Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.961 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 34 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2026-64701İstismar yok | A permissions issue was addressed with additional restrictions.apple · macos · CWE-280 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
31İzleyin | CVE-2026-64712İstismar yok | This issue was addressed with improved checks.apple · macos · CWE-284 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
28İzleyin | CVE-2026-64736İstismar yok | An out-of-bounds access issue was addressed with improved bounds checking.apple · ipados · CWE-125 | Yüksek7,1 | — | %0,1 | 14 Eyl 2026 |
29İzleyin | CVE-2026-64752İstismar yok | A memory corruption issue was addressed by removing the vulnerable code.apple · ipados · CWE-787 | Yüksek7,3 | — | %0,1 | 14 Eyl 2026 |
30İzleyin | CVE-2026-64761İstismar yok | A privacy issue was addressed with improved handling of user preferences.apple · ipados · CWE-200 | Yüksek7,5 | — | %0,3 | 14 Eyl 2026 |
31İzleyin | CVE-2026-64790İstismar yok | A path handling issue was addressed with improved validation.apple · macos · CWE-22 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
30İzleyin | CVE-2026-65342İstismar yok | A permissions issue was addressed with improved validation.apple · macos · CWE-862 | Yüksek7,5 | — | %0,3 | 14 Eyl 2026 |
31İzleyin | CVE-2026-65344İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
32İzleyin | CVE-2026-65354İstismar yok | A permissions issue was addressed with additional restrictions.apple · ipados · CWE-269 | Yüksek8,2 | — | %0,1 | 14 Eyl 2026 |
31İzleyin | CVE-2026-65357İstismar yok | The issue was addressed with improved memory handling.apple · ipados · CWE-120 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
28İzleyin | CVE-2026-65359İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · ipados · CWE-125 | Yüksek7,1 | — | %0,1 | 14 Eyl 2026 |
31İzleyin | CVE-2026-65362İstismar yok | This issue was addressed with improved checks.apple · macos · CWE-284 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
30İzleyin | CVE-2026-65364İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Yüksek7,5 | — | %0,7 | 14 Eyl 2026 |
35İzleyin | CVE-2026-65374Kavram kanıtı | A memory corruption issue was addressed with improved validation.apple · macos · CWE-787 | Yüksek8,8 | — | %0,5 | 14 Eyl 2026 |
30İzleyin | CVE-2026-65375İstismar yok | The issue was addressed with improved authentication.apple · macos · CWE-287 | Yüksek7,5 | — | %0,6 | 14 Eyl 2026 |
30İzleyin | CVE-2026-65378İstismar yok | An authorization issue was addressed with improved state management.apple · macos · CWE-863 | Yüksek7,5 | — | %0,3 | 14 Eyl 2026 |
40Planlayın | CVE-2026-65381İstismar yok | A validation issue existed in the entitlement verification.apple · macos · CWE-862 | Kritik10,0 | — | %0,3 | 14 Eyl 2026 |
35İzleyin | CVE-2026-65390İstismar yok | An integer overflow was addressed with improved input validation.apple · safari · CWE-190 | Yüksek8,8 | — | %0,4 | 14 Eyl 2026 |
35İzleyin | CVE-2026-65391İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · safari · CWE-190 | Yüksek8,8 | — | %0,4 | 14 Eyl 2026 |
31İzleyin | CVE-2026-65398İstismar yok | An out-of-bounds access issue was addressed with improved bounds checking.apple · ipados · CWE-120 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
30İzleyin | CVE-2026-65410İstismar yok | The issue was addressed with improved checks.apple · ipados · CWE-248 | Yüksek7,5 | — | %0,4 | 14 Eyl 2026 |
39İzleyin | CVE-2026-65414İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Kritik9,8 | — | %1,2 | 14 Eyl 2026 |
32İzleyin | CVE-2026-65415İstismar yok | A race condition was addressed with additional validation.apple · ipados · CWE-362 | Yüksek8,1 | — | %0,3 | 14 Eyl 2026 |
37İzleyin | CVE-2026-67399İstismar yok | Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code.webpros · whmcs · CWE-502 | Kritik9,3 | — | %0,7 | 14 Eyl 2026 |
34İzleyin | CVE-2026-68489İstismar yok | Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to executwebpros · plesk extension "ruby" · CWE-96 | Yüksek8,7 | — | %0,6 | 14 Eyl 2026 |
28İzleyin | CVE-2026-81901İstismar yok | Concrete CMS 9.2.0 to 9.5.2 is vulnerable to stored XSS due to missing authorization in the `PUT /pages/{cID}` endpointconcretecms · concrete cms · CWE-862 | Yüksek7,2 | — | %0,3 | 14 Eyl 2026 |
28İzleyin | CVE-2026-81902İstismar yok | Concrete CMS 9.0.0 to 9.5.2 is vulnerable to CSRF on Orphan Block Cleanupconcretecms · concrete cms · CWE-352 | Yüksek7,1 | — | %0,2 | 14 Eyl 2026 |
28İzleyin | CVE-2026-81903İstismar yok | Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Stored XSS via Page Container iconconcretecms · concrete cms · CWE-79 | Yüksek7,0 | — | %0,3 | 14 Eyl 2026 |
31İzleyin | CVE-2026-84497İstismar yok | A buffer overflow was addressed with improved size validation.apple · ipados · CWE-120 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
31İzleyin | CVE-2026-84505İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-787 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
31İzleyin | CVE-2026-84507İstismar yok | A race condition was addressed with improved state handling.apple · ipados · CWE-362 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
31İzleyin | CVE-2026-84511İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
35İzleyin | CVE-2026-84512İstismar yok | A buffer overflow was addressed with improved bounds checking.apple · macos · CWE-120 | Yüksek8,8 | — | %0,4 | 14 Eyl 2026 |
31İzleyin | CVE-2026-84515İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-787 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
32İzleyin | CVE-2026-84516İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Yüksek8,1 | — | %0,4 | 14 Eyl 2026 |
39İzleyin | CVE-2026-84520Kavram kanıtı | A buffer overflow was addressed with improved size validation.apple · macos · CWE-120 | Kritik9,8 | — | %0,4 | 14 Eyl 2026 |
32İzleyin | CVE-2026-84535İstismar yok | An authorization issue was addressed with improved state management.apple · macos · CWE-284 | Yüksek8,2 | — | %0,1 | 14 Eyl 2026 |
30İzleyin | CVE-2026-84543Kavram kanıtı | An out-of-bounds access issue was addressed with improved bounds checking.apple · macos · CWE-125 | Yüksek7,5 | — | %0,4 | 14 Eyl 2026 |
30İzleyin | CVE-2026-84544İstismar yok | An integer overflow was addressed with improved input validation.apple · macos · CWE-190 | Yüksek7,5 | — | %0,5 | 14 Eyl 2026 |
33İzleyin | CVE-2026-84546İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Yüksek8,4 | — | %0,1 | 14 Eyl 2026 |
28İzleyin | CVE-2026-84548İstismar yok | An integer overflow was addressed with improved input validation.apple · macos · CWE-190 | Yüksek7,1 | — | %0,1 | 14 Eyl 2026 |
30İzleyin | CVE-2026-84549İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Yüksek7,5 | — | %0,5 | 14 Eyl 2026 |
30İzleyin | CVE-2026-84553İstismar yok | A resource exhaustion issue was addressed with improved input validation.apple · macos · CWE-400 | Yüksek7,5 | — | %0,6 | 14 Eyl 2026 |
39İzleyin | CVE-2026-84561İstismar yok | A double free issue was addressed with improved memory management.apple · ipados · CWE-415 | Kritik9,8 | — | %0,6 | 14 Eyl 2026 |
30İzleyin | CVE-2026-84563İstismar yok | A logic issue was addressed with improved checks.apple · macos · CWE-843 | Yüksek7,5 | — | %0,4 | 14 Eyl 2026 |
28İzleyin | CVE-2026-84565İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Yüksek7,1 | — | %0,1 | 14 Eyl 2026 |
31İzleyin | CVE-2026-84566İstismar yok | The issue was addressed with improved memory handling.apple · ipados · CWE-119 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
31İzleyin | CVE-2026-84568Kavram kanıtı | A path traversal issue was addressed with improved path validation.apple · macos · CWE-22 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
28İzleyin | CVE-2026-84572İstismar yok | An out-of-bounds read was addressed with improved bounds checking.apple · macos · CWE-125 | Yüksek7,1 | — | %0,1 | 14 Eyl 2026 |
31İzleyin | CVE-2026-84575İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
32İzleyin | CVE-2026-84577İstismar yok | An access issue was addressed with additional sandbox restrictions.apple · macos · CWE-120 | Yüksek8,2 | — | %0,1 | 14 Eyl 2026 |
35İzleyin | CVE-2026-84578İstismar yok | A logic issue was addressed with improved checks.apple · macos · CWE-693 | Yüksek8,8 | — | %0,1 | 14 Eyl 2026 |
33İzleyin | CVE-2026-84580İstismar yok | The issue was addressed with improved checks.apple · macos · CWE-862 | Yüksek8,4 | — | %0,1 | 14 Eyl 2026 |
33İzleyin | CVE-2026-84581İstismar yok | A buffer overflow was addressed with improved bounds checking.apple · macos · CWE-120 | Yüksek8,4 | — | %0,2 | 14 Eyl 2026 |
33İzleyin | CVE-2026-84584İstismar yok | This issue was addressed with improved handling of symlinks.apple · macos · CWE-59 | Yüksek8,4 | — | %0,1 | 14 Eyl 2026 |
22İzleyin | CVE-2026-84589Kavram kanıtı | A permissions issue was addressed with additional restrictions.apple · macos · CWE-863 | Orta5,5 | — | %0,1 | 14 Eyl 2026 |
30İzleyin | CVE-2026-84598İstismar yok | A path traversal issue was addressed with improved path validation.apple · ipados · CWE-22 | Yüksek7,5 | — | %0,4 | 14 Eyl 2026 |
21İzleyin | CVE-2026-84600Kavram kanıtı | An authorization issue was addressed with improved state management.apple · ipados · CWE-285 | Orta5,4 | — | %0,2 | 14 Eyl 2026 |
30İzleyin | CVE-2026-84606İstismar yok | A privacy issue was addressed with improved handling of identifiers.apple · ipados · CWE-287 | Yüksek7,5 | — | %0,4 | 14 Eyl 2026 |
31İzleyin | CVE-2026-84607İstismar yok | A race condition was addressed with improved state management.apple · ipados · CWE-362 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
39İzleyin | CVE-2026-84609İstismar yok | A permissions issue was addressed with improved path validation.apple · ipados · CWE-120 | Kritik9,8 | — | %0,6 | 14 Eyl 2026 |
29İzleyin | CVE-2026-84611İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 | Yüksek7,3 | — | %0,1 | 14 Eyl 2026 |
22İzleyin | CVE-2026-84616Kavram kanıtı | A type confusion issue was addressed with improved memory handling.apple · ipados · CWE-441 | Orta5,5 | — | %0,1 | 14 Eyl 2026 |
29İzleyin | CVE-2026-84620İstismar yok | An integer overflow was addressed with improved input validation.apple · ipados · CWE-190 | Yüksek7,3 | — | %0,1 | 14 Eyl 2026 |
30İzleyin | CVE-2026-84623İstismar yok | An authorization issue was addressed with improved state management.apple · ipados · CWE-287 | Yüksek7,5 | — | %0,3 | 14 Eyl 2026 |
36İzleyin | CVE-2026-84625İstismar yok | A permissions issue was addressed with additional sandbox restrictions.apple · ipados · CWE-200 | Kritik9,1 | — | %0,4 | 14 Eyl 2026 |
30İzleyin | CVE-2026-84629İstismar yok | This issue was addressed with additional entitlement checks.apple · ipados · CWE-862 | Yüksek7,5 | — | %0,4 | 14 Eyl 2026 |
31İzleyin | CVE-2026-84631İstismar yok | This issue was addressed with additional entitlement checks.apple · macos · CWE-280 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
29İzleyin | CVE-2026-84632İstismar yok | The issue was addressed with improved memory handling.apple · ipados · CWE-120 | Yüksek7,3 | — | %0,1 | 14 Eyl 2026 |
22İzleyin | CVE-2026-84636Kavram kanıtı | An authorization issue was addressed with improved state management.apple · ipados · CWE-285 | Orta5,5 | — | %0,1 | 14 Eyl 2026 |
36İzleyin | CVE-2026-86881Kavram kanıtı | A certificate validation issue was addressed with improved certificate validation.apple · ipados · CWE-295 | Kritik9,1 | — | %0,3 | 14 Eyl 2026 |
30İzleyin | CVE-2026-86894İstismar yok | A logic issue was addressed with improved checks.apple · macos · CWE-693 | Yüksek7,5 | — | %0,3 | 14 Eyl 2026 |
30İzleyin | CVE-2026-86895İstismar yok | An information disclosure issue was addressed with improved state management.apple · ipados · CWE-200 | Yüksek7,5 | — | %0,4 | 14 Eyl 2026 |
28İzleyin | CVE-2026-86901İstismar yok | An out-of-bounds write issue was addressed with improved bounds checking.apple · macos · CWE-787 | Yüksek7,1 | — | %0,1 | 14 Eyl 2026 |
30İzleyin | CVE-2026-86904İstismar yok | A privacy issue was addressed with improved state management.apple · ipados · CWE-359 | Yüksek7,5 | — | %0,4 | 14 Eyl 2026 |
31İzleyin | CVE-2026-86917İstismar yok | A permissions issue was addressed with additional restrictions.apple · macos · CWE-280 | Yüksek7,8 | — | %0,1 | 14 Eyl 2026 |
32İzleyin | CVE-2026-90896İstismar yok | Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PIImarcoscamara01 · ecommerce template · CWE-306 | Yüksek8,2 | — | %0,7 | 14 Eyl 2026 |
30İzleyin | CVE-2026-54155İstismar yok | node-opcua: Missing nonce verification in UserNameIdentityToken authenticationnode-opcua · node-opcua · CWE-347 | Yüksek7,7 | — | %0,4 | 14 Eyl 2026 |
30İzleyin | CVE-2026-54156İstismar yok | node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoSnode-opcua · node-opcua · CWE-770 | Yüksek7,5 | — | %0,7 | 14 Eyl 2026 |
33İzleyin | CVE-2026-55451İstismar yok | gettext-converter: Prototype pollution in js2i18next() via crafted translation keyslocize · gettext-converter · CWE-1321 | Yüksek8,3 | — | %0,5 | 14 Eyl 2026 |
30İzleyin | CVE-2026-57579İstismar yok | Alchemy: Unauthenticated nested page API leaks restricted & unpublished contentalchemycms · alchemy_cms · CWE-862 | Yüksek7,5 | — | %0,6 | 14 Eyl 2026 |
30İzleyin | CVE-2026-59960İstismar yok | Argos JavaScript: CI Branch Name OS Command Injection in @argos-ci/coreargos-ci · argos-javascript · CWE-78 | Yüksek7,5 | — | %0,6 | 14 Eyl 2026 |
35İzleyin | CVE-2026-61701İstismar yok | Laravel MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Executioncesargb · laravel-magiclink · CWE-502 | Yüksek8,8 | — | %0,7 | 14 Eyl 2026 |
28İzleyin | CVE-2026-12756İstismar yok | Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026ibm · business automation workflow containers and traditional · CWE-611 | Yüksek7,1 | — | %0,4 | 14 Eyl 2026 |
38İzleyin | CVE-2026-12944Kavram kanıtı | Incomplete Security Scanner Blocklist Enables Network-Based Code Executionibm · langflow oss · CWE-918 | Kritik9,6 | — | %0,3 | 14 Eyl 2026 |
34İzleyin | CVE-2026-91144İstismar yok | ZFile through 5.0.5 Share Entry Filter Bypass via Download Endpointzfile-dev · zfile · CWE-639 | Yüksek8,7 | — | %0,5 | 14 Eyl 2026 |
28İzleyin | CVE-2026-91145İstismar yok | Activiti through 7.1.0.M6 Expression Injection via Mail Taskactiviti · activiti · CWE-917 | Yüksek7,1 | — | %0,4 | 14 Eyl 2026 |
33İzleyin | CVE-2026-34151Kavram kanıtı | XWiki Platform: Resource path traversal via /skin/ action endpoint in Jetty 12+xwiki · xwiki-platform · CWE-24 | Yüksek8,2 | — | %2,4 | 14 Eyl 2026 |
34İzleyin | CVE-2026-49250İstismar yok | Conform: parseSubmission vulnerable to CPU exhaustion when parsing many unique form fieldsedmundhung · conform · CWE-407 | Yüksek8,7 | — | %0,5 | 14 Eyl 2026 |
30İzleyin | CVE-2026-50270İstismar yok | dd-trace-java: Improper parsing of W3C baggage headers may lead to DoSdatadog · dd-trace-java · CWE-770 | Yüksek7,5 | — | %0,7 | 14 Eyl 2026 |
30İzleyin | CVE-2026-53659İstismar yok | http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoShttp4k · http4k · CWE-409 | Yüksek7,5 | — | %0,6 | 14 Eyl 2026 |
30İzleyin | CVE-2026-53752İstismar yok | docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Serviceplutext · docx4j · CWE-674 | Yüksek7,5 | — | %0,6 | 14 Eyl 2026 |
30İzleyin | CVE-2026-54087İstismar yok | EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageFieldeasycorp · easyadminbundle · CWE-79 | Yüksek7,6 | — | %0,4 | 14 Eyl 2026 |
30İzleyin | CVE-2026-54175İstismar yok | backpack/crud: Unverified password change in MyAccountController via mass assignmentlaravel-backpack · crud · CWE-620 | Yüksek7,6 | — | %0,5 | 14 Eyl 2026 |
32İzleyin | CVE-2026-54178İstismar yok | backpack/crud: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisklaravel-backpack · crud · CWE-22 | Yüksek8,1 | — | %0,5 | 14 Eyl 2026 |
30İzleyin | CVE-2026-54180İstismar yok | backpack/crud: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)laravel-backpack · crud · CWE-639 | Yüksek7,6 | — | %0,4 | 14 Eyl 2026 |
32İzleyin | CVE-2026-54182İstismar yok | backpack/crud: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)laravel-backpack · crud · CWE-20 | Yüksek8,1 | — | %0,7 | 14 Eyl 2026 |
30İzleyin | CVE-2026-54567İstismar yok | Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)jugmac00 · flask-reuploaded · CWE-178 | Yüksek7,5 | — | %0,6 | 14 Eyl 2026 |
30İzleyin | CVE-2026-55091İstismar yok | flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id keyjoaonuno · flat-to-nested-js · CWE-915 | Yüksek7,5 | — | %0,4 | 14 Eyl 2026 |
30İzleyin | CVE-2026-55253İstismar yok | LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposurelangchain-ai · langchain-mongodb · CWE-943 | Yüksek7,7 | — | %0,5 | 14 Eyl 2026 |
- CVE-2026-6470131İzleyin
A permissions issue was addressed with additional restrictions.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-6471231İzleyin
This issue was addressed with improved checks.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-6473628İzleyin
An out-of-bounds access issue was addressed with improved bounds checking.
YüksekCVSS 7,1İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-6475229İzleyin
A memory corruption issue was addressed by removing the vulnerable code.
YüksekCVSS 7,3İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-6476130İzleyin
A privacy issue was addressed with improved handling of user preferences.
YüksekCVSS 7,5İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-6479031İzleyin
A path handling issue was addressed with improved validation.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-6534230İzleyin
A permissions issue was addressed with improved validation.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-6534431İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-6535432İzleyin
A permissions issue was addressed with additional restrictions.
YüksekCVSS 8,2İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-6535731İzleyin
The issue was addressed with improved memory handling.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-6535928İzleyin
An out-of-bounds read was addressed with improved bounds checking.
YüksekCVSS 7,1İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-6536231İzleyin
This issue was addressed with improved checks.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-6536430İzleyin
An out-of-bounds read was addressed with improved bounds checking.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-6537435İzleyin
A memory corruption issue was addressed with improved validation.
YüksekCVSS 8,8Kavram kanıtıEPSS %0apple · macos14 Eyl 2026
- CVE-2026-6537530İzleyin
The issue was addressed with improved authentication.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-6537830İzleyin
An authorization issue was addressed with improved state management.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-6538140Planlayın
A validation issue existed in the entitlement verification.
KritikCVSS 10,0İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-6539035İzleyin
An integer overflow was addressed with improved input validation.
YüksekCVSS 8,8İstismar yokEPSS %0apple · safari14 Eyl 2026
- CVE-2026-6539135İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
YüksekCVSS 8,8İstismar yokEPSS %0apple · safari14 Eyl 2026
- CVE-2026-6539831İzleyin
An out-of-bounds access issue was addressed with improved bounds checking.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-6541030İzleyin
The issue was addressed with improved checks.
YüksekCVSS 7,5İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-6541439İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
KritikCVSS 9,8İstismar yokEPSS %1apple · ipados14 Eyl 2026
- CVE-2026-6541532İzleyin
A race condition was addressed with additional validation.
YüksekCVSS 8,1İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-6739937İzleyin
Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code.
KritikCVSS 9,3İstismar yokEPSS %0webpros · whmcs14 Eyl 2026
- CVE-2026-6848934İzleyin
Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execut
YüksekCVSS 8,7İstismar yokEPSS %0webpros · plesk extension "ruby"14 Eyl 2026
- CVE-2026-8190128İzleyin
Concrete CMS 9.2.0 to 9.5.2 is vulnerable to stored XSS due to missing authorization in the `PUT /pages/{cID}` endpoint
YüksekCVSS 7,2İstismar yokEPSS %0concretecms · concrete cms14 Eyl 2026
- CVE-2026-8190228İzleyin
Concrete CMS 9.0.0 to 9.5.2 is vulnerable to CSRF on Orphan Block Cleanup
YüksekCVSS 7,1İstismar yokEPSS %0concretecms · concrete cms14 Eyl 2026
- CVE-2026-8190328İzleyin
Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Stored XSS via Page Container icon
YüksekCVSS 7,0İstismar yokEPSS %0concretecms · concrete cms14 Eyl 2026
- CVE-2026-8449731İzleyin
A buffer overflow was addressed with improved size validation.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8450531İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8450731İzleyin
A race condition was addressed with improved state handling.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8451131İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8451235İzleyin
A buffer overflow was addressed with improved bounds checking.
YüksekCVSS 8,8İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8451531İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8451632İzleyin
An out-of-bounds read was addressed with improved bounds checking.
YüksekCVSS 8,1İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8452039İzleyin
A buffer overflow was addressed with improved size validation.
KritikCVSS 9,8Kavram kanıtıEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8453532İzleyin
An authorization issue was addressed with improved state management.
YüksekCVSS 8,2İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8454330İzleyin
An out-of-bounds access issue was addressed with improved bounds checking.
YüksekCVSS 7,5Kavram kanıtıEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8454430İzleyin
An integer overflow was addressed with improved input validation.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8454633İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
YüksekCVSS 8,4İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8454828İzleyin
An integer overflow was addressed with improved input validation.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8454930İzleyin
An out-of-bounds read was addressed with improved bounds checking.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8455330İzleyin
A resource exhaustion issue was addressed with improved input validation.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8456139İzleyin
A double free issue was addressed with improved memory management.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8456330İzleyin
A logic issue was addressed with improved checks.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8456528İzleyin
An out-of-bounds read was addressed with improved bounds checking.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8456631İzleyin
The issue was addressed with improved memory handling.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8456831İzleyin
A path traversal issue was addressed with improved path validation.
YüksekCVSS 7,8Kavram kanıtıEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8457228İzleyin
An out-of-bounds read was addressed with improved bounds checking.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8457531İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8457732İzleyin
An access issue was addressed with additional sandbox restrictions.
YüksekCVSS 8,2İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8457835İzleyin
A logic issue was addressed with improved checks.
YüksekCVSS 8,8İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8458033İzleyin
The issue was addressed with improved checks.
YüksekCVSS 8,4İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8458133İzleyin
A buffer overflow was addressed with improved bounds checking.
YüksekCVSS 8,4İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8458433İzleyin
This issue was addressed with improved handling of symlinks.
YüksekCVSS 8,4İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8458922İzleyin
A permissions issue was addressed with additional restrictions.
OrtaCVSS 5,5Kavram kanıtıEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8459830İzleyin
A path traversal issue was addressed with improved path validation.
YüksekCVSS 7,5İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8460021İzleyin
An authorization issue was addressed with improved state management.
OrtaCVSS 5,4Kavram kanıtıEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8460630İzleyin
A privacy issue was addressed with improved handling of identifiers.
YüksekCVSS 7,5İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8460731İzleyin
A race condition was addressed with improved state management.
YüksekCVSS 7,8İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8460939İzleyin
A permissions issue was addressed with improved path validation.
KritikCVSS 9,8İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8461129İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
YüksekCVSS 7,3İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8461622İzleyin
A type confusion issue was addressed with improved memory handling.
OrtaCVSS 5,5Kavram kanıtıEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8462029İzleyin
An integer overflow was addressed with improved input validation.
YüksekCVSS 7,3İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8462330İzleyin
An authorization issue was addressed with improved state management.
YüksekCVSS 7,5İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8462536İzleyin
A permissions issue was addressed with additional sandbox restrictions.
KritikCVSS 9,1İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8462930İzleyin
This issue was addressed with additional entitlement checks.
YüksekCVSS 7,5İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8463131İzleyin
This issue was addressed with additional entitlement checks.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8463229İzleyin
The issue was addressed with improved memory handling.
YüksekCVSS 7,3İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8463622İzleyin
An authorization issue was addressed with improved state management.
OrtaCVSS 5,5Kavram kanıtıEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8688136İzleyin
A certificate validation issue was addressed with improved certificate validation.
KritikCVSS 9,1Kavram kanıtıEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8689430İzleyin
A logic issue was addressed with improved checks.
YüksekCVSS 7,5İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8689530İzleyin
An information disclosure issue was addressed with improved state management.
YüksekCVSS 7,5İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8690128İzleyin
An out-of-bounds write issue was addressed with improved bounds checking.
YüksekCVSS 7,1İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-8690430İzleyin
A privacy issue was addressed with improved state management.
YüksekCVSS 7,5İstismar yokEPSS %0apple · ipados14 Eyl 2026
- CVE-2026-8691731İzleyin
A permissions issue was addressed with additional restrictions.
YüksekCVSS 7,8İstismar yokEPSS %0apple · macos14 Eyl 2026
- CVE-2026-9089632İzleyin
Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PII
YüksekCVSS 8,2İstismar yokEPSS %0marcoscamara01 · ecommerce template14 Eyl 2026
- CVE-2026-5415530İzleyin
node-opcua: Missing nonce verification in UserNameIdentityToken authentication
YüksekCVSS 7,7İstismar yokEPSS %0node-opcua · node-opcua14 Eyl 2026
- CVE-2026-5415630İzleyin
node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS
YüksekCVSS 7,5İstismar yokEPSS %0node-opcua · node-opcua14 Eyl 2026
- CVE-2026-5545133İzleyin
gettext-converter: Prototype pollution in js2i18next() via crafted translation keys
YüksekCVSS 8,3İstismar yokEPSS %0locize · gettext-converter14 Eyl 2026
- CVE-2026-5757930İzleyin
Alchemy: Unauthenticated nested page API leaks restricted & unpublished content
YüksekCVSS 7,5İstismar yokEPSS %0alchemycms · alchemy_cms14 Eyl 2026
- CVE-2026-5996030İzleyin
Argos JavaScript: CI Branch Name OS Command Injection in @argos-ci/core
YüksekCVSS 7,5İstismar yokEPSS %0argos-ci · argos-javascript14 Eyl 2026
- CVE-2026-6170135İzleyin
Laravel MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Execution
YüksekCVSS 8,8İstismar yokEPSS %0cesargb · laravel-magiclink14 Eyl 2026
- CVE-2026-1275628İzleyin
Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
YüksekCVSS 7,1İstismar yokEPSS %0ibm · business automation workflow containers and traditional14 Eyl 2026
- CVE-2026-1294438İzleyin
Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
KritikCVSS 9,6Kavram kanıtıEPSS %0ibm · langflow oss14 Eyl 2026
- CVE-2026-9114434İzleyin
ZFile through 5.0.5 Share Entry Filter Bypass via Download Endpoint
YüksekCVSS 8,7İstismar yokEPSS %0zfile-dev · zfile14 Eyl 2026
- CVE-2026-9114528İzleyin
Activiti through 7.1.0.M6 Expression Injection via Mail Task
YüksekCVSS 7,1İstismar yokEPSS %0activiti · activiti14 Eyl 2026
- CVE-2026-3415133İzleyin
XWiki Platform: Resource path traversal via /skin/ action endpoint in Jetty 12+
YüksekCVSS 8,2Kavram kanıtıEPSS %2xwiki · xwiki-platform14 Eyl 2026
- CVE-2026-4925034İzleyin
Conform: parseSubmission vulnerable to CPU exhaustion when parsing many unique form fields
YüksekCVSS 8,7İstismar yokEPSS %0edmundhung · conform14 Eyl 2026
- CVE-2026-5027030İzleyin
dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS
YüksekCVSS 7,5İstismar yokEPSS %0datadog · dd-trace-java14 Eyl 2026
- CVE-2026-5365930İzleyin
http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoS
YüksekCVSS 7,5İstismar yokEPSS %0http4k · http4k14 Eyl 2026
- CVE-2026-5375230İzleyin
docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
YüksekCVSS 7,5İstismar yokEPSS %0plutext · docx4j14 Eyl 2026
- CVE-2026-5408730İzleyin
EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField
YüksekCVSS 7,6İstismar yokEPSS %0easycorp · easyadminbundle14 Eyl 2026
- CVE-2026-5417530İzleyin
backpack/crud: Unverified password change in MyAccountController via mass assignment
YüksekCVSS 7,6İstismar yokEPSS %0laravel-backpack · crud14 Eyl 2026
- CVE-2026-5417832İzleyin
backpack/crud: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisk
YüksekCVSS 8,1İstismar yokEPSS %0laravel-backpack · crud14 Eyl 2026
- CVE-2026-5418030İzleyin
backpack/crud: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)
YüksekCVSS 7,6İstismar yokEPSS %0laravel-backpack · crud14 Eyl 2026
- CVE-2026-5418232İzleyin
backpack/crud: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)
YüksekCVSS 8,1İstismar yokEPSS %0laravel-backpack · crud14 Eyl 2026
- CVE-2026-5456730İzleyin
Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)
YüksekCVSS 7,5İstismar yokEPSS %0jugmac00 · flask-reuploaded14 Eyl 2026
- CVE-2026-5509130İzleyin
flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id key
YüksekCVSS 7,5İstismar yokEPSS %0joaonuno · flat-to-nested-js14 Eyl 2026
- CVE-2026-5525330İzleyin
LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure
YüksekCVSS 7,7İstismar yokEPSS %0langchain-ai · langchain-mongodb14 Eyl 2026