,8 | — | %0,1 | 10 Eyl 2026 |
30İzleyin | CVE-2026-79592İstismar yok | An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validation of file-controllCWE-125 | Yüksek7,5 | — | %0,4 | 10 Eyl 2026 |
39İzleyin | CVE-2026-85025İstismar yok | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardslangflow · langflow · CWE-863 | Kritik9,8 | — | %0,6 | 10 Eyl 2026 |
26İzleyin | CVE-2026-89089İstismar yok | OpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER)the opennms group · meridian · CWE-89 | Orta6,5 | — | %0,3 | 10 Eyl 2026 |
39İzleyin | CVE-2026-89094İstismar yok | Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/templatforgejo · forgejo · CWE-1336 | Kritik9,9 | — | %0,8 | 10 Eyl 2026 |
28İzleyin | CVE-2026-9176İstismar yok | IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesibm · websphere application server · CWE-94 | Yüksek7,1 | — | %0,1 | 10 Eyl 2026 |
32İzleyin | CVE-2026-9327İstismar yok | IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesibm · websphere application server · CWE-269 | Yüksek8,1 | — | %0,3 | 10 Eyl 2026 |
36İzleyin | CVE-2026-19646İstismar yok | Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agentibm · common licensing · CWE-1149 | Kritik9,1 | — | %0,5 | 10 Eyl 2026 |
31İzleyin | CVE-2026-2310İstismar yok | IBM webMethods Integration Server is vulnerable to an XML external entity injection (XXE) attack when processing XML dataibm · webmethods integration server · CWE-91 | Yüksek7,8 | — | %0,2 | 10 Eyl 2026 |
21İzleyin | CVE-2026-36392Kavram kanıtı | FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS).CWE-79 | Orta5,4 | — | %0,2 | 10 Eyl 2026 |
36İzleyin | CVE-2026-45764İstismar yok | Suricata http2: protocol-change type confusion can lead to denial of serviceoisf · suricata · CWE-843 | Kritik9,1 | — | %0,6 | 10 Eyl 2026 |
30İzleyin | CVE-2026-45765İstismar yok | Suricata dnp3: unbounded reassembly can lead to resource exhaustionoisf · suricata · CWE-400 | Yüksek7,5 | — | %0,6 | 10 Eyl 2026 |
30İzleyin | CVE-2026-45766İstismar yok | Suricata nfs: unbounded stateful structures can lead to resource exhaustionoisf · suricata · CWE-400 | Yüksek7,5 | — | %0,6 | 10 Eyl 2026 |
30İzleyin | CVE-2026-45768İstismar yok | Suricata ldap: unbounded responses per transaction can lead to resource exhaustionoisf · suricata · CWE-400 | Yüksek7,5 | — | %0,7 | 10 Eyl 2026 |
31İzleyin | CVE-2026-45769İstismar yok | ikev2: unbounded client transform storage can lead to resource exhaustionoisf · suricata · CWE-400 | Yüksek7,5 | — | %1,7 | 10 Eyl 2026 |
30İzleyin | CVE-2026-45770İstismar yok | Suricata lua: excessive flow variable registration can bypass sandboxoisf · suricata · CWE-693 | Yüksek7,5 | — | %0,4 | 10 Eyl 2026 |
36İzleyin | CVE-2026-71640İstismar yok | An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via CWE-703 | Kritik9,1 | — | %0,6 | 10 Eyl 2026 |
30İzleyin | CVE-2026-71643İstismar yok | An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denCWE-400 | Yüksek7,5 | — | %0,6 | 10 Eyl 2026 |
30İzleyin | CVE-2026-71645İstismar yok | An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial CWE-703 | Yüksek7,5 | — | %0,6 | 10 Eyl 2026 |
30İzleyin | CVE-2026-71647İstismar yok | An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of servicCWE-400 | Yüksek7,5 | — | %0,6 | 10 Eyl 2026 |
35İzleyin | CVE-2026-75624İstismar yok | IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Serviceibm · app connect enterprise · CWE-863 | Yüksek8,8 | — | %0,5 | 10 Eyl 2026 |
35İzleyin | CVE-2026-75777İstismar yok | Multiple vulnerabilities in IBM Aspera Enterprise Webappsibm · aspera enterprise webapps · CWE-269 | Yüksek8,8 | — | %0,1 | 10 Eyl 2026 |
35İzleyin | CVE-2026-76059İstismar yok | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardslangflow · langflow · CWE-693 | Yüksek8,8 | — | %0,7 | 10 Eyl 2026 |
35İzleyin | CVE-2026-78569İstismar yok | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardslangflow · langflow · CWE-78 | Yüksek8,8 | — | %0,7 | 10 Eyl 2026 |
35İzleyin | CVE-2026-78571İstismar yok | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardslangflow · langflow · CWE-94 | Yüksek8,8 | — | %0,8 | 10 Eyl 2026 |
39İzleyin | CVE-2026-78573İstismar yok | IBM ContextForge MCP Gateway is affected by use of default credentialsibm · contextforge · CWE-1392 | Kritik9,8 | — | %0,5 | 10 Eyl 2026 |
35İzleyin | CVE-2026-78575İstismar yok | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardslangflow · langflow · CWE-78 | Yüksek8,8 | — | %0,7 | 10 Eyl 2026 |
39İzleyin | CVE-2026-79724İstismar yok | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardslangflow · langflow · CWE-78 | Kritik9,8 | — | %0,6 | 10 Eyl 2026 |
35İzleyin | CVE-2026-79742İstismar yok | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardslangflow · langflow · CWE-94 | Yüksek8,8 | — | %0,8 | 10 Eyl 2026 |
28İzleyin | CVE-2026-80380İstismar yok | DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareibm · datastage on cloud pak for data · CWE-352 | Yüksek7,1 | — | %0,1 | 10 Eyl 2026 |
36İzleyin | CVE-2026-80424İstismar yok | DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareibm · datastage on cloud pak for data · CWE-22 | Kritik9,1 | — | %0,5 | 10 Eyl 2026 |
34İzleyin | CVE-2026-80436İstismar yok | DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareibm · datastage on cloud pak for data · CWE-285 | Yüksek8,5 | — | %0,3 | 10 Eyl 2026 |
39İzleyin | CVE-2026-81204İstismar yok | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardslangflow · langflow · CWE-94 | Kritik9,8 | — | %0,8 | 10 Eyl 2026 |
34İzleyin | CVE-2026-81207İstismar yok | DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareibm · datastage on cloud pak for data · CWE-918 | Yüksek8,5 | — | %0,2 | 10 Eyl 2026 |
30İzleyin | CVE-2026-81210İstismar yok | DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareibm · datastage on cloud pak for data · CWE-639 | Yüksek7,7 | — | %0,3 | 10 Eyl 2026 |
35İzleyin | CVE-2026-81211İstismar yok | Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardslangflow · langflow · CWE-862 | Yüksek8,8 | — | %0,5 | 10 Eyl 2026 |
- CVE-2026-8893934İzleyin
knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption
YüksekCVSS 8,7İstismar yokEPSS %0knowns-dev · knowns10 Eyl 2026
- CVE-2026-8895934İzleyin
Anchor CMS through 0.12.7 Privilege Escalation via Missing Authorization on Admin User-Management Endpoints
YüksekCVSS 8,7İstismar yokEPSS %0anchorcms · anchor cms10 Eyl 2026
- CVE-2026-5209839İzleyin
An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<flowId> endpoint
KritikCVSS 9,8İstismar yokEPSS %1flowiseai · flowise10 Eyl 2026
- CVE-2026-6563837İzleyin
Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary comma
KritikCVSS 9,2İstismar yokEPSS %2webpros · configserver security & firewall10 Eyl 2026
- CVE-2026-6563938İzleyin
OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allo
KritikCVSS 9,5İstismar yokEPSS %1webpros · configserver security & firewall10 Eyl 2026
- CVE-2026-6848739İzleyin
Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.
KritikCVSS 9,9İstismar yokEPSS %0webpros · plesk10 Eyl 2026
- CVE-2026-6848839İzleyin
A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to root
KritikCVSS 9,9İstismar yokEPSS %0webpros · plesk10 Eyl 2026
- CVE-2026-7369335İzleyin
FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler
YüksekCVSS 8,7İstismar yokEPSS %2filerun · filerun10 Eyl 2026
- CVE-2026-7369435İzleyin
FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition
YüksekCVSS 8,6İstismar yokEPSS %2filerun · filerun10 Eyl 2026
- CVE-2026-7369834İzleyin
FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add Action
YüksekCVSS 8,6İstismar yokEPSS %0filerun · filerun10 Eyl 2026
- CVE-2026-7369934İzleyin
FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()
YüksekCVSS 8,6İstismar yokEPSS %0filerun · filerun10 Eyl 2026
- CVE-2026-8522835İzleyin
Integer overflow in tensor buffer validation in Deep Java Library
YüksekCVSS 8,8İstismar yokEPSS %0amazon · deep java library10 Eyl 2026
- CVE-2026-8804436İzleyin
rclone: RC per-server auth-proxy bypass
KritikCVSS 9,1İstismar yokEPSS %0rclone · rclone10 Eyl 2026
- CVE-2026-8804530İzleyin
rclone: S3 multipart declared-length memory exhaustion
YüksekCVSS 7,5İstismar yokEPSS %0rclone · rclone10 Eyl 2026
- CVE-2026-8804734İzleyin
Tesseract: ReadNormProtos stack buffer overflow
YüksekCVSS 8,6İstismar yokEPSS %0tesseract-ocr · tesseract ocr10 Eyl 2026
- CVE-2026-8804834İzleyin
Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch
YüksekCVSS 8,6İstismar yokEPSS %0tesseract-ocr · tesseract ocr10 Eyl 2026
- CVE-2026-8804934İzleyin
Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch
YüksekCVSS 8,6İstismar yokEPSS %0tesseract-ocr · tesseract ocr10 Eyl 2026
- CVE-2026-8886037İzleyin
Capgo Authorization Bypass via Stale Channel Permission Overrides
KritikCVSS 9,3İstismar yokEPSS %0cap-go · capgo.app10 Eyl 2026
- CVE-2026-8886134İzleyin
Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization
YüksekCVSS 8,7Kavram kanıtıEPSS %0cap-go · capgo.app10 Eyl 2026
- CVE-2026-8886234İzleyin
Capgo API Key Manager Authentication Bypass via x-limited-key-id
YüksekCVSS 8,7İstismar yokEPSS %0cap-go · capgo.app10 Eyl 2026
- CVE-2026-8886437İzleyin
Capgo SSO Provider Authentication Bypass via PostgREST Direct Write
KritikCVSS 9,3İstismar yokEPSS %0cap-go · capgo.app10 Eyl 2026
- CVE-2026-8887737İzleyin
Traefik v3.7.0 Authentication Bypass via from-to-www-redirect
KritikCVSS 9,3Kavram kanıtıEPSS %0traefik · traefik10 Eyl 2026
- CVE-2026-8888036İzleyin
Renovate before 44.11.3 Credential Exfiltration via Link Header
KritikCVSS 9,2İstismar yokEPSS %0renovatebot · renovate10 Eyl 2026
- CVE-2026-8888136İzleyin
Renovate before 44.11.3 Credential Exfiltration via Link Header
KritikCVSS 9,2İstismar yokEPSS %0renovatebot · renovate10 Eyl 2026
- CVE-2026-8888236İzleyin
Renovate before 44.11.2 Credential Exfiltration via Link Header
KritikCVSS 9,2İstismar yokEPSS %0renovatebot · renovate10 Eyl 2026
- CVE-2026-8888333İzleyin
Renovate before 44.14.4 TLS Private Key Log Sanitisation
YüksekCVSS 8,3İstismar yokEPSS %0renovatebot · renovate10 Eyl 2026
- CVE-2026-8888529İzleyin
Renovate before 44.14.7 Command Injection via depName
YüksekCVSS 7,3İstismar yokEPSS %0renovatebot · renovate10 Eyl 2026
- CVE-2026-8888634İzleyin
Renovate before 44.14.7 Command Injection via gradle-wrapper
YüksekCVSS 8,5İstismar yokEPSS %0renovatebot · renovate10 Eyl 2026
- CVE-2026-8888736İzleyin
Renovate before 44.11.2 Credential Exfiltration via Link Header
KritikCVSS 9,2İstismar yokEPSS %0renovatebot · renovate10 Eyl 2026
- CVE-2026-8888829İzleyin
Renovate before 44.14.7 Command Injection via Mix organization
YüksekCVSS 7,3İstismar yokEPSS %0renovatebot · renovate10 Eyl 2026
- CVE-2026-8888934İzleyin
Renovate before 44.14.7 Command Injection via distributionType
YüksekCVSS 8,5İstismar yokEPSS %1renovatebot · renovate10 Eyl 2026
- CVE-2026-8889033İzleyin
OpenPanel through 2.3.0 SQL Injection via unvalidated profile filter column identifier
YüksekCVSS 8,4İstismar yokEPSS %0openpanel-dev · openpanel10 Eyl 2026
- CVE-2026-8889128İzleyin
OpenPanel through 2.3.0 Read-Only Access Level Enforcement Bypass via Mutations
YüksekCVSS 7,2İstismar yokEPSS %0openpanel-dev · openpanel10 Eyl 2026
- CVE-2026-8889334İzleyin
OpenPanel through 2.3.0 Unauthenticated Share Lookup Information Disclosure
YüksekCVSS 8,7İstismar yokEPSS %0openpanel-dev · openpanel10 Eyl 2026
- CVE-2026-1541928İzleyin
CP210x Driver Memory Corruption results in Arbitrary Code Execution
YüksekCVSS 7,0İstismar yokEPSS %0silicon labs · silabser.sys driver10 Eyl 2026
- CVE-2026-6800636İzleyin
An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_parser.rl file
KritikCVSS 9,1İstismar yokEPSS %010 Eyl 2026
- CVE-2026-8805134İzleyin
Tesseract: Heap out-of-bounds write in GenericVector<T>::read due to independent reserved/size_used_ fields
YüksekCVSS 8,6İstismar yokEPSS %0tesseract-ocr · tesseract ocr10 Eyl 2026
- CVE-2026-8805231İzleyin
Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization
YüksekCVSS 7,8İstismar yokEPSS %0tesseract-ocr · tesseract ocr10 Eyl 2026
- CVE-2026-8805334İzleyin
Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates via unvalidated counts in crafted .traineddata
YüksekCVSS 8,6İstismar yokEPSS %0tesseract-ocr · tesseract ocr10 Eyl 2026
- CVE-2026-8904237İzleyin
passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification
KritikCVSS 9,3İstismar yokEPSS %0krakenjs · passport-saml-encrypted10 Eyl 2026
- CVE-2026-8904336İzleyin
passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending
KritikCVSS 9,1İstismar yokEPSS %0krakenjs · passport-saml-encrypted10 Eyl 2026
- CVE-2026-8904635İzleyin
zstd-jni 1.5.5-6 through 1.5.7-13 Out-of-Bounds Read via Negative Offset
YüksekCVSS 8,8İstismar yokEPSS %0luben · zstd-jni10 Eyl 2026
- GHSA-x7m8-jrm8-hpvx32İzleyin
@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name
YüksekCVSS 8,1İstismar yoknpm · @eigenpal/docx-editor-core10 Eyl 2026
- CVE-2026-4574730İzleyin
Suricata lua/tls: null dereference in TlsGetCertInfo
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata10 Eyl 2026
- CVE-2026-4638730İzleyin
Suricata http2: decompression bomb can cause denial of service in Suricata
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata10 Eyl 2026
- CVE-2026-8709033İzleyin
Consul vulnerable to an authorization bypass in the catalog node-write path
YüksekCVSS 8,3İstismar yokEPSS %0hashicorp · consul10 Eyl 2026
- CVE-2026-8799330İzleyin
Consul-template vulnerable to an information disclosure issue in error handling
YüksekCVSS 7,7İstismar yokEPSS %0hashicorp · tooling10 Eyl 2026
- CVE-2026-8802128İzleyin
Consul vulnerable to an authorization bypass in the Connect service mesh
YüksekCVSS 7,1İstismar yokEPSS %0hashicorp · consul10 Eyl 2026
- CVE-2026-8803232İzleyin
Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver
YüksekCVSS 8,2İstismar yokEPSS %0mongodb · java driver10 Eyl 2026
- CVE-2026-8904934İzleyin
Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
YüksekCVSS 8,5İstismar yokEPSS %0aws · amazon ssm agent10 Eyl 2026
- CVE-2026-933630İzleyin
IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
YüksekCVSS 7,5İstismar yokEPSS %0ibm · websphere application server10 Eyl 2026
- CVE-2026-8178432İzleyin
WordPress Wise Chat plugin <= 3.4.2 - PHP Object Injection vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0marcin · wise chat10 Eyl 2026
- CVE-2026-8179930İzleyin
WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0wp swings · return refund and exchange for woocommerce10 Eyl 2026
- CVE-2026-8892428İzleyin
Gvfs: gvfs-admin socket ownership race permits local root
YüksekCVSS 7,0İstismar yokEPSS %0gnome · gvfs10 Eyl 2026
- CVE-2026-8901128İzleyin
isomorphic-git < 1.42.0 Prototype Pollution via getRemoteInfo
YüksekCVSS 7,1İstismar yokEPSS %0isomorphic-git · isomorphic-git10 Eyl 2026
- CVE-2026-8905432İzleyin
OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changes
YüksekCVSS 8,2İstismar yokEPSS %0the opennms group · horizon10 Eyl 2026
- CVE-2026-8908636İzleyin
In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and pro
KritikCVSS 9,1İstismar yokEPSS %0ocaml · jose10 Eyl 2026
- CVE-2026-8908729İzleyin
The cstruct package before 6.3.0 for OCaml mishandles indexes.
YüksekCVSS 7,3İstismar yokEPSS %0ocaml · cstruct10 Eyl 2026
- CVE-2026-1181334İzleyin
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated us
YüksekCVSS 8,5İstismar yokEPSS %0lenovo · filez client10 Eyl 2026
- CVE-2026-1899433İzleyin
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the
YüksekCVSS 8,4İstismar yokEPSS %0lenovo · file manager application10 Eyl 2026
- CVE-2026-1913633İzleyin
A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese marke
YüksekCVSS 8,4İstismar yokEPSS %1lenovo · tianxi ai agent pc application10 Eyl 2026
- CVE-2026-4575930İzleyin
Suricata http1: quadratic Content-Disposition processing can lead to denial of service
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata10 Eyl 2026
- CVE-2026-6342734İzleyin
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrar
YüksekCVSS 8,5İstismar yokEPSS %0lenovo · software fix10 Eyl 2026
- CVE-2026-7594037İzleyin
A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attack
KritikCVSS 9,3İstismar yokEPSS %0lenovo · health application10 Eyl 2026
- CVE-2026-7959131İzleyin
A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation o
YüksekCVSS 7,8İstismar yokEPSS %010 Eyl 2026
- CVE-2026-7959230İzleyin
An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validation of file-controll
YüksekCVSS 7,5İstismar yokEPSS %010 Eyl 2026
- CVE-2026-8502539İzleyin
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
KritikCVSS 9,8İstismar yokEPSS %0langflow · langflow10 Eyl 2026
- CVE-2026-8908926İzleyin
OpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER)
OrtaCVSS 6,5İstismar yokEPSS %0the opennms group · meridian10 Eyl 2026
- CVE-2026-8909439İzleyin
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/templat
KritikCVSS 9,9İstismar yokEPSS %0forgejo · forgejo10 Eyl 2026
- CVE-2026-917628İzleyin
IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
YüksekCVSS 7,1İstismar yokEPSS %0ibm · websphere application server10 Eyl 2026
- CVE-2026-932732İzleyin
IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
YüksekCVSS 8,1İstismar yokEPSS %0ibm · websphere application server10 Eyl 2026
- CVE-2026-1964636İzleyin
Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
KritikCVSS 9,1İstismar yokEPSS %0ibm · common licensing10 Eyl 2026
- CVE-2026-231031İzleyin
IBM webMethods Integration Server is vulnerable to an XML external entity injection (XXE) attack when processing XML data
YüksekCVSS 7,8İstismar yokEPSS %0ibm · webmethods integration server10 Eyl 2026
- CVE-2026-3639221İzleyin
FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS).
OrtaCVSS 5,4Kavram kanıtıEPSS %010 Eyl 2026
- CVE-2026-4576436İzleyin
Suricata http2: protocol-change type confusion can lead to denial of service
KritikCVSS 9,1İstismar yokEPSS %0oisf · suricata10 Eyl 2026
- CVE-2026-4576530İzleyin
Suricata dnp3: unbounded reassembly can lead to resource exhaustion
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata10 Eyl 2026
- CVE-2026-4576630İzleyin
Suricata nfs: unbounded stateful structures can lead to resource exhaustion
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata10 Eyl 2026
- CVE-2026-4576830İzleyin
Suricata ldap: unbounded responses per transaction can lead to resource exhaustion
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata10 Eyl 2026
- CVE-2026-4576931İzleyin
ikev2: unbounded client transform storage can lead to resource exhaustion
YüksekCVSS 7,5İstismar yokEPSS %1oisf · suricata10 Eyl 2026
- CVE-2026-4577030İzleyin
Suricata lua: excessive flow variable registration can bypass sandbox
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata10 Eyl 2026
- CVE-2026-7164036İzleyin
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via
KritikCVSS 9,1İstismar yokEPSS %010 Eyl 2026
- CVE-2026-7164330İzleyin
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a den
YüksekCVSS 7,5İstismar yokEPSS %010 Eyl 2026
- CVE-2026-7164530İzleyin
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial
YüksekCVSS 7,5İstismar yokEPSS %010 Eyl 2026
- CVE-2026-7164730İzleyin
An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of servic
YüksekCVSS 7,5İstismar yokEPSS %010 Eyl 2026
- CVE-2026-7562435İzleyin
IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Service
YüksekCVSS 8,8İstismar yokEPSS %0ibm · app connect enterprise10 Eyl 2026
- CVE-2026-7577735İzleyin
Multiple vulnerabilities in IBM Aspera Enterprise Webapps
YüksekCVSS 8,8İstismar yokEPSS %0ibm · aspera enterprise webapps10 Eyl 2026
- CVE-2026-7605935İzleyin
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
YüksekCVSS 8,8İstismar yokEPSS %0langflow · langflow10 Eyl 2026
- CVE-2026-7856935İzleyin
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
YüksekCVSS 8,8İstismar yokEPSS %0langflow · langflow10 Eyl 2026
- CVE-2026-7857135İzleyin
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
YüksekCVSS 8,8İstismar yokEPSS %0langflow · langflow10 Eyl 2026
- CVE-2026-7857339İzleyin
IBM ContextForge MCP Gateway is affected by use of default credentials
KritikCVSS 9,8İstismar yokEPSS %0ibm · contextforge10 Eyl 2026
- CVE-2026-7857535İzleyin
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
YüksekCVSS 8,8İstismar yokEPSS %0langflow · langflow10 Eyl 2026
- CVE-2026-7972439İzleyin
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
KritikCVSS 9,8İstismar yokEPSS %0langflow · langflow10 Eyl 2026
- CVE-2026-7974235İzleyin
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
YüksekCVSS 8,8İstismar yokEPSS %0langflow · langflow10 Eyl 2026
- CVE-2026-8038028İzleyin
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
YüksekCVSS 7,1İstismar yokEPSS %0ibm · datastage on cloud pak for data10 Eyl 2026
- CVE-2026-8042436İzleyin
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
KritikCVSS 9,1İstismar yokEPSS %0ibm · datastage on cloud pak for data10 Eyl 2026
- CVE-2026-8043634İzleyin
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
YüksekCVSS 8,5İstismar yokEPSS %0ibm · datastage on cloud pak for data10 Eyl 2026
- CVE-2026-8120439İzleyin
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
KritikCVSS 9,8İstismar yokEPSS %0langflow · langflow10 Eyl 2026
- CVE-2026-8120734İzleyin
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
YüksekCVSS 8,5İstismar yokEPSS %0ibm · datastage on cloud pak for data10 Eyl 2026
- CVE-2026-8121030İzleyin
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
YüksekCVSS 7,7İstismar yokEPSS %0ibm · datastage on cloud pak for data10 Eyl 2026
- CVE-2026-8121135İzleyin
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
YüksekCVSS 8,8İstismar yokEPSS %0langflow · langflow10 Eyl 2026