Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.955 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 3 / 80

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
30İzleyin	CVE-2026-73716İstismar yok	Unauthenticated Remote Code Execution in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-78 Girişsiz RCE Komut enjeksiyonu	Yüksek7,5	—	%0,6	1 Eyl 2026
30İzleyin	CVE-2026-73717İstismar yok	Unauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management Interfacearubanetworks · fabric composer · CWE-78 Girişsiz RCE Komut enjeksiyonu	Yüksek7,5	—	%0,8	1 Eyl 2026
29İzleyin	CVE-2026-73718İstismar yok	Unauthenticated Information Disclosure in Web Interface allows Sensitive Data Exposure in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-352 Kimlik doğrulamasız CSRF	Yüksek7,4	—	%0,2	1 Eyl 2026
28İzleyin	CVE-2026-73719İstismar yok	Authenticated Arbitrary File Write Vulnerability leads to Remote Code Execution in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-73 RCE Yol geçişi	Yüksek7,2	—	%0,6	1 Eyl 2026
28İzleyin	CVE-2026-73720İstismar yok	Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer APIarubanetworks · fabric composer · CWE-78 RCE Komut enjeksiyonu	Yüksek7,2	—	%1,0	1 Eyl 2026
35İzleyin	CVE-2026-79682İstismar yok	Dell PowerStore contains a Command Injection vulnerability.dell · powerstoreos · CWE-77 RCE Yerel yetki yükseltme Komut enjeksiyonu	Yüksek8,8	—	%0,7	1 Eyl 2026
28İzleyin	CVE-2026-73721İstismar yok	Authenticated SQL Injection Vulnerabilities in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-89 SQL enjeksiyonu	Yüksek7,2	—	%0,5	1 Eyl 2026
28İzleyin	CVE-2026-73722İstismar yok	Authenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management Interfacearubanetworks · fabric composer · CWE-78 RCE Komut enjeksiyonu	Yüksek7,2	—	%1,4	1 Eyl 2026
28İzleyin	CVE-2026-73723İstismar yok	Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based Management Interfacearubanetworks · fabric composer · CWE-863 Erişim denetimi (IDOR)	Yüksek7,1	—	%0,3	1 Eyl 2026
28İzleyin	CVE-2026-73724İstismar yok	Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-863 Erişim denetimi (IDOR)	Yüksek7,1	—	%0,3	1 Eyl 2026
28İzleyin	CVE-2026-73725İstismar yok	Local Privilege Escalation leads to Arbitrary Code Execution in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-269 RCE Yerel yetki yükseltme	Yüksek7,0	—	%0,1	1 Eyl 2026
40Planlayın	CVE-2026-79687İstismar yok	Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability.dell · powerstoreos · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik10,0	—	%0,2	1 Eyl 2026
40Planlayın	CVE-2026-76657İstismar yok	Authentication Bypass in HPE Networking Fabric Composer API allows Administrative Accessarubanetworks · fabric composer · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik10,0	—	%0,7	1 Eyl 2026
40Planlayın	CVE-2026-76658İstismar yok	Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemonarubanetworks · fabric composer · CWE-287 Girişsiz RCE Kimlik doğrulama atlatma	Kritik10,0	—	%0,7	1 Eyl 2026
29İzleyin	CVE-2026-78592İstismar yok	Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resourceselastic · kibana · CWE-22 Yol geçişi	Yüksek7,3	—	%0,4	1 Eyl 2026
28İzleyin	CVE-2026-78607İstismar yok	Missing Authorization in Elasticsearch Leading to Information Disclosureelastic · elasticsearch · CWE-862 Erişim denetimi (IDOR)	Yüksek7,1	—	%0,3	1 Eyl 2026
35İzleyin	CVE-2026-84268İstismar yok	Gvfs: sftp: heap-based buffer overflow in read_reply()gnome · gvfs · CWE-122 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,4	1 Eyl 2026
32İzleyin	GHSA-3f6p-5ww8-9rcrİstismar yok	MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentialsnpm · mysql2 · CWE-522 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek8,0	—	—	1 Eyl 2026
35İzleyin	GHSA-gqvg-gmmx-x4hmİstismar yok	MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifactPyPI · mlflow · CWE-502 Girişsiz RCE Deserializasyon	Yüksek8,8	—	—	1 Eyl 2026
34İzleyin	CVE-2026-71981Kavram kanıtı	Cypht < 2.12.2 PHP Object Injection RCE via back_query Parametercypht-org · cypht · CWE-502 RCE Deserializasyon	Yüksek8,7	—	%0,9	1 Eyl 2026
39İzleyin	CVE-2026-73749İstismar yok	Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CXhpe · arubaos-cx · CWE-284 Girişsiz RCE Erişim denetimi (IDOR)	Kritik9,8	—	%0,8	1 Eyl 2026
35İzleyin	CVE-2026-73750İstismar yok	Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Executionhpe · arubaos-cx · CWE-284 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%0,7	1 Eyl 2026
35İzleyin	CVE-2026-73751İstismar yok	Authenticated Remote Command Injection in AOS-CX Web-based Management Interfacehpe · arubaos-cx · CWE-77 RCE Komut enjeksiyonu	Yüksek8,8	—	%0,6	1 Eyl 2026
35İzleyin	CVE-2026-73752İstismar yok	Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CXhpe · arubaos-cx · CWE-22 Girişsiz RCE Yol geçişi	Yüksek8,8	—	%0,4	1 Eyl 2026
35İzleyin	CVE-2026-73753İstismar yok	Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interfacehpe · arubaos-cx · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%0,6	1 Eyl 2026
35İzleyin	CVE-2026-73763İstismar yok	Unauthenticated Remote Command Execution in Management Componenthpe · arubaos-cx · CWE-77 Girişsiz RCE Komut enjeksiyonu	Yüksek8,8	—	%0,4	1 Eyl 2026
28İzleyin	CVE-2026-73764İstismar yok	Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CXhpe · arubaos-cx · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,1	—	%0,3	1 Eyl 2026
28İzleyin	CVE-2026-73765İstismar yok	Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CXhpe · arubaos-cx · CWE-22 RCE Yol geçişi	Yüksek7,2	—	%0,8	1 Eyl 2026
28İzleyin	CVE-2026-73766İstismar yok	Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CXhpe · arubaos-cx · CWE-77 RCE Komut enjeksiyonu	Yüksek7,2	—	%1,4	1 Eyl 2026
28İzleyin	CVE-2026-73767İstismar yok	Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interfacehpe · arubaos-cx · CWE-78 RCE Komut enjeksiyonu	Yüksek7,2	—	%1,6	1 Eyl 2026
29İzleyin	CVE-2026-73768İstismar yok	Local Privilege Escalation in AOS-CX Command Line Interfacehpe · arubaos-cx · CWE-20 Yerel yetki yükseltme	Yüksek7,3	—	%0,1	1 Eyl 2026
29İzleyin	CVE-2026-73770İstismar yok	Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CXhpe · arubaos-cx · CWE-73 RCE Yol geçişi	Yüksek7,3	—	%0,2	1 Eyl 2026
30İzleyin	CVE-2026-73771İstismar yok	Improper Authentication Handling in AOS-CX Management Interface and APIhpe · arubaos-cx · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%0,4	1 Eyl 2026
30İzleyin	CVE-2026-73773İstismar yok	Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CXhpe · arubaos-cx · CWE-400 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,4	1 Eyl 2026
30İzleyin	CVE-2026-73774İstismar yok	Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CXhpe · arubaos-cx · CWE-120 Kimlik doğrulamasız Bellek hatası	Yüksek7,6	—	%0,2	1 Eyl 2026
30İzleyin	CVE-2026-73775İstismar yok	Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CXhpe · arubaos-cx · CWE-200 Bilgi sızıntısı	Yüksek7,7	—	%0,4	1 Eyl 2026
31İzleyin	CVE-2026-73776İstismar yok	Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CXhpe · arubaos-cx · CWE-347 RCE Yerel yetki yükseltme Zayıf kripto	Yüksek7,9	—	%0,1	1 Eyl 2026
32İzleyin	CVE-2026-73777İstismar yok	Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpointhpe · arubaos-cx · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,1	—	%0,4	1 Eyl 2026
39İzleyin	CVE-2026-73778İstismar yok	Credential Manager Vulnerability Allows Unauthorized Administrative Accesshpe · arubaos-cx · CWE-521 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%0,5	1 Eyl 2026
32İzleyin	CVE-2026-73779İstismar yok	Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CXhpe · arubaos-cx · CWE-269 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,2	—	%0,2	1 Eyl 2026
33İzleyin	CVE-2026-73780İstismar yok	Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CXhpe · arubaos-cx · CWE-352 Girişsiz RCE CSRF	Yüksek8,3	—	%0,1	1 Eyl 2026
33İzleyin	CVE-2026-73781İstismar yok	Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interfacehpe · arubaos-cx · CWE-79 RCE XSS	Yüksek8,4	—	%0,5	1 Eyl 2026
35İzleyin	CVE-2026-73782İstismar yok	Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CXhpe · arubaos-cx · CWE-134 Girişsiz RCE	Yüksek8,8	—	%0,4	1 Eyl 2026
30İzleyin	CVE-2026-84361Kavram kanıtı	Composer: Perforce source URL permits P4PORT `rsh:` command executioncomposer · composer · CWE-78 Girişsiz RCE Komut enjeksiyonu	Yüksek7,7	—	%0,5	1 Eyl 2026
29İzleyin	CVE-2026-84366İstismar yok	Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by defaultscrapy · scrapy · CWE-319 Kimlik doğrulamasız Zayıf kripto	Yüksek7,4	—	%0,2	1 Eyl 2026
32İzleyin	CVE-2026-84370İstismar yok	SVGO: removeScripts allows executable links through namespace and control-character bypassessvg · svgo · CWE-79 Kimlik doğrulamasız XSS	Yüksek8,2	—	%0,5	1 Eyl 2026
38İzleyin	CVE-2023-54391Kavram kanıtı	Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameterproxmox server solutions gmbh · proxmox virtual environment (ve) · CWE-304 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,3	—	%3,0	1 Eyl 2026
32İzleyin	CVE-2026-18730İstismar yok	Server-side request forgery vulnerability in GitHub Enterprise Server Manage API leaked a replayable gateway-agent bearer tokengithub · enterprise server · CWE-918 Kimlik doğrulamasız SSRF	Yüksek8,2	—	%0,2	1 Eyl 2026
30İzleyin	CVE-2026-19118İstismar yok	Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code executiongithub · enterprise server · CWE-367 RCE Yarış durumu	Yüksek7,7	—	%0,6	1 Eyl 2026
60Bu hafta	CVE-2026-75604Silahlaştırılmış	Next.js: Unauthenticated Remote Code Execution on windows-hosted serversvercel · next.js · CWE-22 Girişsiz RCE Yol geçişi	Kritik9,0	—	%2,1	1 Eyl 2026
30İzleyin	CVE-2026-76851İstismar yok	Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal servicgithub · enterprise server · CWE-918 RCE SSRF	Yüksek7,7	—	%0,8	1 Eyl 2026
72Bu hafta	CVE-2026-83548Silahlaştırılmış	A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path.sonicwall · sma8200v · CWE-441 Kimlik doğrulamasız SSRF	Kritik10,0	KEV	%8,0	1 Eyl 2026
64Bu hafta	CVE-2026-83549Silahlaştırılmış	Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identisonicwall · sma8200v · CWE-78 RCE Komut enjeksiyonu	Yüksek7,8	KEV	%9,8	1 Eyl 2026
39İzleyin	CVE-2026-84372İstismar yok	Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connectionspredis · predis · CWE-93 Girişsiz RCE Deserializasyon Komut enjeksiyonu	Kritik9,8	—	%0,7	1 Eyl 2026
30İzleyin	CVE-2026-84374İstismar yok	Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled pathspartnernl · laravel-excel · CWE-22 Yol geçişi	Yüksek7,5	—	%0,8	1 Eyl 2026
39İzleyin	CVE-2026-84637İstismar yok	Calendar invitation attachments could launch local executablesmozilla · thunderbird · CWE-434 Kimlik doğrulamasız Dosya yükleme	Kritik9,8	—	%0,6	1 Eyl 2026
36İzleyin	CVE-2026-84639İstismar yok	Uninitialized memory in MIME parsingmozilla · thunderbird · CWE-457 Kimlik doğrulamasız	Kritik9,1	—	%0,3	1 Eyl 2026
30İzleyin	CVE-2026-84640İstismar yok	One byte overflow read in mail parsermozilla · thunderbird · CWE-126 Kimlik doğrulamasız	Yüksek7,5	—	%0,2	1 Eyl 2026
30İzleyin	CVE-2026-84641İstismar yok	Information disclosure due to malicious IMAP server responsemozilla · thunderbird · CWE-416 Kimlik doğrulamasız Bellek hatası	Yüksek7,5	—	%0,2	1 Eyl 2026
30İzleyin	CVE-2026-84642İstismar yok	Allowed UNC hostnames for attachments interpreted as a regular expressionmozilla · thunderbird · CWE-1333 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,4	1 Eyl 2026
39İzleyin	CVE-2026-19593İstismar yok	OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace.openai · codex desktop · CWE-15 Kimlik doğrulamasız	Kritik9,8	—	%0,3	1 Eyl 2026
30İzleyin	CVE-2026-52023İstismar yok	An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims_registrar_pcscf module, specificalkamailio · kamailio · CWE-415 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Yüksek7,5	—	%0,4	1 Eyl 2026
28İzleyin	GHSA-2rx9-3g3h-c2jvİstismar yok	pnpm: pacquet trust-lockfile install can create dependency symlinks outside the projectnpm · pnpm · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,1	—	—	1 Eyl 2026
34İzleyin	CVE-2026-84208İstismar yok	AVideo User_Location Plugin Unauthenticated SQL Injectionwwbn · avideo · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek8,7	—	%0,4	1 Eyl 2026
34İzleyin	CVE-2026-84476İstismar yok	WWBN AVideo Authentication Bypass via X-Real-IP Headerwwbn · avideo · CWE-290 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,7	—	%0,4	1 Eyl 2026
37İzleyin	CVE-2026-84479İstismar yok	WWBN AVideo Authentication Bypass via User-Agent Headerwwbn · avideo · CWE-290 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,3	—	%0,5	1 Eyl 2026
37İzleyin	CVE-2026-84480İstismar yok	WWBN AVideo Password Recovery Token Expiration Bypasswwbn · avideo · CWE-613 Kimlik doğrulamasız	Kritik9,3	—	%0,5	1 Eyl 2026
34İzleyin	CVE-2026-84482İstismar yok	WWBN AVideo Cross-Site Request Forgery via get_domain() validationwwbn · avideo · CWE-346 Kimlik doğrulamasız CSRF	Yüksek8,7	—	%0,2	1 Eyl 2026
29İzleyin	GHSA-vx52-2968-3vc6İstismar yok	pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yamlnpm · pnpm · CWE-201 Kimlik doğrulamasız	Yüksek7,4	—	—	1 Eyl 2026
30İzleyin	CVE-2026-81928İstismar yok	Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG recordCWE-674 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,5	1 Eyl 2026
36İzleyin	CVE-2026-84324İstismar yok	Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,0	—	%0,4	1 Eyl 2026
39İzleyin	CVE-2026-84325İstismar yok	Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering togoogle · chrome · CWE-20 Kimlik doğrulamasız	Kritik9,8	—	%0,4	1 Eyl 2026
35İzleyin	CVE-2026-84326İstismar yok	Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox google · chrome · CWE-908 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,4	1 Eyl 2026
38İzleyin	CVE-2026-84333İstismar yok	Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside thegoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	1 Eyl 2026
32İzleyin	CVE-2026-84334İstismar yok	Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary cogoogle · chrome · CWE-863 RCE Erişim denetimi (IDOR)	Yüksek8,1	—	%0,1	1 Eyl 2026
33İzleyin	CVE-2026-84335İstismar yok	Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer procegoogle · chrome · CWE-863 Girişsiz RCE Erişim denetimi (IDOR)	Yüksek8,3	—	%0,3	1 Eyl 2026
35İzleyin	CVE-2026-84347İstismar yok	Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,5	1 Eyl 2026
33İzleyin	CVE-2026-84349İstismar yok	Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,3	—	%0,4	1 Eyl 2026
35İzleyin	CVE-2026-84350İstismar yok	Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%0,3	1 Eyl 2026
33İzleyin	CVE-2026-84351İstismar yok	Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer procgoogle · chrome · CWE-121 Girişsiz RCE Bellek hatası	Yüksek8,3	—	%0,4	1 Eyl 2026
38İzleyin	CVE-2026-84352İstismar yok	Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside thgoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	1 Eyl 2026
38İzleyin	CVE-2026-84353İstismar yok	Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social enginegoogle · chrome · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,4	1 Eyl 2026
38İzleyin	CVE-2026-84354İstismar yok	Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to exegoogle · chrome · CWE-863 Girişsiz RCE Erişim denetimi (IDOR)	Kritik9,6	—	%0,4	1 Eyl 2026
34İzleyin	CVE-2026-84694İstismar yok	Coolify before 4.2.0 Remote Code Execution via Environment Variable Keycoollabsio · coolify · CWE-78 RCE Komut enjeksiyonu	Yüksek8,7	—	%0,8	1 Eyl 2026
37İzleyin	CVE-2026-84695İstismar yok	BookStack before 26.05.4 Stored XSS via Drawing Uploadbookstackapp · bookstack · CWE-79 XSS	Kritik9,3	—	%0,4	1 Eyl 2026
37İzleyin	CVE-2026-84696İstismar yok	Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commandsphison electronics corporation · ps3111-s11 controller firmware · CWE-306 Kimlik doğrulama atlatma Yerel yetki yükseltme	Kritik9,3	—	%0,2	1 Eyl 2026
28İzleyin	CVE-2026-84698İstismar yok	PX4 Autopilot sd_bench Heap Buffer Overflow via Block Sizepx4 · px4-autopilot · CWE-787 Kimlik doğrulamasız Bellek hatası	Yüksek7,1	—	%0,4	1 Eyl 2026
37İzleyin	CVE-2026-84699İstismar yok	Team Password Manager before 14.184.308 Authentication Bypass in Password Resetteam password manager · team password manager · CWE-640 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,3	—	%0,6	1 Eyl 2026
35İzleyin	CVE-2026-84700İstismar yok	Pika Unauthenticated Replication Access via Internal Protobuf Portopenatomfoundation · pikiwidb · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,8	—	%0,5	1 Eyl 2026
34İzleyin	CVE-2026-84702İstismar yok	facefusion before 3.7.0 Path Traversal via Job Identifierfacefusion · facefusion · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek8,7	—	%0,4	1 Eyl 2026
30İzleyin	CVE-2026-84375İstismar yok	js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesnodeca · js-yaml · CWE-400 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,5	1 Eyl 2026
34İzleyin	CVE-2026-84484İstismar yok	ION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnvnasa-jpl · ion-dtn · CWE-125 Kimlik doğrulamasız Bellek hatası	Yüksek8,7	—	%0,8	1 Eyl 2026
34İzleyin	CVE-2026-84485İstismar yok	APITable through 1.13.0-beta.1 Missing Authentication on the Internal Organization Load or Search Endpointapitable · apitable · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,7	—	%0,6	1 Eyl 2026
34İzleyin	CVE-2026-84715İstismar yok	FeatherPanel before 1.3.7.10 Privilege Escalation via Subuser Permission Updatemythicalltd · featherpanel · CWE-862 Erişim denetimi (IDOR)	Yüksek8,7	—	%0,5	1 Eyl 2026
30İzleyin	CVE-2026-14957İstismar yok	FIPS mode assertion failure via malicious CERT payloadthe libreswan project · libreswan · CWE-252 Girişsiz RCE Hizmet dışı bırakma	Yüksek7,5	—	%0,4	1 Eyl 2026
32İzleyin	CVE-2026-14982İstismar yok	WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' Parameterjoomunited · wp file download · CWE-22 RCE Yol geçişi	Yüksek8,1	—	%0,5	1 Eyl 2026
34İzleyin	CVE-2024-35585İstismar yok	Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication.oxford nanopore · minknow · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,6	—	%0,2	2 Eyl 2026
39İzleyin	CVE-2026-9055Kavram kanıtı	Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'melograno · booking for appointments and events calendar – amelia · CWE-269 Kimlik doğrulamasız	Kritik9,8	—	%0,5	2 Eyl 2026
32İzleyin	CVE-2026-12526İstismar yok	Advanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Actionunknown · advanced custom fields: extended · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,1	—	%0,2	2 Eyl 2026
28İzleyin	CVE-2026-12865İstismar yok	Photo Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged Parametersunknown · photo gallery by 10web · CWE-79 Kimlik doğrulamasız XSS	Yüksek7,1	—	%0,2	2 Eyl 2026

CVE-2026-73716
30İzleyin
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer
YüksekCVSS 7,5İstismar yokEPSS %0
- Girişsiz RCE
- Komut enjeksiyonu
arubanetworks · fabric composer1 Eyl 2026
CVE-2026-73717
30İzleyin
Unauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface
YüksekCVSS 7,5İstismar yokEPSS %0
- Girişsiz RCE
- Komut enjeksiyonu
arubanetworks · fabric composer1 Eyl 2026
CVE-2026-73718
29İzleyin
Unauthenticated Information Disclosure in Web Interface allows Sensitive Data Exposure in HPE Networking Fabric Composer
YüksekCVSS 7,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
arubanetworks · fabric composer1 Eyl 2026
CVE-2026-73719
28İzleyin
Authenticated Arbitrary File Write Vulnerability leads to Remote Code Execution in HPE Networking Fabric Composer
YüksekCVSS 7,2İstismar yokEPSS %0
- RCE
- Yol geçişi
arubanetworks · fabric composer1 Eyl 2026
CVE-2026-73720
28İzleyin
Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer API
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
arubanetworks · fabric composer1 Eyl 2026
CVE-2026-79682
35İzleyin
Dell PowerStore contains a Command Injection vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
- Komut enjeksiyonu
dell · powerstoreos1 Eyl 2026
CVE-2026-73721
28İzleyin
Authenticated SQL Injection Vulnerabilities in HPE Networking Fabric Composer
YüksekCVSS 7,2İstismar yokEPSS %0
- SQL enjeksiyonu
arubanetworks · fabric composer1 Eyl 2026
CVE-2026-73722
28İzleyin
Authenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management Interface
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
arubanetworks · fabric composer1 Eyl 2026
CVE-2026-73723
28İzleyin
Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based Management Interface
YüksekCVSS 7,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
arubanetworks · fabric composer1 Eyl 2026
CVE-2026-73724
28İzleyin
Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer
YüksekCVSS 7,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
arubanetworks · fabric composer1 Eyl 2026
CVE-2026-73725
28İzleyin
Local Privilege Escalation leads to Arbitrary Code Execution in HPE Networking Fabric Composer
YüksekCVSS 7,0İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
arubanetworks · fabric composer1 Eyl 2026
CVE-2026-79687
40Planlayın
Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability.
KritikCVSS 10,0İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
dell · powerstoreos1 Eyl 2026
CVE-2026-76657
40Planlayın
Authentication Bypass in HPE Networking Fabric Composer API allows Administrative Access
KritikCVSS 10,0İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
arubanetworks · fabric composer1 Eyl 2026
CVE-2026-76658
40Planlayın
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon
KritikCVSS 10,0İstismar yokEPSS %0
- Girişsiz RCE
- Kimlik doğrulama atlatma
arubanetworks · fabric composer1 Eyl 2026
CVE-2026-78592
29İzleyin
Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources
YüksekCVSS 7,3İstismar yokEPSS %0
- Yol geçişi
elastic · kibana1 Eyl 2026
CVE-2026-78607
28İzleyin
Missing Authorization in Elasticsearch Leading to Information Disclosure
YüksekCVSS 7,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
elastic · elasticsearch1 Eyl 2026
CVE-2026-84268
35İzleyin
Gvfs: sftp: heap-based buffer overflow in read_reply()
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
gnome · gvfs1 Eyl 2026
GHSA-3f6p-5ww8-9rcr
32İzleyin
MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials
YüksekCVSS 8,0İstismar yok
- Kimlik doğrulamasız
- Bilgi sızıntısı
npm · mysql21 Eyl 2026
GHSA-gqvg-gmmx-x4hm
35İzleyin
MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact
YüksekCVSS 8,8İstismar yok
- Girişsiz RCE
- Deserializasyon
PyPI · mlflow1 Eyl 2026
CVE-2026-71981
34İzleyin
Cypht < 2.12.2 PHP Object Injection RCE via back_query Parameter
YüksekCVSS 8,7Kavram kanıtıEPSS %0
- RCE
- Deserializasyon
cypht-org · cypht1 Eyl 2026
CVE-2026-73749
39İzleyin
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
- Erişim denetimi (IDOR)
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73750
35İzleyin
Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Erişim denetimi (IDOR)
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73751
35İzleyin
Authenticated Remote Command Injection in AOS-CX Web-based Management Interface
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73752
35İzleyin
Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Yol geçişi
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73753
35İzleyin
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73763
35İzleyin
Unauthenticated Remote Command Execution in Management Component
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Komut enjeksiyonu
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73764
28İzleyin
Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73765
28İzleyin
Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX
YüksekCVSS 7,2İstismar yokEPSS %0
- RCE
- Yol geçişi
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73766
28İzleyin
Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73767
28İzleyin
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73768
29İzleyin
Local Privilege Escalation in AOS-CX Command Line Interface
YüksekCVSS 7,3İstismar yokEPSS %0
- Yerel yetki yükseltme
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73770
29İzleyin
Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX
YüksekCVSS 7,3İstismar yokEPSS %0
- RCE
- Yol geçişi
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73771
30İzleyin
Improper Authentication Handling in AOS-CX Management Interface and API
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73773
30İzleyin
Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73774
30İzleyin
Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX
YüksekCVSS 7,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73775
30İzleyin
Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX
YüksekCVSS 7,7İstismar yokEPSS %0
- Bilgi sızıntısı
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73776
31İzleyin
Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
YüksekCVSS 7,9İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
- Zayıf kripto
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73777
32İzleyin
Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73778
39İzleyin
Credential Manager Vulnerability Allows Unauthorized Administrative Access
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73779
32İzleyin
Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73780
33İzleyin
Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- CSRF
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73781
33İzleyin
Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface
YüksekCVSS 8,4İstismar yokEPSS %0
- RCE
- XSS
hpe · arubaos-cx1 Eyl 2026
CVE-2026-73782
35İzleyin
Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
hpe · arubaos-cx1 Eyl 2026
CVE-2026-84361
30İzleyin
Composer: Perforce source URL permits P4PORT `rsh:` command execution
YüksekCVSS 7,7Kavram kanıtıEPSS %0
- Girişsiz RCE
- Komut enjeksiyonu
composer · composer1 Eyl 2026
CVE-2026-84366
29İzleyin
Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default
YüksekCVSS 7,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
scrapy · scrapy1 Eyl 2026
CVE-2026-84370
32İzleyin
SVGO: removeScripts allows executable links through namespace and control-character bypasses
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
svg · svgo1 Eyl 2026
CVE-2023-54391
38İzleyin
Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter
KritikCVSS 9,3Kavram kanıtıEPSS %3
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
proxmox server solutions gmbh · proxmox virtual environment (ve)1 Eyl 2026
CVE-2026-18730
32İzleyin
Server-side request forgery vulnerability in GitHub Enterprise Server Manage API leaked a replayable gateway-agent bearer token
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
github · enterprise server1 Eyl 2026
CVE-2026-19118
30İzleyin
Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution
YüksekCVSS 7,7İstismar yokEPSS %0
- RCE
- Yarış durumu
github · enterprise server1 Eyl 2026
CVE-2026-75604
60Bu hafta
Next.js: Unauthenticated Remote Code Execution on windows-hosted servers
KritikCVSS 9,0SilahlaştırılmışEPSS %2
- Girişsiz RCE
- Yol geçişi
vercel · next.js1 Eyl 2026
CVE-2026-76851
30İzleyin
Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal servic
YüksekCVSS 7,7İstismar yokEPSS %0
- RCE
- SSRF
github · enterprise server1 Eyl 2026
CVE-2026-83548
72Bu hafta
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path.
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %8
- Kimlik doğrulamasız
- SSRF
sonicwall · sma8200v1 Eyl 2026
CVE-2026-83549
64Bu hafta
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %9
- RCE
- Komut enjeksiyonu
sonicwall · sma8200v1 Eyl 2026
CVE-2026-84372
39İzleyin
Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
- Deserializasyon
- Komut enjeksiyonu
predis · predis1 Eyl 2026
CVE-2026-84374
30İzleyin
Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path
YüksekCVSS 7,5İstismar yokEPSS %0
- Yol geçişi
spartnernl · laravel-excel1 Eyl 2026
CVE-2026-84637
39İzleyin
Calendar invitation attachments could launch local executables
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Dosya yükleme
mozilla · thunderbird1 Eyl 2026
CVE-2026-84639
36İzleyin
Uninitialized memory in MIME parsing
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
mozilla · thunderbird1 Eyl 2026
CVE-2026-84640
30İzleyin
One byte overflow read in mail parser
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
mozilla · thunderbird1 Eyl 2026
CVE-2026-84641
30İzleyin
Information disclosure due to malicious IMAP server response
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
mozilla · thunderbird1 Eyl 2026
CVE-2026-84642
30İzleyin
Allowed UNC hostnames for attachments interpreted as a regular expression
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
mozilla · thunderbird1 Eyl 2026
CVE-2026-19593
39İzleyin
OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree status when a user opened a workspace.
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
openai · codex desktop1 Eyl 2026
CVE-2026-52023
30İzleyin
An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims_registrar_pcscf module, specifical
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
- Hizmet dışı bırakma
kamailio · kamailio1 Eyl 2026
GHSA-2rx9-3g3h-c2jv
28İzleyin
pnpm: pacquet trust-lockfile install can create dependency symlinks outside the project
YüksekCVSS 7,1İstismar yok
- Kimlik doğrulamasız
- Yol geçişi
npm · pnpm1 Eyl 2026
CVE-2026-84208
34İzleyin
AVideo User_Location Plugin Unauthenticated SQL Injection
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
wwbn · avideo1 Eyl 2026
CVE-2026-84476
34İzleyin
WWBN AVideo Authentication Bypass via X-Real-IP Header
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
wwbn · avideo1 Eyl 2026
CVE-2026-84479
37İzleyin
WWBN AVideo Authentication Bypass via User-Agent Header
KritikCVSS 9,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
wwbn · avideo1 Eyl 2026
CVE-2026-84480
37İzleyin
WWBN AVideo Password Recovery Token Expiration Bypass
KritikCVSS 9,3İstismar yokEPSS %0
- Kimlik doğrulamasız
wwbn · avideo1 Eyl 2026
CVE-2026-84482
34İzleyin
WWBN AVideo Cross-Site Request Forgery via get_domain() validation
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
wwbn · avideo1 Eyl 2026
GHSA-vx52-2968-3vc6
29İzleyin
pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml
YüksekCVSS 7,4İstismar yok
- Kimlik doğrulamasız
npm · pnpm1 Eyl 2026
CVE-2026-81928
30İzleyin
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
1 Eyl 2026
CVE-2026-84324
36İzleyin
Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via
KritikCVSS 9,0İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome1 Eyl 2026
CVE-2026-84325
39İzleyin
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
google · chrome1 Eyl 2026
CVE-2026-84326
35İzleyin
Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome1 Eyl 2026
CVE-2026-84333
38İzleyin
Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome1 Eyl 2026
CVE-2026-84334
32İzleyin
Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary co
YüksekCVSS 8,1İstismar yokEPSS %0
- RCE
- Erişim denetimi (IDOR)
google · chrome1 Eyl 2026
CVE-2026-84335
33İzleyin
Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer proce
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Erişim denetimi (IDOR)
google · chrome1 Eyl 2026
CVE-2026-84347
35İzleyin
Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome1 Eyl 2026
CVE-2026-84349
33İzleyin
Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to exec
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome1 Eyl 2026
CVE-2026-84350
35İzleyin
Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitr
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome1 Eyl 2026
CVE-2026-84351
33İzleyin
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer proc
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome1 Eyl 2026
CVE-2026-84352
38İzleyin
Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside th
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome1 Eyl 2026
CVE-2026-84353
38İzleyin
Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engine
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
google · chrome1 Eyl 2026
CVE-2026-84354
38İzleyin
Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to exe
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Erişim denetimi (IDOR)
google · chrome1 Eyl 2026
CVE-2026-84694
34İzleyin
Coolify before 4.2.0 Remote Code Execution via Environment Variable Key
YüksekCVSS 8,7İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
coollabsio · coolify1 Eyl 2026
CVE-2026-84695
37İzleyin
BookStack before 26.05.4 Stored XSS via Drawing Upload
KritikCVSS 9,3İstismar yokEPSS %0
- XSS
bookstackapp · bookstack1 Eyl 2026
CVE-2026-84696
37İzleyin
Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands
KritikCVSS 9,3İstismar yokEPSS %0
- Kimlik doğrulama atlatma
- Yerel yetki yükseltme
phison electronics corporation · ps3111-s11 controller firmware1 Eyl 2026
CVE-2026-84698
28İzleyin
PX4 Autopilot sd_bench Heap Buffer Overflow via Block Size
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
px4 · px4-autopilot1 Eyl 2026
CVE-2026-84699
37İzleyin
Team Password Manager before 14.184.308 Authentication Bypass in Password Reset
KritikCVSS 9,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
team password manager · team password manager1 Eyl 2026
CVE-2026-84700
35İzleyin
Pika Unauthenticated Replication Access via Internal Protobuf Port
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
openatomfoundation · pikiwidb1 Eyl 2026
CVE-2026-84702
34İzleyin
facefusion before 3.7.0 Path Traversal via Job Identifier
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
facefusion · facefusion1 Eyl 2026
CVE-2026-84375
30İzleyin
js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
nodeca · js-yaml1 Eyl 2026
CVE-2026-84484
34İzleyin
ION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnv
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
nasa-jpl · ion-dtn1 Eyl 2026
CVE-2026-84485
34İzleyin
APITable through 1.13.0-beta.1 Missing Authentication on the Internal Organization Load or Search Endpoint
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
apitable · apitable1 Eyl 2026
CVE-2026-84715
34İzleyin
FeatherPanel before 1.3.7.10 Privilege Escalation via Subuser Permission Update
YüksekCVSS 8,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mythicalltd · featherpanel1 Eyl 2026
CVE-2026-14957
30İzleyin
FIPS mode assertion failure via malicious CERT payload
YüksekCVSS 7,5İstismar yokEPSS %0
- Girişsiz RCE
- Hizmet dışı bırakma
the libreswan project · libreswan1 Eyl 2026
CVE-2026-14982
32İzleyin
WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' Parameter
YüksekCVSS 8,1İstismar yokEPSS %0
- RCE
- Yol geçişi
joomunited · wp file download1 Eyl 2026
CVE-2024-35585
34İzleyin
Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication.
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
oxford nanopore · minknow2 Eyl 2026
CVE-2026-9055
39İzleyin
Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'
KritikCVSS 9,8Kavram kanıtıEPSS %0
- Kimlik doğrulamasız
melograno · booking for appointments and events calendar – amelia2 Eyl 2026
CVE-2026-12526
32İzleyin
Advanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
unknown · advanced custom fields: extended2 Eyl 2026
CVE-2026-12865
28İzleyin
Photo Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged Parameters
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
unknown · photo gallery by 10web2 Eyl 2026