İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.961 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 27 / 80

  • CVE-2026-81213
    34İzleyin

    Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches

    YüksekCVSS 8,6İstismar yokEPSS %0

    langflow · langflow10 Eyl 2026

  • CVE-2026-81265
    30İzleyin

    Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches

    YüksekCVSS 7,5İstismar yokEPSS %0

    langflow · langflow10 Eyl 2026

  • CVE-2026-81268
    32İzleyin

    Langflow is vulnerable to authentication bypass and insufficient session expiration

    YüksekCVSS 8,1İstismar yokEPSS %0

    langflow · langflow10 Eyl 2026

  • CVE-2026-81540
    34İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

    YüksekCVSS 8,5İstismar yokEPSS %0

    ibm · datastage on cloud pak for data10 Eyl 2026

  • CVE-2026-81550
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data10 Eyl 2026

  • CVE-2026-81551
    32İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

    YüksekCVSS 8,1İstismar yokEPSS %0

    ibm · datastage on cloud pak for data10 Eyl 2026

  • CVE-2026-81940
    35İzleyin

    Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

    YüksekCVSS 8,8İstismar yokEPSS %0

    langflow · langflow10 Eyl 2026

  • CVE-2026-81941
    35İzleyin

    Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

    YüksekCVSS 8,8İstismar yokEPSS %0

    langflow · langflow10 Eyl 2026

  • CVE-2026-82095
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data10 Eyl 2026

  • CVE-2026-82097
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data10 Eyl 2026

  • CVE-2026-82098
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data10 Eyl 2026

  • CVE-2026-82099
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data10 Eyl 2026

  • CVE-2026-82107
    38İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

    KritikCVSS 9,6İstismar yokEPSS %0

    ibm · datastage on cloud pak for data10 Eyl 2026

  • CVE-2026-84889
    35İzleyin

    A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem

    YüksekCVSS 8,8İstismar yokEPSS %0

    langflow · langflow10 Eyl 2026

  • CVE-2026-86093
    30İzleyin

    IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · db210 Eyl 2026

  • CVE-2026-87958
    32İzleyin

    IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions

    YüksekCVSS 8,1İstismar yokEPSS %0

    ibm · db210 Eyl 2026

  • CVE-2026-88022
    33İzleyin

    Unauthorized document disclosure and deletion via query-operator injection in explicit equality filters in MongoDB integration for Laravel

    YüksekCVSS 8,4İstismar yokEPSS %0

    mongodb · laravel mongodb10 Eyl 2026

  • CVE-2026-88026
    28İzleyin

    Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver

    YüksekCVSS 7,1İstismar yokEPSS %0

    mongodb · c# driver10 Eyl 2026

  • CVE-2026-88027
    28İzleyin

    Mass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for Laravel

    YüksekCVSS 7,1İstismar yokEPSS %0

    mongodb · laravel mongodb10 Eyl 2026

  • CVE-2026-88028
    28İzleyin

    Unauthorized document disclosure via query-operator injection in polymorphic relation identifiers in MongoDB integration for Laravel

    YüksekCVSS 7,1İstismar yokEPSS %0

    mongodb · laravel mongodb10 Eyl 2026

  • CVE-2026-16174
    34İzleyin

    Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow

    YüksekCVSS 8,7İstismar yokEPSS %0

    netskope · endpoint dlp10 Eyl 2026

  • CVE-2026-88056
    34İzleyin

    Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

    YüksekCVSS 8,6İstismar yokEPSS %0

    angular · angular10 Eyl 2026

  • CVE-2026-88058
    34İzleyin

    Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

    YüksekCVSS 8,6İstismar yokEPSS %0

    angular · angular10 Eyl 2026

  • CVE-2026-88060
    34İzleyin

    Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

    YüksekCVSS 8,6İstismar yokEPSS %0

    angular · angular10 Eyl 2026

  • CVE-2026-88062
    38İzleyin

    OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

    KritikCVSS 9,5Kavram kanıtıEPSS %1

    diegosouzapw · omniroute10 Eyl 2026

  • CVE-2026-77807
    30İzleyin

    AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Para

    YüksekCVSS 7,5İstismar yokEPSS %0

    acyba · acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress10 Eyl 2026

  • CVE-2026-45751
    30İzleyin

    Suricata detect/transform: use-after-free in dotprefix transform

    YüksekCVSS 7,5İstismar yokEPSS %0

    oisf · suricata10 Eyl 2026

  • GHSA-wfgq-w7cq-qj7j
    28İzleyin

    mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url

    YüksekCVSS 7,2İstismar yok

    crates.io · mistralrs-server-core10 Eyl 2026

  • GHSA-m3wp-48jr-vr4g
    30İzleyin

    mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS

    YüksekCVSS 7,5İstismar yok

    crates.io · mistralrs-server-core10 Eyl 2026

  • CVE-2025-57231
    31İzleyin

    Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    10 Eyl 2026

  • CVE-2026-45762
    30İzleyin

    Suricata defrag: missing address-family check can lead to remote crash

    YüksekCVSS 7,5İstismar yokEPSS %0

    oisf · suricata10 Eyl 2026

  • CVE-2026-78130
    30İzleyin

    strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.

    YüksekCVSS 7,5İstismar yokEPSS %0

    strongswan · strongswan10 Eyl 2026

  • CVE-2026-78132
    30İzleyin

    strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.

    YüksekCVSS 7,5İstismar yokEPSS %0

    strongswan · strongswan10 Eyl 2026

  • CVE-2026-78133
    30İzleyin

    libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.

    YüksekCVSS 7,5İstismar yokEPSS %0

    strongswan · strongswan10 Eyl 2026

  • CVE-2026-78134
    28İzleyin

    strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatche

    YüksekCVSS 7,1İstismar yokEPSS %0

    strongswan · strongswan10 Eyl 2026

  • CVE-2026-78135
    29İzleyin

    libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine.

    YüksekCVSS 7,3İstismar yokEPSS %0

    strongswan · strongswan10 Eyl 2026

  • CVE-2026-88260
    34İzleyin

    Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzco

    YüksekCVSS 8,7İstismar yokEPSS %0

    brainzcompany · zenius ems 8.010 Eyl 2026

  • CVE-2026-15462
    30İzleyin

    Sticky Chat Widget <= 1.4.2 - Unauthenticated SQL Injection

    YüksekCVSS 7,5İstismar yokEPSS %0

    gingerplugins · sticky chat widget – floating chat icons, contact form, call, click to chat, email & message buttons11 Eyl 2026

  • CVE-2026-18561
    30İzleyin

    Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection

    YüksekCVSS 7,5İstismar yokEPSS %0

    unitecms · unlimited elements for elementor11 Eyl 2026

  • CVE-2026-18579
    28İzleyin

    WP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site Scripting

    YüksekCVSS 7,2İstismar yokEPSS %0

    opajaap · wp photo album plus11 Eyl 2026

  • CVE-2026-17176
    34İzleyin

    OS Command Injection Vulnerability in Deco Devices

    YüksekCVSS 7,7İstismar yokEPSS %14

    tp-link systems inc. · deco be11000 v211 Eyl 2026

  • CVE-2026-19991
    32İzleyin

    UsersWP <= 1.2.70 - Authenticated (Subscriber+) Arbitrary File Deletion

    YüksekCVSS 8,1İstismar yokEPSS %0

    stiofansisland · userswp – front-end login form, user registration, user profile & members directory plugin for wp11 Eyl 2026

  • CVE-2026-81754
    28İzleyin

    Vigilant <= 2.10.2 - Unauthenticated Stored Cross-Site Scripting

    YüksekCVSS 7,2İstismar yokEPSS %0

    fernandot · vigilant – 100% free security suite: firewall, 2fa, login, headers, scanner…11 Eyl 2026

  • CVE-2026-81825
    28İzleyin

    Simple Ajax Chat <= 20260811 - Unauthenticated Stored Cross-Site Scripting

    YüksekCVSS 7,2İstismar yokEPSS %0

    specialk · simple ajax chat – add a fast, secure chat box11 Eyl 2026

  • CVE-2026-89157
    29İzleyin

    PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.

    YüksekCVSS 7,4İstismar yokEPSS %0

    pcre · pcre211 Eyl 2026

  • CVE-2026-89161
    31İzleyin

    In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context.

    YüksekCVSS 7,8İstismar yokEPSS %0

    pcre · pcre211 Eyl 2026

  • CVE-2026-8778
    39İzleyin

    MIPL Grouped Checkout Fields for WooCommerce <= 1.2.2 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8İstismar yokEPSS %1

    mulika · mipl grouped checkout fields for woocommerce. customize & organize checkout fields.11 Eyl 2026

  • CVE-2026-89060
    30İzleyin

    Stolostron/multicluster-observability-addon: cross-namespace secret disclosure in multicluster-observability-addon via unvalidated configuration references

    YüksekCVSS 7,7İstismar yokEPSS %0

    red hat · red hat advanced cluster management for kubernetes 2.1311 Eyl 2026

  • CVE-2026-14559
    39İzleyin

    Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Account Takeover

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · teddy-bear-customize-addon11 Eyl 2026

  • CVE-2026-14560
    40Planlayın

    Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Arbitrary File Upload

    KritikCVSS 10,0İstismar yokEPSS %0

    unknown · teddy-bear-customize-addon11 Eyl 2026

  • CVE-2026-14563
    39İzleyin

    Advanced Customized Prompts <= 1.0.1 - Unauthenticated Account Takeover

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · advanced-customized-prompts11 Eyl 2026

  • CVE-2026-73784
    35İzleyin

    HPE IceWall products, Remote Bypass of Security Restrictions

    YüksekCVSS 8,8İstismar yokEPSS %0

    hewlett packard enterprise · hpe icewall products11 Eyl 2026

  • CVE-2026-73785
    30İzleyin

    HPE IceWall Federation Agent and Proxy, Denial of Service vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    hewlett packard enterprise · hpe icewall products11 Eyl 2026

  • CVE-2026-74925
    28İzleyin

    MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administrator

    YüksekCVSS 7,2İstismar yokEPSS %0

    unknown · multivendorx11 Eyl 2026

  • CVE-2026-85677
    35İzleyin

    Gutenverse News < 3.3.3 - Unauthenticated Stored XSS via Comment Content

    YüksekCVSS 8,8İstismar yokEPSS %0

    unknown · gutenverse news11 Eyl 2026

  • CVE-2026-87908
    30İzleyin

    multiparty vulnerable to Denial of Service via unbounded part-header accumulation

    YüksekCVSS 7,5İstismar yokEPSS %0

    multiparty · multiparty11 Eyl 2026

  • CVE-2026-89174
    34İzleyin

    Kingdom Communication Associated｜Smart Video Intercom System - Missing Burte-force Protection

    YüksekCVSS 8,7İstismar yokEPSS %0

    kingdom communication associated · eh304011 Eyl 2026

  • CVE-2026-89176
    34İzleyin

    Howyar｜WeenyGenius - Missing Authentication

    YüksekCVSS 8,7İstismar yokEPSS %0

    howyar · weenygenius11 Eyl 2026

  • CVE-2026-89177
    34İzleyin

    Howyar｜WeenyGenius - Use of Insecure Protocol

    YüksekCVSS 8,7İstismar yokEPSS %0

    howyar · weenygenius11 Eyl 2026

  • CVE-2026-89178
    34İzleyin

    Howyar｜WeenyGenius - Origin Validation Error

    YüksekCVSS 8,7İstismar yokEPSS %0

    howyar · weenygenius11 Eyl 2026

  • CVE-2026-19486
    34İzleyin

    SSRF in Gemini Enterprise Agent Platform App Builder

    YüksekCVSS 8,7İstismar yokEPSS %0

    google cloud · gemini enterprise agent platform app builder11 Eyl 2026

  • CVE-2026-80469
    33İzleyin

    An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verific

    YüksekCVSS 8,3İstismar yokEPSS %0

    sick ag · sentio creator extension 'device manager'11 Eyl 2026

  • CVE-2026-17037
    28İzleyin

    Kirki <= 6.2.0 - Unauthenticated Stored Cross-Site Scripting via 'comment' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    themeum · kirki – freeform page builder, website builder & customizer11 Eyl 2026

  • CVE-2026-47839
    36İzleyin

    Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin

    KritikCVSS 9,2İstismar yokEPSS %0

    cloud foundry foundation · uaa11 Eyl 2026

  • CVE-2026-89146
    34İzleyin

    libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses

    YüksekCVSS 8,7İstismar yokEPSS %0

    libp2p · libp2p-rendezvous11 Eyl 2026

  • CVE-2026-89147
    34İzleyin

    Net-SNMP through 5.9.5.2 Denial of Service via Blocking Unauthenticated SMUX Read

    YüksekCVSS 8,7İstismar yokEPSS %0

    net-snmp · net-snmp11 Eyl 2026

  • CVE-2026-86793
    39İzleyin

    SGLang allows unauthenticated pickle deserialization through /update_weights_from_tensor when no auth keys are configured, and the SafeUnpic

    KritikCVSS 9,8İstismar yokEPSS %0

    sglang · sglang11 Eyl 2026

  • CVE-2026-87776
    30İzleyin

    compression vulnerable to Denial of Service via memory leak on premature response close

    YüksekCVSS 7,5İstismar yokEPSS %0

    compression · compression11 Eyl 2026

  • CVE-2026-89243
    36İzleyin

    WWBN AVideo Stored XSS via UserGroups setGroup_name

    KritikCVSS 9,2İstismar yokEPSS %0

    wwbn · avideo11 Eyl 2026

  • CVE-2026-89245
    28İzleyin

    WWBN AVideo Cross-Site Request Forgery via playlistRemove.php

    YüksekCVSS 7,1İstismar yokEPSS %0

    wwbn · avideo11 Eyl 2026

  • CVE-2026-89249
    37İzleyin

    AVideo YPTWallet Stored XSS via CryptoWallet Configuration

    KritikCVSS 9,3İstismar yokEPSS %0

    wwbn · avideo11 Eyl 2026

  • CVE-2026-89250
    34İzleyin

    WWBN AVideo Unauthenticated File Read via getRecordedFile.php

    YüksekCVSS 8,7İstismar yokEPSS %0

    wwbn · avideo11 Eyl 2026

  • CVE-2026-89251
    28İzleyin

    AVideo Missing Authorization via AD_Server log.php Wallet Credit

    YüksekCVSS 7,1İstismar yokEPSS %0

    wwbn · avideo11 Eyl 2026

  • CVE-2026-89252
    28İzleyin

    AVideo Missing Authorization in addLiveLink.php LiveLink Update

    YüksekCVSS 7,1İstismar yokEPSS %0

    wwbn · avideo11 Eyl 2026

  • CVE-2026-89253
    37İzleyin

    AVideo Stored XSS via donationLink in watch page button

    KritikCVSS 9,3İstismar yokEPSS %0

    wwbn · avideo11 Eyl 2026

  • CVE-2026-89254
    37İzleyin

    AVideo CustomizeUser Stored XSS via field_name Parameter

    KritikCVSS 9,3İstismar yokEPSS %0

    wwbn · avideo11 Eyl 2026

  • CVE-2026-89255
    37İzleyin

    AVideo LoginControl Stored XSS via PGP Public Key

    KritikCVSS 9,3İstismar yokEPSS %0

    wwbn · avideo11 Eyl 2026

  • CVE-2026-89256
    37İzleyin

    AVideo Bookmark Plugin Stored XSS via Chapter Names

    KritikCVSS 9,3İstismar yokEPSS %0

    wwbn · avideo11 Eyl 2026

  • CVE-2026-89258
    37İzleyin

    Hugo before v0.165.0 Symlink Confinement Bypass via resources.Get

    KritikCVSS 9,3İstismar yokEPSS %0

    gohugoio · hugo11 Eyl 2026

  • CVE-2026-89259
    37İzleyin

    Hugo before v0.165.0 Insufficient Permission Restriction via TailwindCSS

    KritikCVSS 9,3İstismar yokEPSS %0

    gohugoio · hugo11 Eyl 2026

  • CVE-2025-15679
    29İzleyin

    BMC root account active without password on BullSequana XH3406 and XH3515

    YüksekCVSS 7,3İstismar yokEPSS %0

    bull · bullsequana xh340611 Eyl 2026

  • CVE-2026-80462
    41Planlayın

    Privilege Escalation in Progress Chef Automate

    KritikCVSS 10,0Kavram kanıtıEPSS %2

    progress software · chef automate11 Eyl 2026

  • CVE-2026-84390
    39İzleyin

    A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7

    KritikCVSS 9,8İstismar yokEPSS %0

    fortinet · fortimonitoronsight11 Eyl 2026

  • CVE-2026-57842
    29İzleyin

    NetBSD COMPAT_NETBSD32 Double Free / Use-After-Free via recvmsg() msg_iovlen

    YüksekCVSS 7,3İstismar yokEPSS %0

    the netbsd foundation · netbsd11 Eyl 2026

  • CVE-2026-71641
    30İzleyin

    An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a den

    YüksekCVSS 7,5İstismar yokEPSS %0

    11 Eyl 2026

  • CVE-2026-71644
    39İzleyin

    An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe tr

    KritikCVSS 9,8İstismar yokEPSS %0

    11 Eyl 2026

  • CVE-2026-89212
    36İzleyin

    XML External Entity in Akana API Platform

    KritikCVSS 9,2İstismar yokEPSS %0

    perforce · akana11 Eyl 2026

  • CVE-2026-38056
    37İzleyin

    ST Engineering iDirect iQ-Series Terminals Missing Authorization

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    st engineering idirect · evolution iq‑series terminals11 Eyl 2026

  • CVE-2026-38058
    34İzleyin

    ST Engineering iDirect iQ-Series Terminals Exposure of Sensitive System Information to an Unauthorized Control Sphere

    YüksekCVSS 8,6İstismar yokEPSS %0

    st engineering idirect · evolution iq‑series terminals11 Eyl 2026

  • CVE-2026-78224
    35İzleyin

    NextGen Healthcare Mirth Connect Improper Restriction of XML External Entity Reference

    YüksekCVSS 8,8İstismar yokEPSS %0

    nextgen healthcare · mirth connect11 Eyl 2026

  • CVE-2026-82578
    34İzleyin

    NextGen Healthcare Mirth Connect Improper Restriction of XML External Entity Reference

    YüksekCVSS 8,7İstismar yokEPSS %0

    nextgen healthcare · mirth connect11 Eyl 2026

  • CVE-2026-82583
    28İzleyin

    NextGen Healthcare Mirth Connect SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %0

    nextgen healthcare · mirth connect11 Eyl 2026

  • CVE-2026-85083
    28İzleyin

    CareCam Pro IP Cameras Use of Hard-coded Credentials

    YüksekCVSS 7,0İstismar yokEPSS %0

    carecam · anjia ajl33pc0801 firmware11 Eyl 2026

  • CVE-2026-85979
    34İzleyin

    Command Injection in Puppet Enterprise

    YüksekCVSS 8,6İstismar yokEPSS %1

    perforce software · puppet enterprise11 Eyl 2026

  • CVE-2026-87020
    28İzleyin

    Orthanc DICOM Server Integer Overflow or Wraparound

    YüksekCVSS 7,2İstismar yokEPSS %0

    orthanc · dicom server11 Eyl 2026

  • CVE-2026-87983
    36İzleyin

    An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using

    KritikCVSS 9,2İstismar yokEPSS %0

    mistralai · mistral-vibe11 Eyl 2026

  • CVE-2026-87984
    37İzleyin

    An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside

    KritikCVSS 9,3İstismar yokEPSS %0

    mistralai · mistral-vibe11 Eyl 2026

  • CVE-2026-87985
    40Planlayın

    An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted argumen

    KritikCVSS 10,0İstismar yokEPSS %0

    mistralai · mistral-vibe11 Eyl 2026

  • CVE-2026-87986
    40Planlayın

    An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's

    KritikCVSS 10,0İstismar yokEPSS %0

    mistralai · mistral-vibe11 Eyl 2026

  • CVE-2026-87987
    40Planlayın

    An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable

    KritikCVSS 10,0İstismar yokEPSS %0

    mistralai · mistral-vibe11 Eyl 2026