İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.957 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 28 / 80

  • CVE-2026-87020
    28İzleyin

    Orthanc DICOM Server Integer Overflow or Wraparound

    YüksekCVSS 7,2İstismar yokEPSS %0

    orthanc · dicom server11 Eyl 2026

  • CVE-2026-87983
    36İzleyin

    An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions using

    KritikCVSS 9,2İstismar yokEPSS %0

    mistralai · mistral-vibe11 Eyl 2026

  • CVE-2026-87984
    37İzleyin

    An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside

    KritikCVSS 9,3İstismar yokEPSS %0

    mistralai · mistral-vibe11 Eyl 2026

  • CVE-2026-87985
    40Planlayın

    An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted argumen

    KritikCVSS 10,0İstismar yokEPSS %0

    mistralai · mistral-vibe11 Eyl 2026

  • CVE-2026-87986
    40Planlayın

    An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's

    KritikCVSS 10,0İstismar yokEPSS %0

    mistralai · mistral-vibe11 Eyl 2026

  • CVE-2026-87987
    40Planlayın

    An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable

    KritikCVSS 10,0İstismar yokEPSS %0

    mistralai · mistral-vibe11 Eyl 2026

  • CVE-2026-87988
    40Planlayın

    An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as un

    KritikCVSS 10,0İstismar yokEPSS %0

    mistralai · mistral-vibe11 Eyl 2026

  • CVE-2026-89009
    35İzleyin

    WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_server

    YüksekCVSS 8,8İstismar yokEPSS %1

    wavlink technology · wn535m111 Eyl 2026

  • CVE-2026-89010
    38İzleyin

    WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server

    KritikCVSS 9,3İstismar yokEPSS %3

    wavlink technology · wn535m111 Eyl 2026

  • CVE-2026-8301
    31İzleyin

    OS Command Injection in TUBITAK BILGEM's Pardus-boot-repair

    YüksekCVSS 7,8İstismar yokEPSS %0

    tubitak bilgem software technologies research institute · pardus boot repair11 Eyl 2026

  • CVE-2026-8303
    31İzleyin

    Privilege Escalation in TUBITAK BILGEM's Pardus-software

    YüksekCVSS 7,8İstismar yokEPSS %0

    tubitak bilgem software technologies research institute · pardus-software11 Eyl 2026

  • CVE-2026-3869
    36İzleyin

    CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and

    KritikCVSS 9,2İstismar yokEPSS %0

    schneider electric · modicon m58011 Eyl 2026

  • CVE-2026-68497
    30İzleyin

    jackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of service

    YüksekCVSS 7,5İstismar yokEPSS %0

    fasterxml · jackson-databind11 Eyl 2026

  • CVE-2026-7863
    33İzleyin

    OS Command Injection in TUBITAK BILGEM's Pardus Software

    YüksekCVSS 8,4İstismar yokEPSS %0

    tubitak bilgem software technologies research institute · pardus software11 Eyl 2026

  • CVE-2026-81861
    23İzleyin

    CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized acc

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    schneider electric · scadapack 47x11 Eyl 2026

  • CVE-2026-89012
    28İzleyin

    Dolibarr 24.0.0 < 24.0.1 SQL Filter Denylist Bypass via sqlfilters Parameter

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    dolibarr · dolibarr11 Eyl 2026

  • CVE-2026-89013
    34İzleyin

    Dolibarr 23.0.4 < 24.0.1 Authorization Bypass via hashp Parameter in document.php

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    dolibarr · dolibarr11 Eyl 2026

  • CVE-2026-89066
    33İzleyin

    OS command injection in the task synthesis component in projen

    YüksekCVSS 8,4İstismar yokEPSS %0

    aws · projen11 Eyl 2026

  • CVE-2026-89260
    34İzleyin

    MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint

    YüksekCVSS 8,7İstismar yokEPSS %0

    moxi624 · mogublog11 Eyl 2026

  • CVE-2026-89262
    34İzleyin

    MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check

    YüksekCVSS 8,7İstismar yokEPSS %0

    moxi624 · mogublog11 Eyl 2026

  • CVE-2026-72708
    34İzleyin

    SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    spip · spip11 Eyl 2026

  • CVE-2026-72709
    37İzleyin

    SPIP < 4.4.18 Missing Authorization via ecrire/action/

    KritikCVSS 9,3İstismar yokEPSS %0

    spip · spip11 Eyl 2026

  • CVE-2026-72710
    37İzleyin

    SPIP < 4.4.18 RCE via editer_objet.php Job Queue Injection

    KritikCVSS 9,3İstismar yokEPSS %1

    spip · spip11 Eyl 2026

  • CVE-2026-67211
    30İzleyin

    Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · opennlp11 Eyl 2026

  • CVE-2026-78807
    28İzleyin

    An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA c

    YüksekCVSS 7,1İstismar yokEPSS %0

    11 Eyl 2026

  • CVE-2026-82617
    40Planlayın

    Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns

    KritikCVSS 10,0İstismar yokEPSS %0

    apache · opennlp11 Eyl 2026

  • CVE-2026-89090
    32İzleyin

    Denial of service in the event stream header decoder in AWS SDK for Go v2

    YüksekCVSS 8,2İstismar yokEPSS %0

    aws · aws sdk for go v211 Eyl 2026

  • CVE-2026-71416
    35İzleyin

    Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)

    YüksekCVSS 8,8İstismar yokEPSS %0

    headroomlabs-ai · headroom11 Eyl 2026

  • CVE-2026-62089
    28İzleyin

    WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    pixar labs · master addons for elementor11 Eyl 2026

  • CVE-2026-62102
    35İzleyin

    WordPress Gato GraphQL plugin <= 19.2.3 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    gato graphql · gato graphql11 Eyl 2026

  • CVE-2026-62103
    39İzleyin

    WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    wpeverest · everest forms11 Eyl 2026

  • CVE-2026-62105
    39İzleyin

    WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    themerex · themerex addons11 Eyl 2026

  • CVE-2026-62106
    35İzleyin

    WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    cozy vision technologies pvt. ltd. · sms alert order notifications11 Eyl 2026

  • CVE-2026-62107
    35İzleyin

    WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    masteriyo · masteriyo - lms11 Eyl 2026

  • CVE-2026-62109
    30İzleyin

    WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    wowdevs · sky addons for elementor11 Eyl 2026

  • CVE-2026-62112
    30İzleyin

    WordPress Amelia plugin <= 2.4.9 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    melograno venture studio · amelia11 Eyl 2026

  • CVE-2026-71646
    30İzleyin

    An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial

    YüksekCVSS 7,5İstismar yokEPSS %0

    11 Eyl 2026

  • CVE-2026-79362
    35İzleyin

    Certain Woltlab products are affected by RCE via Cache Poisoning.

    YüksekCVSS 8,8İstismar yokEPSS %0

    11 Eyl 2026

  • CVE-2026-79393
    30İzleyin

    A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera

    YüksekCVSS 7,5İstismar yokEPSS %0

    11 Eyl 2026

  • CVE-2026-79394
    30İzleyin

    An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT

    YüksekCVSS 7,5İstismar yokEPSS %0

    11 Eyl 2026

  • CVE-2026-79395
    39İzleyin

    An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia IPC daemon in Xiongma

    KritikCVSS 9,8İstismar yokEPSS %0

    11 Eyl 2026

  • CVE-2026-79396
    39İzleyin

    Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credenti

    KritikCVSS 9,8İstismar yokEPSS %0

    11 Eyl 2026

  • CVE-2026-52630
    39İzleyin

    SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the

    KritikCVSS 9,8İstismar yokEPSS %0

    11 Eyl 2026

  • CVE-2026-70341
    35İzleyin

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · edge11 Eyl 2026

  • CVE-2026-54047
    36İzleyin

    Laci Synchroni Backend Vulnerable to Account Takeover / User Impersonation via Client-Side Configuration Manipulation

    KritikCVSS 9,2İstismar yokEPSS %0

    lacisynchroni · server11 Eyl 2026

  • CVE-2026-44715
    34İzleyin

    OpenMRS has Broken Access Control in HL7 Configuration

    YüksekCVSS 8,7İstismar yokEPSS %0

    openmrs · org.openmrs.module:legacyui-api11 Eyl 2026

  • CVE-2026-89099
    30İzleyin

    Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

    YüksekCVSS 7,7İstismar yokEPSS %0

    mongodb · mongodb11 Eyl 2026

  • CVE-2026-54072
    37İzleyin

    Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL

    KritikCVSS 9,3İstismar yokEPSS %0

    authorizerdev · authorizer11 Eyl 2026

  • CVE-2026-89266
    35İzleyin

    stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands

    YüksekCVSS 8,8İstismar yokEPSS %0

    nothings · stb_vorbis11 Eyl 2026

  • CVE-2026-53952
    39İzleyin

    GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw

    KritikCVSS 9,8İstismar yokEPSS %0

    getsimplecms-ce · getsimplecms-ce11 Eyl 2026

  • CVE-2026-54135
    30İzleyin

    AirSane has a Remote Denial of Service (OOM) via Unvalidated Content-Length in HTTP Server

    YüksekCVSS 7,5İstismar yokEPSS %0

    simulpiscator · airsane11 Eyl 2026

  • CVE-2026-80926
    39İzleyin

    ksmbd: fix use-after-free in oplock break notification

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80928
    31İzleyin

    smack: fix cred UAF in smack_file_send_sigiotask()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80929
    31İzleyin

    sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80931
    31İzleyin

    w1: ds28e17: reject an oversize length on an I2C block read

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80932
    33İzleyin

    vsock/virtio: flush works in dependency order

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80933
    31İzleyin

    wifi: mt76: mt7996: validate default EEPROM firmware size

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80935
    35İzleyin

    wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80936
    31İzleyin

    wifi: mt76: mt7925: cancel mlo_pm_work on stop

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80937
    35İzleyin

    wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80943
    30İzleyin

    wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids

    YüksekCVSS 7,6İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80944
    31İzleyin

    wifi: mwifiex: Detach sync cmd buffer on interrupted wait

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80945
    36İzleyin

    crypto: iaa - unmap dst before software fallback on decompress

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80947
    31İzleyin

    wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80950
    31İzleyin

    i3c: renesas: Check that the transfer is valid before accessing it

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80952
    31İzleyin

    i3c: master: Fix info leak and UAF in device unregister path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80953
    33İzleyin

    i3c: master: adi: initialize the lock before enabling interrupts

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80954
    31İzleyin

    i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80955
    31İzleyin

    dm-pcache: fix use-after-free and invalid seg operations in kset_replay()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80958
    28İzleyin

    dm-pcache: clamp the tail kset read to the segment data region

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80959
    31İzleyin

    dm-pcache: bound the persisted tail-position offset

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80961
    31İzleyin

    dm-pcache: validate kset key_num and intra-segment bounds

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80962
    31İzleyin

    dm-pcache: validate geometry fields from on-disk cache_info

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80967
    33İzleyin

    ALSA: pcxhr: initialize mutexes before requesting threaded IRQ

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80971
    31İzleyin

    ALSA: bcd2000: clear the URB pointers on disconnect

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80975
    31İzleyin

    mfd: qnap-mcu: keep the reply buffer alive past a command timeout

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80976
    39İzleyin

    seg6: reset IP6CB after IPv6 decapsulation

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80977
    31İzleyin

    net: skbuff: don't touch shared zerocopy state in skb_tx_error()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80978
    31İzleyin

    net: cap advertised IP tunnel headroom

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80979
    31İzleyin

    net/smc: unregister the connection before draining the rx tasklet

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80980
    39İzleyin

    net/smc: stop killed, freed and out_of_sync sharing a byte

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80981
    39İzleyin

    net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80982
    31İzleyin

    net/smc: fix use-after-free in smc_rx_pipe_buf_release()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80985
    32İzleyin

    net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80986
    39İzleyin

    net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80987
    30İzleyin

    NTB: ntb_transport: Reject oversized TX buffers

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80989
    35İzleyin

    net: thunderbolt: Mark the connection down when bringing it up fails

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80991
    31İzleyin

    net: ravb: serialize PTP clock teardown

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80992
    31İzleyin

    net: ravb: avoid dereferencing an invalid PTP clock

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80994
    31İzleyin

    net: openvswitch: fix flow mask use-after-free on flow deletion

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80995
    31İzleyin

    net: mctp: hold a reference to the route device in mctp_route_lookup()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80997
    30İzleyin

    net: ipa: fix stalled modem TX queue after runtime resume

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-80998
    30İzleyin

    net: bnxt: ring the doorbell when SW USO exits early

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-81000
    31İzleyin

    net: tun: bound receive headroom

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-81001
    31İzleyin

    slip: fix use-after-free in sl_sync()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-81002
    39İzleyin

    xdp: fix zero-copy frame layout

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-81003
    32İzleyin

    net/iucv: filter frames in afiucv_hs_rcv() by ingress device

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-81004
    33İzleyin

    ipmi:msghandler: Cancel work cleanly on an error

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-81006
    31İzleyin

    ipmi: Remove all sysfs files on registration failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux11 Eyl 2026

  • CVE-2026-81007
    28İzleyin

    ipmi: ipmb: validate write message length

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux11 Eyl 2026