Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.962 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 31 / 80

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
31İzleyin	CVE-2026-89736İstismar yok	usb: gadget: u_audio: Fix use-after-free on sound card disconnectlinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89738İstismar yok	usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freedlinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89741İstismar yok	Revert "media: v4l2-dev: fix error handling in __video_register_device()"linux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89742İstismar yok	rapidio: mport_cdev: fix use-after-free in dma_req_free()linux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
30İzleyin	CVE-2026-89743İstismar yok	misc: nsm: bound the device-reported response lengthlinux · linux	Yüksek7,7	—	%0,1	11 Eyl 2026
33İzleyin	CVE-2026-89744İstismar yok	device property: fix infinite loop in fwnode_for_each_child_node()linux · linux	Yüksek8,4	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89746İstismar yok	tracing: Fix use-after-free with same-name named triggerslinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89747İstismar yok	tracing: Fix use-after-free in trace_pipe read on sub-buffer order changelinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89748İstismar yok	tracing: Fix retry exhaustion in simple ring buffer reader swaplinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89750İstismar yok	tracing/user_events: Clear copied tracing state before fork duplicationlinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89754Kavram kanıtı	mm/pagewalk: fix stale walk->action escaping walk_pmd_range()linux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89755İstismar yok	mm/migrate_device: clear stale mapping after freeing swapcachelinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89758İstismar yok	mm/mempolicy: skip non-present PMDs when queueing folioslinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89760İstismar yok	mm, swap: don't free a hibernation slot that is in the swap cachelinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89761İstismar yok	apparmor: fix out-of-bounds write when null terminating a label veclinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89762İstismar yok	apparmor: fix cred UAF caused by begin_current_label_crit_section()linux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89763İstismar yok	KEYS: trusted: Fix TPM teardown orderinglinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89764İstismar yok	rust: devres: fix race between concurrent revokerslinux · linux Yarış durumu	Yüksek7,8	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89767İstismar yok	ovl: fix double end_creating() on the casefold-mismatch pathlinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
29İzleyin	CVE-2026-89769İstismar yok	clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error pathlinux · linux	Yüksek7,4	—	%0,1	11 Eyl 2026
31İzleyin	CVE-2026-89771İstismar yok	ring-buffer: Fix subbuf resize race with ring buffer readerslinux · linux	Yüksek7,8	—	%0,1	11 Eyl 2026
28İzleyin	CVE-2026-47773İstismar yok	ArduinoBLE: Memory corruption via malformed ATT write requestarduino-libraries · arduinoble · CWE-131 Kimlik doğrulamasız	Yüksek7,2	—	%0,1	11 Eyl 2026
32İzleyin	CVE-2026-49464İstismar yok	NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taaknl-portal · nl-portal-backend-libraries · CWE-639 Erişim denetimi (IDOR)	Yüksek8,1	—	%0,3	11 Eyl 2026
28İzleyin	CVE-2026-54166İstismar yok	Shelf Vulnerable to Server-Side Request Forgery (SSRF) via Asset CSV Import imageUrl Validation Bypassshelf-nu · shelf.nu · CWE-918 SSRF	Yüksek7,1	—	%0,4	11 Eyl 2026
33İzleyin	CVE-2026-54174İstismar yok	melange: Incomplete package integrity verification allows data section substitutionchainguard-dev · melange · CWE-345 Kimlik doğrulamasız	Yüksek8,3	—	%0,1	11 Eyl 2026
30İzleyin	CVE-2026-49846İstismar yok	libks has path traversal in kws HTTP parser via URI segment overflowsignalwire · libks · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%0,5	11 Eyl 2026
30İzleyin	CVE-2026-50013İstismar yok	Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Modespectolabs · hoverfly · CWE-362 Kimlik doğrulamasız Yarış durumu Hizmet dışı bırakma	Yüksek7,5	—	%0,4	11 Eyl 2026
29İzleyin	CVE-2026-54240İstismar yok	libde265: Pixel accessor signed integer overflow causes heap OOB read/writestrukturag · libde265 · CWE-190 Kimlik doğrulamasız Bellek hatası	Yüksek7,4	—	%0,3	11 Eyl 2026
29İzleyin	CVE-2026-54241İstismar yok	libde265: SAO sequential filter heap buffer overflow via signed integer overflowstrukturag · libde265 · CWE-122 Kimlik doğrulamasız Bellek hatası	Yüksek7,4	—	%0,3	11 Eyl 2026
34İzleyin	CVE-2026-90444İstismar yok	OS Command Injection in Malcolmcisa · malcolm · CWE-78 RCE Komut enjeksiyonu	Yüksek8,7	—	%0,3	11 Eyl 2026
28İzleyin	CVE-2026-90445İstismar yok	Path Traversal in Malcolmcisa · malcolm · CWE-22 Yol geçişi	Yüksek7,1	—	%0,3	11 Eyl 2026
28İzleyin	CVE-2026-90447İstismar yok	Authentication Bypass by Spoofing in Malcolmcisa · malcolm · CWE-290 Kimlik doğrulama atlatma	Yüksek7,1	—	%0,2	11 Eyl 2026
28İzleyin	CVE-2026-90448İstismar yok	Missing Authorization in Malcolmcisa · malcolm · CWE-862 Erişim denetimi (IDOR)	Yüksek7,1	—	%0,1	11 Eyl 2026
32İzleyin	CVE-2026-90451İstismar yok	Use of Default Credentials in Malcolmcisa · malcolm · CWE-1392 Kimlik doğrulamasız Gömülü kimlik bilgisi	Yüksek8,2	—	%0,2	11 Eyl 2026
36İzleyin	CVE-2026-90456İstismar yok	Use of default credentials in Malcolmcisa · malcolm · CWE-1392 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,2	—	%0,2	11 Eyl 2026
30İzleyin	CVE-2026-90460İstismar yok	An issue was discovered in OpenStack Keystone before 29.0.3.openstack · keystone · CWE-863 Erişim denetimi (IDOR)	Yüksek7,6	—	%0,5	11 Eyl 2026
99Hemen	CVE-2026-85706Silahlaştırılmış	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabgitlab · gitlab · CWE-22 Kimlik doğrulamasız Kimlik doğrulama atlatma Yol geçişi	Kritik10,0	KEV	%97,3	11 Eyl 2026
39İzleyin	CVE-2026-75800İstismar yok	Frontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponseunknown · frontegg saml sso · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,6	12 Eyl 2026
38İzleyin	CVE-2026-77005İstismar yok	Code Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversalunknown · code monkeys proposals · CWE-73 Yol geçişi	Kritik9,6	—	%0,4	12 Eyl 2026
38İzleyin	CVE-2026-77006İstismar yok	WebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path Traversalunknown · webtotem backups · CWE-73 Yol geçişi CSRF	Kritik9,6	—	%0,2	12 Eyl 2026
28İzleyin	CVE-2026-77705İstismar yok	Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeoverunknown · booking for appointments and events calendar · CWE-639 Erişim denetimi (IDOR)	Yüksek7,2	—	%0,4	12 Eyl 2026
28İzleyin	CVE-2026-77752İstismar yok	Temporary Login Without Password 1.5 - 1.9.8 - Multisite Subsite Admin+ Network Super Admin Privilege Escalationunknown · temporary login without password · CWE-269	Yüksek7,2	—	%0,4	12 Eyl 2026
34İzleyin	CVE-2026-80491İstismar yok	SAMO Forms <= 1.0.0 - Unauthenticated SQLiunknown · samo forms · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek8,6	—	%0,4	12 Eyl 2026
34İzleyin	CVE-2026-80494İstismar yok	Yogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File Downloadunknown · yogeta wp cloud · CWE-552 Kimlik doğrulamasız	Yüksek8,6	—	%0,4	12 Eyl 2026
28İzleyin	CVE-2026-81090İstismar yok	Gpx2Graphics <= 0.3 - Arbitrary File Upload via CSRFunknown · gpx2graphics · CWE-352 RCE Dosya yükleme CSRF	Yüksek7,2	—	%0,3	12 Eyl 2026
39İzleyin	CVE-2026-81402İstismar yok	DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Uploadunknown · ds ad rotator · CWE-434 Girişsiz RCE Dosya yükleme	Kritik9,8	—	%0,8	12 Eyl 2026
28İzleyin	CVE-2026-81429İstismar yok	Export & Import WPBakery Page Builder <= 1.0.2 - Stored XSS via CSRFunknown · export & import wpbakery page builder · CWE-79 Kimlik doğrulamasız XSS CSRF	Yüksek7,1	—	%0,1	12 Eyl 2026
35İzleyin	CVE-2026-81742İstismar yok	BE REST Endpoints <= 1.0.0 - Unauthenticated Stored XSS and Widget Manipulationunknown · be rest endpoints · CWE-79 Kimlik doğrulamasız XSS	Yüksek8,8	—	%0,5	12 Eyl 2026
39İzleyin	CVE-2026-82845İstismar yok	Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injectionunknown · masteriyo lms · CWE-502 RCE Deserializasyon	Kritik9,9	—	%0,6	12 Eyl 2026
34İzleyin	CVE-2026-84047İstismar yok	Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_actionunknown · album cover finder · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek8,6	—	%0,4	12 Eyl 2026
32İzleyin	CVE-2026-84099İstismar yok	IDB Ecommerce (wpStoreCart 5) <= 5.0.7 - Unauthenticated PHP Object Injection via bundled wpsc-membership-pro paypal.phpunknown · wpstorecart · CWE-502 Kimlik doğrulamasız Kimlik doğrulama atlatma Deserializasyon	Yüksek8,1	—	%0,4	12 Eyl 2026
39İzleyin	CVE-2026-84171İstismar yok	WP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Uploadunknown · wp images upload on piclect · CWE-434 Girişsiz RCE Dosya yükleme	Kritik9,8	—	%0,6	12 Eyl 2026
39İzleyin	CVE-2026-85681İstismar yok	WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Updateunknown · wp component · CWE-269 Kimlik doğrulamasız	Kritik9,8	—	%0,4	12 Eyl 2026
35İzleyin	CVE-2026-87759İstismar yok	Add User Autocomplete < 1.2 - Subscriber+ Privilege Escalationunknown · add user autocomplete · CWE-269	Yüksek8,8	—	%0,4	12 Eyl 2026
30İzleyin	CVE-2026-87842İstismar yok	Zonify < 1.0.5 - Unauthenticated Account Login Token Disclosureunknown · zonify · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%0,4	12 Eyl 2026
32İzleyin	CVE-2026-87888İstismar yok	YayPricing < 3.5.7 - Subscriber+ Stored XSS via save_page_data REST Routeunknown · yaypricing · CWE-79 XSS	Yüksek8,0	—	%0,4	12 Eyl 2026
21İzleyin	CVE-2026-87892İstismar yok	Rox Appointment Booking < 1.2.0 - Unauthenticated Price Manipulation and Payment Method Restriction Bypassunknown · rox appointment booking · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,3	12 Eyl 2026
39İzleyin	CVE-2026-87719İstismar yok	Deserialization of Untrusted Data in GitLabgitlab · gitlab · CWE-502 Deserializasyon	Kritik9,9	—	%0,5	12 Eyl 2026
30İzleyin	CVE-2026-16482İstismar yok	rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameterrtcamp · rtmedia for wordpress, buddypress and bbpress · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%0,5	12 Eyl 2026
39İzleyin	CVE-2026-78006Kavram kanıtı	The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Executionstellarwp · the events calendar · CWE-502 Girişsiz RCE Kimlik doğrulama atlatma Deserializasyon	Kritik9,8	—	%1,4	12 Eyl 2026
39İzleyin	CVE-2026-78159Kavram kanıtı	The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocationstellarwp · the events calendar · CWE-94 Girişsiz RCE	Kritik9,8	—	%1,3	12 Eyl 2026
35İzleyin	CVE-2026-78175İstismar yok	Tutor LMS <= 4.0.7 - Authenticated (Subscriber+) PHP Object Injection to Remote Code Executionthemeum · tutor lms – elearning and online course solution · CWE-502 RCE Deserializasyon	Yüksek8,8	—	%1,0	12 Eyl 2026
31İzleyin	CVE-2026-85200Kavram kanıtı	GEO my WP <= 4.5.5.3 - Unauthenticated Local File Inclusionninjew · geo my wp · CWE-98 Girişsiz RCE	Yüksek7,5	—	%3,2	12 Eyl 2026
30İzleyin	CVE-2026-90474İstismar yok	MCPHub before 1.0.32 OAuth 2.0 Authentication Bypasssamanhappy · mcphub · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,6	—	%0,5	12 Eyl 2026
35İzleyin	CVE-2026-15451İstismar yok	MemberPress Corporate Accounts <= 1.5.39 - Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account Creationmemberpress · memberpress corporate accounts · CWE-269	Yüksek8,8	—	%0,4	12 Eyl 2026
35İzleyin	CVE-2026-90537İstismar yok	WWBN AVideo Scheduler sendEmail Missing Authorization via Tokenwwbn · avideo · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,8	—	%0,3	12 Eyl 2026
34İzleyin	CVE-2026-90553İstismar yok	vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processorvllm · vllm · CWE-94 RCE	Yüksek8,5	—	%0,3	12 Eyl 2026
28İzleyin	CVE-2026-90555İstismar yok	vLLM before 0.28.0 Denial of Service via Audio Headervllm · vllm · CWE-409	Yüksek7,1	—	%0,5	12 Eyl 2026
34İzleyin	CVE-2026-90556İstismar yok	Freeciv before 3.2.6 Heap Buffer Overflow via worklist_loadfreeciv · freeciv · CWE-122 Bellek hatası	Yüksek8,5	—	%0,2	12 Eyl 2026
37İzleyin	CVE-2026-90558İstismar yok	sngrep through 1.8.4 Stack Buffer Overflow via SIP Headersirontec · sngrep · CWE-121 Girişsiz RCE Bellek hatası	Kritik9,3	—	%0,8	12 Eyl 2026
35İzleyin	CVE-2026-90560İstismar yok	zstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictDecompressluben · zstd-jni · CWE-125 Kimlik doğrulamasız Bellek hatası	Yüksek8,8	—	%0,6	12 Eyl 2026
29İzleyin	CVE-2026-90616İstismar yok	In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated flatpak · flatpak · CWE-61 RCE Yerel yetki yükseltme	Yüksek7,4	—	%0,1	12 Eyl 2026
34İzleyin	CVE-2026-90559İstismar yok	snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompressxerial · snappy-java · CWE-787 Kimlik doğrulamasız Bellek hatası	Yüksek8,7	—	%0,6	12 Eyl 2026
36İzleyin	CVE-2026-90647İstismar yok	ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in thkalkitech · ase2000 v2 communication test set · CWE-295 Kimlik doğrulamasız Zayıf kripto	Kritik9,1	—	%0,2	12 Eyl 2026
32İzleyin	CVE-2026-90651İstismar yok	Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify upstream TLS certificates by default.socket · socket firewall · CWE-295 Kimlik doğrulamasız Zayıf kripto	Yüksek8,1	—	%0,2	12 Eyl 2026
34İzleyin	CVE-2026-90668İstismar yok	The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackerunrealircd · unrealircd · CWE-770 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,7	—	%0,5	12 Eyl 2026
34İzleyin	CVE-2026-90493İstismar yok	Tonec Internet Download Manager Kernel Driver idmwfp.sys access controltonec · internet download manager · CWE-266 Yerel yetki yükseltme	Yüksek8,5	—	%0,1	12 Eyl 2026
28İzleyin	CVE-2026-90648İstismar yok	wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table fliwebassembly · wabt · CWE-252 RCE	Yüksek7,1	—	%0,1	13 Eyl 2026
30İzleyin	CVE-2026-90678İstismar yok	An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5.haproxy · haproxy · CWE-130 Kimlik doğrulamasız	Yüksek7,5	—	%0,7	13 Eyl 2026
28İzleyin	CVE-2026-80071İstismar yok	User Registration & Membership < 5.2.8 - Author+ Privilege Escalation to Administratorunknown · user registration & membership · CWE-269	Yüksek7,2	—	%0,4	13 Eyl 2026
30İzleyin	CVE-2026-86406İstismar yok	User Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchaseunknown · user registration & membership · CWE-269	Yüksek7,5	—	%0,3	13 Eyl 2026
30İzleyin	CVE-2026-89080İstismar yok	Really Simple Security < 9.8.1 - Unauthenticated 2FA Bypass via Email Provider State Demotionunknown · really simple security · CWE-287 Kimlik doğrulama atlatma	Yüksek7,5	—	%0,3	13 Eyl 2026
8İzleyin	CVE-2026-90496İstismar yok	Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injectionfengoffice · feng office · CWE-74 SQL enjeksiyonu	Düşük2,0	—	%0,3	13 Eyl 2026
37İzleyin	CVE-2026-90561İstismar yok	Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYGstrapi · strapi · CWE-79 XSS	Kritik9,3	—	%0,4	13 Eyl 2026
36İzleyin	CVE-2026-90562İstismar yok	LangBot before 4.10.11 Authentication Bypass via Weak Recovery Keylangbot-app · langbot · CWE-331 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,2	—	%0,7	13 Eyl 2026
28İzleyin	CVE-2026-90767İstismar yok	Froxlor before 2.3.12 SSH Key Injection via authorized_keysfroxlor · froxlor · CWE-93	Yüksek7,1	—	%0,4	13 Eyl 2026
34İzleyin	CVE-2026-90768İstismar yok	CAPEv2 through commit 471ee4b REST API Task Endpoints Missing Ownership Checkkevoreilly · capev2 · CWE-862 Erişim denetimi (IDOR)	Yüksek8,6	—	%0,4	13 Eyl 2026
33İzleyin	CVE-2026-90769İstismar yok	Open Notebook before 1.11.0 Server-Side Request Forgery via link-sourcelfnovo · open-notebook · CWE-918 SSRF	Yüksek8,3	—	%0,4	13 Eyl 2026
34İzleyin	CVE-2026-90770İstismar yok	Spug through 3.4.0 Remote Code Execution via ping_checkopenspug · spug · CWE-78 RCE Komut enjeksiyonu	Yüksek8,7	—	%1,3	13 Eyl 2026
33İzleyin	CVE-2026-90772İstismar yok	Amundsen Frontend through 4.3.0 Stored XSS via Descriptionamundsen-io · amundsen-frontend · CWE-79 XSS	Yüksek8,3	—	%0,3	13 Eyl 2026
34İzleyin	CVE-2026-90774Kavram kanıtı	rustypaste before 0.18.1 Path Traversal via filename headerorhun · rustypaste · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek8,7	—	%1,3	13 Eyl 2026
28İzleyin	CVE-2026-90775İstismar yok	PostGIS address_standardizer through 3.7.0 Out-of-Bounds Read via Unvalidated Rule Weightpostgis · address_standardizer · CWE-125 Bellek hatası	Yüksek7,1	—	%0,6	13 Eyl 2026
34İzleyin	CVE-2026-90776İstismar yok	Nodemailer 9.1.0 through 10.0.4 Denial of Service via Quadratic Address Parsingnodemailer · nodemailer · CWE-407 Kimlik doğrulamasız	Yüksek8,7	—	%0,6	13 Eyl 2026
34İzleyin	CVE-2026-90777İstismar yok	ESPnet before 202609 Remote Code Execution via Unsafe Deserializationespnet · espnet · CWE-502 Girişsiz RCE Deserializasyon	Yüksek8,7	—	%0,7	13 Eyl 2026
34İzleyin	CVE-2026-90778İstismar yok	SIPp through 3.7.7 Buffer Overflow via SIP To Header Tagsipp · sipp · CWE-120 Kimlik doğrulamasız Bellek hatası	Yüksek8,7	—	%0,8	13 Eyl 2026
34İzleyin	CVE-2026-90779İstismar yok	SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parametersipp · sipp · CWE-121 Kimlik doğrulamasız Bellek hatası	Yüksek8,7	—	%0,8	13 Eyl 2026
34İzleyin	CVE-2026-90780İstismar yok	SIPp through 3.7.7 Buffer Overflow via Oversized SIP Header Contentsipp · sipp · CWE-120 Kimlik doğrulamasız Bellek hatası	Yüksek8,7	—	%0,8	13 Eyl 2026
19İzleyin	CVE-2026-90781Kavram kanıtı	alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()alsa project · alsa-lib · CWE-193	Orta4,8	—	%0,1	13 Eyl 2026
24İzleyin	CVE-2026-90782Kavram kanıtı	S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()systerel · s2opc · CWE-476 Bellek hatası	Orta6,0	—	%0,5	13 Eyl 2026
34İzleyin	CVE-2026-90783İstismar yok	MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparoundmoritz bunkus · mkvtoolnix · CWE-680	Yüksek8,5	—	%0,2	13 Eyl 2026

CVE-2026-89736
31İzleyin
usb: gadget: u_audio: Fix use-after-free on sound card disconnect
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89738
31İzleyin
usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89741
31İzleyin
Revert "media: v4l2-dev: fix error handling in __video_register_device()"
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89742
31İzleyin
rapidio: mport_cdev: fix use-after-free in dma_req_free()
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89743
30İzleyin
misc: nsm: bound the device-reported response length
YüksekCVSS 7,7İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89744
33İzleyin
device property: fix infinite loop in fwnode_for_each_child_node()
YüksekCVSS 8,4İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89746
31İzleyin
tracing: Fix use-after-free with same-name named triggers
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89747
31İzleyin
tracing: Fix use-after-free in trace_pipe read on sub-buffer order change
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89748
31İzleyin
tracing: Fix retry exhaustion in simple ring buffer reader swap
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89750
31İzleyin
tracing/user_events: Clear copied tracing state before fork duplication
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89754
31İzleyin
mm/pagewalk: fix stale walk->action escaping walk_pmd_range()
YüksekCVSS 7,8Kavram kanıtıEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89755
31İzleyin
mm/migrate_device: clear stale mapping after freeing swapcache
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89758
31İzleyin
mm/mempolicy: skip non-present PMDs when queueing folios
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89760
31İzleyin
mm, swap: don't free a hibernation slot that is in the swap cache
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89761
31İzleyin
apparmor: fix out-of-bounds write when null terminating a label vec
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89762
31İzleyin
apparmor: fix cred UAF caused by begin_current_label_crit_section()
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89763
31İzleyin
KEYS: trusted: Fix TPM teardown ordering
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89764
31İzleyin
rust: devres: fix race between concurrent revokers
YüksekCVSS 7,8İstismar yokEPSS %0
- Yarış durumu
linux · linux11 Eyl 2026
CVE-2026-89767
31İzleyin
ovl: fix double end_creating() on the casefold-mismatch path
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89769
29İzleyin
clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path
YüksekCVSS 7,4İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-89771
31İzleyin
ring-buffer: Fix subbuf resize race with ring buffer readers
YüksekCVSS 7,8İstismar yokEPSS %0
linux · linux11 Eyl 2026
CVE-2026-47773
28İzleyin
ArduinoBLE: Memory corruption via malformed ATT write request
YüksekCVSS 7,2İstismar yokEPSS %0
- Kimlik doğrulamasız
arduino-libraries · arduinoble11 Eyl 2026
CVE-2026-49464
32İzleyin
NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak
YüksekCVSS 8,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
nl-portal · nl-portal-backend-libraries11 Eyl 2026
CVE-2026-54166
28İzleyin
Shelf Vulnerable to Server-Side Request Forgery (SSRF) via Asset CSV Import imageUrl Validation Bypass
YüksekCVSS 7,1İstismar yokEPSS %0
- SSRF
shelf-nu · shelf.nu11 Eyl 2026
CVE-2026-54174
33İzleyin
melange: Incomplete package integrity verification allows data section substitution
YüksekCVSS 8,3İstismar yokEPSS %0
- Kimlik doğrulamasız
chainguard-dev · melange11 Eyl 2026
CVE-2026-49846
30İzleyin
libks has path traversal in kws HTTP parser via URI segment overflow
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
signalwire · libks11 Eyl 2026
CVE-2026-50013
30İzleyin
Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yarış durumu
- Hizmet dışı bırakma
spectolabs · hoverfly11 Eyl 2026
CVE-2026-54240
29İzleyin
libde265: Pixel accessor signed integer overflow causes heap OOB read/write
YüksekCVSS 7,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
strukturag · libde26511 Eyl 2026
CVE-2026-54241
29İzleyin
libde265: SAO sequential filter heap buffer overflow via signed integer overflow
YüksekCVSS 7,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
strukturag · libde26511 Eyl 2026
CVE-2026-90444
34İzleyin
OS Command Injection in Malcolm
YüksekCVSS 8,7İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
cisa · malcolm11 Eyl 2026
CVE-2026-90445
28İzleyin
Path Traversal in Malcolm
YüksekCVSS 7,1İstismar yokEPSS %0
- Yol geçişi
cisa · malcolm11 Eyl 2026
CVE-2026-90447
28İzleyin
Authentication Bypass by Spoofing in Malcolm
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulama atlatma
cisa · malcolm11 Eyl 2026
CVE-2026-90448
28İzleyin
Missing Authorization in Malcolm
YüksekCVSS 7,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
cisa · malcolm11 Eyl 2026
CVE-2026-90451
32İzleyin
Use of Default Credentials in Malcolm
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
cisa · malcolm11 Eyl 2026
CVE-2026-90456
36İzleyin
Use of default credentials in Malcolm
KritikCVSS 9,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
cisa · malcolm11 Eyl 2026
CVE-2026-90460
30İzleyin
An issue was discovered in OpenStack Keystone before 29.0.3.
YüksekCVSS 7,6İstismar yokEPSS %0
- Erişim denetimi (IDOR)
openstack · keystone11 Eyl 2026
CVE-2026-85706
99Hemen
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %97
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- Yol geçişi
gitlab · gitlab11 Eyl 2026
CVE-2026-75800
39İzleyin
Frontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponse
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
unknown · frontegg saml sso12 Eyl 2026
CVE-2026-77005
38İzleyin
Code Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversal
KritikCVSS 9,6İstismar yokEPSS %0
- Yol geçişi
unknown · code monkeys proposals12 Eyl 2026
CVE-2026-77006
38İzleyin
WebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal
KritikCVSS 9,6İstismar yokEPSS %0
- Yol geçişi
- CSRF
unknown · webtotem backups12 Eyl 2026
CVE-2026-77705
28İzleyin
Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeover
YüksekCVSS 7,2İstismar yokEPSS %0
- Erişim denetimi (IDOR)
unknown · booking for appointments and events calendar12 Eyl 2026
CVE-2026-77752
28İzleyin
Temporary Login Without Password 1.5 - 1.9.8 - Multisite Subsite Admin+ Network Super Admin Privilege Escalation
YüksekCVSS 7,2İstismar yokEPSS %0
unknown · temporary login without password12 Eyl 2026
CVE-2026-80491
34İzleyin
SAMO Forms <= 1.0.0 - Unauthenticated SQLi
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
unknown · samo forms12 Eyl 2026
CVE-2026-80494
34İzleyin
Yogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File Download
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
unknown · yogeta wp cloud12 Eyl 2026
CVE-2026-81090
28İzleyin
Gpx2Graphics <= 0.3 - Arbitrary File Upload via CSRF
YüksekCVSS 7,2İstismar yokEPSS %0
- RCE
- Dosya yükleme
- CSRF
unknown · gpx2graphics12 Eyl 2026
CVE-2026-81402
39İzleyin
DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
- Dosya yükleme
unknown · ds ad rotator12 Eyl 2026
CVE-2026-81429
28İzleyin
Export & Import WPBakery Page Builder <= 1.0.2 - Stored XSS via CSRF
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
- CSRF
unknown · export & import wpbakery page builder12 Eyl 2026
CVE-2026-81742
35İzleyin
BE REST Endpoints <= 1.0.0 - Unauthenticated Stored XSS and Widget Manipulation
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
unknown · be rest endpoints12 Eyl 2026
CVE-2026-82845
39İzleyin
Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection
KritikCVSS 9,9İstismar yokEPSS %0
- RCE
- Deserializasyon
unknown · masteriyo lms12 Eyl 2026
CVE-2026-84047
34İzleyin
Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
unknown · album cover finder12 Eyl 2026
CVE-2026-84099
32İzleyin
IDB Ecommerce (wpStoreCart 5) <= 5.0.7 - Unauthenticated PHP Object Injection via bundled wpsc-membership-pro paypal.php
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- Deserializasyon
unknown · wpstorecart12 Eyl 2026
CVE-2026-84171
39İzleyin
WP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Upload
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
- Dosya yükleme
unknown · wp images upload on piclect12 Eyl 2026
CVE-2026-85681
39İzleyin
WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
unknown · wp component12 Eyl 2026
CVE-2026-87759
35İzleyin
Add User Autocomplete < 1.2 - Subscriber+ Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %0
unknown · add user autocomplete12 Eyl 2026
CVE-2026-87842
30İzleyin
Zonify < 1.0.5 - Unauthenticated Account Login Token Disclosure
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
unknown · zonify12 Eyl 2026
CVE-2026-87888
32İzleyin
YayPricing < 3.5.7 - Subscriber+ Stored XSS via save_page_data REST Route
YüksekCVSS 8,0İstismar yokEPSS %0
- XSS
unknown · yaypricing12 Eyl 2026
CVE-2026-87892
21İzleyin
Rox Appointment Booking < 1.2.0 - Unauthenticated Price Manipulation and Payment Method Restriction Bypass
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
unknown · rox appointment booking12 Eyl 2026
CVE-2026-87719
39İzleyin
Deserialization of Untrusted Data in GitLab
KritikCVSS 9,9İstismar yokEPSS %0
- Deserializasyon
gitlab · gitlab12 Eyl 2026
CVE-2026-16482
30İzleyin
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection via 'compare' Parameter
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
rtcamp · rtmedia for wordpress, buddypress and bbpress12 Eyl 2026
CVE-2026-78006
39İzleyin
The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution
KritikCVSS 9,8Kavram kanıtıEPSS %1
- Girişsiz RCE
- Kimlik doğrulama atlatma
- Deserializasyon
stellarwp · the events calendar12 Eyl 2026
CVE-2026-78159
39İzleyin
The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocation
KritikCVSS 9,8Kavram kanıtıEPSS %1
- Girişsiz RCE
stellarwp · the events calendar12 Eyl 2026
CVE-2026-78175
35İzleyin
Tutor LMS <= 4.0.7 - Authenticated (Subscriber+) PHP Object Injection to Remote Code Execution
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Deserializasyon
themeum · tutor lms – elearning and online course solution12 Eyl 2026
CVE-2026-85200
31İzleyin
GEO my WP <= 4.5.5.3 - Unauthenticated Local File Inclusion
YüksekCVSS 7,5Kavram kanıtıEPSS %3
- Girişsiz RCE
ninjew · geo my wp12 Eyl 2026
CVE-2026-90474
30İzleyin
MCPHub before 1.0.32 OAuth 2.0 Authentication Bypass
YüksekCVSS 7,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
samanhappy · mcphub12 Eyl 2026
CVE-2026-15451
35İzleyin
MemberPress Corporate Accounts <= 1.5.39 - Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account Creation
YüksekCVSS 8,8İstismar yokEPSS %0
memberpress · memberpress corporate accounts12 Eyl 2026
CVE-2026-90537
35İzleyin
WWBN AVideo Scheduler sendEmail Missing Authorization via Token
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
wwbn · avideo12 Eyl 2026
CVE-2026-90553
34İzleyin
vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processor
YüksekCVSS 8,5İstismar yokEPSS %0
- RCE
vllm · vllm12 Eyl 2026
CVE-2026-90555
28İzleyin
vLLM before 0.28.0 Denial of Service via Audio Header
YüksekCVSS 7,1İstismar yokEPSS %0
vllm · vllm12 Eyl 2026
CVE-2026-90556
34İzleyin
Freeciv before 3.2.6 Heap Buffer Overflow via worklist_load
YüksekCVSS 8,5İstismar yokEPSS %0
- Bellek hatası
freeciv · freeciv12 Eyl 2026
CVE-2026-90558
37İzleyin
sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers
KritikCVSS 9,3İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
irontec · sngrep12 Eyl 2026
CVE-2026-90560
35İzleyin
zstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictDecompress
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
luben · zstd-jni12 Eyl 2026
CVE-2026-90616
29İzleyin
In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated
YüksekCVSS 7,4İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
flatpak · flatpak12 Eyl 2026
CVE-2026-90559
34İzleyin
snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompress
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
xerial · snappy-java12 Eyl 2026
CVE-2026-90647
36İzleyin
ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in th
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
kalkitech · ase2000 v2 communication test set12 Eyl 2026
CVE-2026-90651
32İzleyin
Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify upstream TLS certificates by default.
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
socket · socket firewall12 Eyl 2026
CVE-2026-90668
34İzleyin
The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attacker
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
unrealircd · unrealircd12 Eyl 2026
CVE-2026-90493
34İzleyin
Tonec Internet Download Manager Kernel Driver idmwfp.sys access control
YüksekCVSS 8,5İstismar yokEPSS %0
- Yerel yetki yükseltme
tonec · internet download manager12 Eyl 2026
CVE-2026-90648
28İzleyin
wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table fli
YüksekCVSS 7,1İstismar yokEPSS %0
- RCE
webassembly · wabt13 Eyl 2026
CVE-2026-90678
30İzleyin
An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5.
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
haproxy · haproxy13 Eyl 2026
CVE-2026-80071
28İzleyin
User Registration & Membership < 5.2.8 - Author+ Privilege Escalation to Administrator
YüksekCVSS 7,2İstismar yokEPSS %0
unknown · user registration & membership13 Eyl 2026
CVE-2026-86406
30İzleyin
User Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchase
YüksekCVSS 7,5İstismar yokEPSS %0
unknown · user registration & membership13 Eyl 2026
CVE-2026-89080
30İzleyin
Really Simple Security < 9.8.1 - Unauthenticated 2FA Bypass via Email Provider State Demotion
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulama atlatma
unknown · really simple security13 Eyl 2026
CVE-2026-90496
8İzleyin
Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection
DüşükCVSS 2,0İstismar yokEPSS %0
- SQL enjeksiyonu
fengoffice · feng office13 Eyl 2026
CVE-2026-90561
37İzleyin
Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG
KritikCVSS 9,3İstismar yokEPSS %0
- XSS
strapi · strapi13 Eyl 2026
CVE-2026-90562
36İzleyin
LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key
KritikCVSS 9,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
langbot-app · langbot13 Eyl 2026
CVE-2026-90767
28İzleyin
Froxlor before 2.3.12 SSH Key Injection via authorized_keys
YüksekCVSS 7,1İstismar yokEPSS %0
froxlor · froxlor13 Eyl 2026
CVE-2026-90768
34İzleyin
CAPEv2 through commit 471ee4b REST API Task Endpoints Missing Ownership Check
YüksekCVSS 8,6İstismar yokEPSS %0
- Erişim denetimi (IDOR)
kevoreilly · capev213 Eyl 2026
CVE-2026-90769
33İzleyin
Open Notebook before 1.11.0 Server-Side Request Forgery via link-source
YüksekCVSS 8,3İstismar yokEPSS %0
- SSRF
lfnovo · open-notebook13 Eyl 2026
CVE-2026-90770
34İzleyin
Spug through 3.4.0 Remote Code Execution via ping_check
YüksekCVSS 8,7İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
openspug · spug13 Eyl 2026
CVE-2026-90772
33İzleyin
Amundsen Frontend through 4.3.0 Stored XSS via Description
YüksekCVSS 8,3İstismar yokEPSS %0
- XSS
amundsen-io · amundsen-frontend13 Eyl 2026
CVE-2026-90774
34İzleyin
rustypaste before 0.18.1 Path Traversal via filename header
YüksekCVSS 8,7Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
orhun · rustypaste13 Eyl 2026
CVE-2026-90775
28İzleyin
PostGIS address_standardizer through 3.7.0 Out-of-Bounds Read via Unvalidated Rule Weight
YüksekCVSS 7,1İstismar yokEPSS %0
- Bellek hatası
postgis · address_standardizer13 Eyl 2026
CVE-2026-90776
34İzleyin
Nodemailer 9.1.0 through 10.0.4 Denial of Service via Quadratic Address Parsing
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
nodemailer · nodemailer13 Eyl 2026
CVE-2026-90777
34İzleyin
ESPnet before 202609 Remote Code Execution via Unsafe Deserialization
YüksekCVSS 8,7İstismar yokEPSS %0
- Girişsiz RCE
- Deserializasyon
espnet · espnet13 Eyl 2026
CVE-2026-90778
34İzleyin
SIPp through 3.7.7 Buffer Overflow via SIP To Header Tag
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
sipp · sipp13 Eyl 2026
CVE-2026-90779
34İzleyin
SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
sipp · sipp13 Eyl 2026
CVE-2026-90780
34İzleyin
SIPp through 3.7.7 Buffer Overflow via Oversized SIP Header Content
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
sipp · sipp13 Eyl 2026
CVE-2026-90781
19İzleyin
alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()
OrtaCVSS 4,8Kavram kanıtıEPSS %0
alsa project · alsa-lib13 Eyl 2026
CVE-2026-90782
24İzleyin
S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()
OrtaCVSS 6,0Kavram kanıtıEPSS %0
- Bellek hatası
systerel · s2opc13 Eyl 2026
CVE-2026-90783
34İzleyin
MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound
YüksekCVSS 8,5İstismar yokEPSS %0
moritz bunkus · mkvtoolnix13 Eyl 2026