Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.961 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 36 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2026-63696İstismar yok | Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability.dell · smartfabric os10 software · CWE-494 | Kritik9,1 | — | %0,3 | 15 Eyl 2026 |
39İzleyin | CVE-2026-79303Kavram kanıtı | kaiten from 57.192.20 to before 57.214.26 is vulnerable to SQL Injection.CWE-89 | Kritik9,9 | — | %0,4 | 15 Eyl 2026 |
32İzleyin | CVE-2026-79425İstismar yok | An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload component of CRMEB v6.0.0 allows attackers to scan iCWE-918 | Yüksek8,1 | — | %0,3 | 15 Eyl 2026 |
30İzleyin | CVE-2026-79551Kavram kanıtı | Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key.CWE-321 | Yüksek7,5 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-88616İstismar yok | An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTasCWE-863 | Yüksek8,8 | — | %0,6 | 15 Eyl 2026 |
39İzleyin | CVE-2026-88617İstismar yok | SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint.CWE-863 | Kritik9,8 | — | %0,6 | 15 Eyl 2026 |
34İzleyin | CVE-2026-89025İstismar yok | Hirschmann HiOS Switch Platform DoS via Malformed HTTP Requestbelden · hirschmann hios switch platform · CWE-755 | Yüksek8,7 | — | %0,7 | 15 Eyl 2026 |
28İzleyin | CVE-2026-90650İstismar yok | MotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id'jetmonsters · motopress hotel booking · CWE-79 | Yüksek7,2 | — | %0,4 | 15 Eyl 2026 |
36İzleyin | CVE-2023-54397İstismar yok | Tornado before 6.3.3 HTTP Request Smuggling via Content-Lengthtornadoweb · tornado · CWE-444 | Kritik9,0 | — | %0,3 | 15 Eyl 2026 |
36İzleyin | CVE-2024-14029İstismar yok | Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encodingtornadoweb · tornado · CWE-444 | Kritik9,0 | — | %0,3 | 15 Eyl 2026 |
30İzleyin | CVE-2026-19407İstismar yok | GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDKgoogle cloud · gemini enterprise agent platform sdk for python · CWE-330 | Yüksek7,7 | — | %0,6 | 15 Eyl 2026 |
39İzleyin | CVE-2026-37152İstismar yok | TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root access.CWE-798 | Kritik9,8 | — | %0,5 | 15 Eyl 2026 |
36İzleyin | CVE-2026-77866İstismar yok | SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hostsslab · safeurl · CWE-636 | Kritik9,0 | — | %0,4 | 15 Eyl 2026 |
36İzleyin | CVE-2026-77972İstismar yok | safeurl validated address is not bound to the request, allowing DNS rebindingslab · safeurl · CWE-367 | Kritik9,0 | — | %0,3 | 15 Eyl 2026 |
34İzleyin | CVE-2026-87791İstismar yok | Path traversal vulnerability in WordPress theme design-scuole-wordpress-themedevelopers italia · design-scuole-wordpress-theme · CWE-22 | Yüksek8,7 | — | %0,5 | 15 Eyl 2026 |
34İzleyin | CVE-2026-87792İstismar yok | Multiple authorization bypass in WordPress theme design-scuole-wordpress-themedevelopers italia · design-scuole-wordpress-theme · CWE-200 | Yüksek8,7 | — | %0,4 | 15 Eyl 2026 |
32İzleyin | CVE-2026-88619İstismar yok | 1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module.CWE-862 | Yüksek8,1 | — | %0,3 | 15 Eyl 2026 |
8İzleyin | CVE-2026-91849İstismar yok | WuzhiCMS Avatar Upload index.php setAvatar unrestricted uploadCWE-284 | Düşük2,1 | — | %0,3 | 15 Eyl 2026 |
30İzleyin | CVE-2026-91929İstismar yok | Flowise before 3.1.4 Cross-Tenant Authorization Bypassflowiseai · flowise · CWE-862 | Yüksek7,6 | — | %0,3 | 15 Eyl 2026 |
30İzleyin | CVE-2026-91930İstismar yok | Flowise before 3.1.4 Cross-Tenant Organization Admin Takeoverflowiseai · flowise · CWE-266 | Yüksek7,7 | — | %0,4 | 15 Eyl 2026 |
36İzleyin | CVE-2026-91931İstismar yok | Flowise before 3.1.4 Remote Code Execution via Custom MCP npxflowiseai · flowise · CWE-78 | Kritik9,0 | — | %0,6 | 15 Eyl 2026 |
36İzleyin | CVE-2026-91932İstismar yok | Flowise before 3.1.4 Remote Code Execution via cwd Parameterflowiseai · flowise · CWE-20 | Kritik9,0 | — | %0,7 | 15 Eyl 2026 |
30İzleyin | CVE-2026-91933İstismar yok | Flowise before 3.1.4 Authorization Bypass via openai-realtimeflowiseai · flowise · CWE-639 | Yüksek7,6 | — | %0,3 | 15 Eyl 2026 |
34İzleyin | CVE-2026-91934İstismar yok | Flowise before 3.1.4 Remote Code Execution via SQL Database Chainflowiseai · flowise · CWE-22 | Yüksek8,7 | — | %0,7 | 15 Eyl 2026 |
34İzleyin | CVE-2026-91935İstismar yok | Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodesflowiseai · flowise · CWE-918 | Yüksek8,7 | — | %0,3 | 15 Eyl 2026 |
33İzleyin | CVE-2026-91936İstismar yok | Flowise before 3.1.4 Script Injection via Docker Workflowsflowiseai · flowise · CWE-78 | Yüksek8,3 | — | %0,4 | 15 Eyl 2026 |
34İzleyin | CVE-2026-91937İstismar yok | Flowise before 3.1.4 NoSQL Injection via sessionIdflowiseai · flowise · CWE-943 | Yüksek8,7 | — | %0,4 | 15 Eyl 2026 |
30İzleyin | CVE-2026-91938İstismar yok | Flowise before 3.1.4 Server-Side Request Forgery via document loadersflowiseai · flowise · CWE-918 | Yüksek7,6 | — | %0,3 | 15 Eyl 2026 |
34İzleyin | CVE-2026-91940Kavram kanıtı | crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategyunclecode · crawl4ai · CWE-22 | Yüksek8,7 | — | %0,4 | 15 Eyl 2026 |
34İzleyin | CVE-2026-91941İstismar yok | Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategyunclecode · crawl4ai · CWE-400 | Yüksek8,7 | — | %0,4 | 15 Eyl 2026 |
33İzleyin | CVE-2026-91943İstismar yok | Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategyunclecode · crawl4ai · CWE-918 | Yüksek8,3 | — | %0,3 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91945İstismar yok | FreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATRfreerdp · freerdp · CWE-125 | Yüksek7,1 | — | %0,5 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91946İstismar yok | FreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphicsfreerdp · freerdp · CWE-908 | Yüksek7,1 | — | %0,5 | 15 Eyl 2026 |
30İzleyin | CVE-2026-91947İstismar yok | FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVCfreerdp · freerdp · CWE-362 | Yüksek7,7 | — | %0,3 | 15 Eyl 2026 |
30İzleyin | CVE-2026-91948İstismar yok | FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOLfreerdp · freerdp · CWE-191 | Yüksek7,7 | — | %0,5 | 15 Eyl 2026 |
36İzleyin | CVE-2026-91949İstismar yok | FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypassfreerdp · freerdp · CWE-693 | Kritik9,2 | — | %0,5 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91950İstismar yok | FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 Wraparoundfreerdp · freerdp · CWE-125 | Yüksek7,1 | — | %0,4 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91951İstismar yok | FreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrcfreerdp · freerdp · CWE-617 | Yüksek7,1 | — | %0,3 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91952İstismar yok | FreeRDP before 3.31.0 Denial of Service via pool_decode_rectfreerdp · freerdp · CWE-835 | Yüksek7,1 | — | %0,3 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91953İstismar yok | FreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFOfreerdp · freerdp · CWE-120 | Yüksek7,1 | — | %0,4 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91954İstismar yok | FreeRDP before 3.31.0 NULL Pointer Dereference via NSCodecfreerdp · freerdp · CWE-476 | Yüksek7,1 | — | %0,3 | 15 Eyl 2026 |
32İzleyin | CVE-2026-91955İstismar yok | FreeRDP before 3.31.0 Denial of Service via Desktop Dimensionsfreerdp · freerdp · CWE-369 | Yüksek8,2 | — | %0,5 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91956İstismar yok | FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRCfreerdp · freerdp · CWE-125 | Yüksek7,1 | — | %0,3 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91959İstismar yok | FreeRDP before 3.31.0 Buffer Over-read via RTS Gatewayfreerdp · freerdp · CWE-125 | Yüksek7,1 | — | %0,3 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91960İstismar yok | FreeRDP before 3.31.0 Integer Overflow Double Freefreerdp · freerdp · CWE-190 | Yüksek7,1 | — | %0,4 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91961İstismar yok | FreeRDP before 3.31.0 Denial of Service via URBDRCfreerdp · freerdp · CWE-617 | Yüksek7,1 | — | %0,3 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91963İstismar yok | FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrcfreerdp · freerdp · CWE-457 | Yüksek7,1 | — | %0,6 | 15 Eyl 2026 |
34İzleyin | CVE-2026-91964İstismar yok | FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingTokenfreerdp · freerdp · CWE-122 | Yüksek8,7 | — | %0,5 | 15 Eyl 2026 |
34İzleyin | CVE-2026-91965İstismar yok | WWBN AVideo through 29.0 Broken Access Control via Live Endpointswwbn · avideo · CWE-200 | Yüksek8,7 | — | %0,4 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91968İstismar yok | vikunja before 2.6.0 Denial of Service via unbounded filter recursiongo-vikunja · vikunja · CWE-674 | Yüksek7,1 | — | %0,4 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91969İstismar yok | vikunja before 2.6.0 Resource Exhaustion via CSV Migrationgo-vikunja · vikunja · CWE-400 | Yüksek7,1 | — | %0,3 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91970İstismar yok | Vikunja before 2.6.0 Resource Exhaustion via Planka Migrationgo-vikunja · vikunja · CWE-770 | Yüksek7,1 | — | %0,3 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91971İstismar yok | Vikunja before 2.6.0 Denial of Service via Avatar Uploadgo-vikunja · vikunja · CWE-400 | Yüksek7,1 | — | %0,4 | 15 Eyl 2026 |
34İzleyin | CVE-2026-91972İstismar yok | Vikunja before 2.6.0 Authentication Bypass via Unthrottled APIgo-vikunja · vikunja · CWE-307 | Yüksek8,7 | — | %0,6 | 15 Eyl 2026 |
34İzleyin | CVE-2026-91973İstismar yok | Vikunja before 2.6.0 Authentication Bypass via CalDAV BasicAuthgo-vikunja · vikunja · CWE-307 | Yüksek8,7 | — | %0,6 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91979İstismar yok | Vikunja before 2.6.0 Denial of Service via Decompression Bombgo-vikunja · vikunja · CWE-400 | Yüksek7,1 | — | %0,4 | 15 Eyl 2026 |
34İzleyin | CVE-2026-91985İstismar yok | Vikunja before 2.6.0 Privilege Escalation via Link Share Hashgo-vikunja · vikunja · CWE-200 | Yüksek8,7 | — | %0,4 | 15 Eyl 2026 |
28İzleyin | CVE-2026-91987İstismar yok | atomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown Modeldep0we · atomic-agents-stack · CWE-770 | Yüksek7,1 | — | %0,4 | 15 Eyl 2026 |
36İzleyin | CVE-2026-91988İstismar yok | atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCPdep0we · atomic-agents-stack · CWE-319 | Kritik9,2 | — | %0,3 | 15 Eyl 2026 |
34İzleyin | CVE-2026-91989İstismar yok | atomic-agents-stack before 1.1.0 Path Traversal via dashboard serve.pydep0we · atomic-agents-stack · CWE-22 | Yüksek8,7 | — | %1,3 | 15 Eyl 2026 |
34İzleyin | CVE-2026-91990İstismar yok | Tornado before 6.5.8 Memory Amplification DoS via multiparttornadoweb · tornado · CWE-770 | Yüksek8,7 | — | %0,4 | 15 Eyl 2026 |
32İzleyin | CVE-2026-91992İstismar yok | Tornado before 6.5.7 Credential Leak via Handle Reusetornadoweb · tornado · CWE-200 | Yüksek8,2 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92006İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92007İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92008İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92009İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92010İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92011İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92012İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92013İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92014İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92015İstismar yok | Privilege escalation in the WebExtensions componentmozilla · firefox · CWE-269 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92016İstismar yok | Use-after-free in the Disability Access APIs componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92017İstismar yok | Privilege escalation in the DOM: Service Workers componentmozilla · firefox · CWE-269 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
38İzleyin | CVE-2026-92018İstismar yok | Sandbox escape in the DOM: Core & HTML componentmozilla · firefox · CWE-693 | Kritik9,6 | — | %0,3 | 15 Eyl 2026 |
32İzleyin | CVE-2026-92019İstismar yok | Mitigation bypass in the Remote Settings Client componentmozilla · firefox · CWE-693 | Yüksek8,1 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92020İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92021İstismar yok | Use-after-free in the JavaScript Engine: JIT componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92022İstismar yok | Use-after-free in the DOM: HTML Parser componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92023İstismar yok | Use-after-free in the XML componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92024İstismar yok | Use-after-free in the SVG componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92025İstismar yok | Use-after-free in the DOM: Navigation componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92026İstismar yok | Use-after-free in the Networking componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92027İstismar yok | Use-after-free in the DOM: Streams componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92028İstismar yok | Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92029İstismar yok | Use-after-free in the SVG componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
38İzleyin | CVE-2026-92032İstismar yok | Sandbox escape due to invalid pointer in the Graphics componentmozilla · firefox · CWE-119 | Kritik9,6 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92033İstismar yok | Privilege escalation in Firefox for Androidmozilla · firefox mobile · CWE-269 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
36İzleyin | CVE-2026-92034İstismar yok | Site isolation issue in the Graphics componentmozilla · firefox · CWE-346 | Kritik9,1 | — | %0,2 | 15 Eyl 2026 |
38İzleyin | CVE-2026-92035İstismar yok | Sandbox escape due to incorrect boundary conditions in the Graphics componentmozilla · firefox · CWE-119 | Kritik9,6 | — | %0,3 | 15 Eyl 2026 |
39İzleyin | CVE-2026-92036İstismar yok | Incorrect boundary conditions in the Networking: HTTP componentmozilla · firefox · CWE-119 | Kritik9,8 | — | %0,5 | 15 Eyl 2026 |
39İzleyin | CVE-2026-92037İstismar yok | Incorrect boundary conditions in the DOM: Animation componentmozilla · firefox · CWE-119 | Kritik9,8 | — | %0,5 | 15 Eyl 2026 |
36İzleyin | CVE-2026-92038İstismar yok | Mitigation bypass in the Remote Settings Client componentmozilla · firefox · CWE-693 | Kritik9,1 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92040İstismar yok | Use-after-free in the JavaScript: WebAssembly componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,4 | 15 Eyl 2026 |
36İzleyin | CVE-2026-92041İstismar yok | Mitigation bypass in the DOM: Networking componentmozilla · firefox · CWE-693 | Kritik9,1 | — | %0,3 | 15 Eyl 2026 |
30İzleyin | CVE-2026-92042İstismar yok | Race condition in the DOM: Content Processes componentmozilla · firefox · CWE-362 | Yüksek7,5 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92043İstismar yok | Privilege escalation due to incorrect boundary conditions in the Audio/Video componentmozilla · firefox · CWE-120 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
30İzleyin | CVE-2026-92044İstismar yok | Information disclosure in the Networking: HTTP componentmozilla · firefox · CWE-200 | Yüksek7,5 | — | %0,3 | 15 Eyl 2026 |
38İzleyin | CVE-2026-92045İstismar yok | Sandbox escape due to incorrect boundary conditions in the WebRTC componentmozilla · firefox · CWE-119 | Kritik9,6 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92046İstismar yok | Use-after-free in the Graphics componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
- CVE-2026-6369636İzleyin
Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability.
KritikCVSS 9,1İstismar yokEPSS %0dell · smartfabric os10 software15 Eyl 2026
- CVE-2026-7930339İzleyin
kaiten from 57.192.20 to before 57.214.26 is vulnerable to SQL Injection.
KritikCVSS 9,9Kavram kanıtıEPSS %015 Eyl 2026
- CVE-2026-7942532İzleyin
An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload component of CRMEB v6.0.0 allows attackers to scan i
YüksekCVSS 8,1İstismar yokEPSS %015 Eyl 2026
- CVE-2026-7955130İzleyin
Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded cryptographic key.
YüksekCVSS 7,5Kavram kanıtıEPSS %015 Eyl 2026
- CVE-2026-8861635İzleyin
An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTas
YüksekCVSS 8,8İstismar yokEPSS %015 Eyl 2026
- CVE-2026-8861739İzleyin
SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint.
KritikCVSS 9,8İstismar yokEPSS %015 Eyl 2026
- CVE-2026-8902534İzleyin
Hirschmann HiOS Switch Platform DoS via Malformed HTTP Request
YüksekCVSS 8,7İstismar yokEPSS %0belden · hirschmann hios switch platform15 Eyl 2026
- CVE-2026-9065028İzleyin
MotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id'
YüksekCVSS 7,2İstismar yokEPSS %0jetmonsters · motopress hotel booking15 Eyl 2026
- CVE-2023-5439736İzleyin
Tornado before 6.3.3 HTTP Request Smuggling via Content-Length
KritikCVSS 9,0İstismar yokEPSS %0tornadoweb · tornado15 Eyl 2026
- CVE-2024-1402936İzleyin
Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding
KritikCVSS 9,0İstismar yokEPSS %0tornadoweb · tornado15 Eyl 2026
- CVE-2026-1940730İzleyin
GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDK
YüksekCVSS 7,7İstismar yokEPSS %0google cloud · gemini enterprise agent platform sdk for python15 Eyl 2026
- CVE-2026-3715239İzleyin
TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root access.
KritikCVSS 9,8İstismar yokEPSS %015 Eyl 2026
- CVE-2026-7786636İzleyin
SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts
KritikCVSS 9,0İstismar yokEPSS %0slab · safeurl15 Eyl 2026
- CVE-2026-7797236İzleyin
safeurl validated address is not bound to the request, allowing DNS rebinding
KritikCVSS 9,0İstismar yokEPSS %0slab · safeurl15 Eyl 2026
- CVE-2026-8779134İzleyin
Path traversal vulnerability in WordPress theme design-scuole-wordpress-theme
YüksekCVSS 8,7İstismar yokEPSS %0developers italia · design-scuole-wordpress-theme15 Eyl 2026
- CVE-2026-8779234İzleyin
Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme
YüksekCVSS 8,7İstismar yokEPSS %0developers italia · design-scuole-wordpress-theme15 Eyl 2026
- CVE-2026-8861932İzleyin
1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module.
YüksekCVSS 8,1İstismar yokEPSS %015 Eyl 2026
- CVE-2026-918498İzleyin
WuzhiCMS Avatar Upload index.php setAvatar unrestricted upload
DüşükCVSS 2,1İstismar yokEPSS %015 Eyl 2026
- CVE-2026-9192930İzleyin
Flowise before 3.1.4 Cross-Tenant Authorization Bypass
YüksekCVSS 7,6İstismar yokEPSS %0flowiseai · flowise15 Eyl 2026
- CVE-2026-9193030İzleyin
Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover
YüksekCVSS 7,7İstismar yokEPSS %0flowiseai · flowise15 Eyl 2026
- CVE-2026-9193136İzleyin
Flowise before 3.1.4 Remote Code Execution via Custom MCP npx
KritikCVSS 9,0İstismar yokEPSS %0flowiseai · flowise15 Eyl 2026
- CVE-2026-9193236İzleyin
Flowise before 3.1.4 Remote Code Execution via cwd Parameter
KritikCVSS 9,0İstismar yokEPSS %0flowiseai · flowise15 Eyl 2026
- CVE-2026-9193330İzleyin
Flowise before 3.1.4 Authorization Bypass via openai-realtime
YüksekCVSS 7,6İstismar yokEPSS %0flowiseai · flowise15 Eyl 2026
- CVE-2026-9193434İzleyin
Flowise before 3.1.4 Remote Code Execution via SQL Database Chain
YüksekCVSS 8,7İstismar yokEPSS %0flowiseai · flowise15 Eyl 2026
- CVE-2026-9193534İzleyin
Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes
YüksekCVSS 8,7İstismar yokEPSS %0flowiseai · flowise15 Eyl 2026
- CVE-2026-9193633İzleyin
Flowise before 3.1.4 Script Injection via Docker Workflows
YüksekCVSS 8,3İstismar yokEPSS %0flowiseai · flowise15 Eyl 2026
- CVE-2026-9193734İzleyin
Flowise before 3.1.4 NoSQL Injection via sessionId
YüksekCVSS 8,7İstismar yokEPSS %0flowiseai · flowise15 Eyl 2026
- CVE-2026-9193830İzleyin
Flowise before 3.1.4 Server-Side Request Forgery via document loaders
YüksekCVSS 7,6İstismar yokEPSS %0flowiseai · flowise15 Eyl 2026
- CVE-2026-9194034İzleyin
crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy
YüksekCVSS 8,7Kavram kanıtıEPSS %0unclecode · crawl4ai15 Eyl 2026
- CVE-2026-9194134İzleyin
Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy
YüksekCVSS 8,7İstismar yokEPSS %0unclecode · crawl4ai15 Eyl 2026
- CVE-2026-9194333İzleyin
Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy
YüksekCVSS 8,3İstismar yokEPSS %0unclecode · crawl4ai15 Eyl 2026
- CVE-2026-9194528İzleyin
FreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATR
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9194628İzleyin
FreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphics
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9194730İzleyin
FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC
YüksekCVSS 7,7İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9194830İzleyin
FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL
YüksekCVSS 7,7İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9194936İzleyin
FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass
KritikCVSS 9,2İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9195028İzleyin
FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 Wraparound
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9195128İzleyin
FreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrc
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9195228İzleyin
FreeRDP before 3.31.0 Denial of Service via pool_decode_rect
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9195328İzleyin
FreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFO
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9195428İzleyin
FreeRDP before 3.31.0 NULL Pointer Dereference via NSCodec
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9195532İzleyin
FreeRDP before 3.31.0 Denial of Service via Desktop Dimensions
YüksekCVSS 8,2İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9195628İzleyin
FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRC
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9195928İzleyin
FreeRDP before 3.31.0 Buffer Over-read via RTS Gateway
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9196028İzleyin
FreeRDP before 3.31.0 Integer Overflow Double Free
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9196128İzleyin
FreeRDP before 3.31.0 Denial of Service via URBDRC
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9196328İzleyin
FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc
YüksekCVSS 7,1İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9196434İzleyin
FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken
YüksekCVSS 8,7İstismar yokEPSS %0freerdp · freerdp15 Eyl 2026
- CVE-2026-9196534İzleyin
WWBN AVideo through 29.0 Broken Access Control via Live Endpoints
YüksekCVSS 8,7İstismar yokEPSS %0wwbn · avideo15 Eyl 2026
- CVE-2026-9196828İzleyin
vikunja before 2.6.0 Denial of Service via unbounded filter recursion
YüksekCVSS 7,1İstismar yokEPSS %0go-vikunja · vikunja15 Eyl 2026
- CVE-2026-9196928İzleyin
vikunja before 2.6.0 Resource Exhaustion via CSV Migration
YüksekCVSS 7,1İstismar yokEPSS %0go-vikunja · vikunja15 Eyl 2026
- CVE-2026-9197028İzleyin
Vikunja before 2.6.0 Resource Exhaustion via Planka Migration
YüksekCVSS 7,1İstismar yokEPSS %0go-vikunja · vikunja15 Eyl 2026
- CVE-2026-9197128İzleyin
Vikunja before 2.6.0 Denial of Service via Avatar Upload
YüksekCVSS 7,1İstismar yokEPSS %0go-vikunja · vikunja15 Eyl 2026
- CVE-2026-9197234İzleyin
Vikunja before 2.6.0 Authentication Bypass via Unthrottled API
YüksekCVSS 8,7İstismar yokEPSS %0go-vikunja · vikunja15 Eyl 2026
- CVE-2026-9197334İzleyin
Vikunja before 2.6.0 Authentication Bypass via CalDAV BasicAuth
YüksekCVSS 8,7İstismar yokEPSS %0go-vikunja · vikunja15 Eyl 2026
- CVE-2026-9197928İzleyin
Vikunja before 2.6.0 Denial of Service via Decompression Bomb
YüksekCVSS 7,1İstismar yokEPSS %0go-vikunja · vikunja15 Eyl 2026
- CVE-2026-9198534İzleyin
Vikunja before 2.6.0 Privilege Escalation via Link Share Hash
YüksekCVSS 8,7İstismar yokEPSS %0go-vikunja · vikunja15 Eyl 2026
- CVE-2026-9198728İzleyin
atomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown Model
YüksekCVSS 7,1İstismar yokEPSS %0dep0we · atomic-agents-stack15 Eyl 2026
- CVE-2026-9198836İzleyin
atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCP
KritikCVSS 9,2İstismar yokEPSS %0dep0we · atomic-agents-stack15 Eyl 2026
- CVE-2026-9198934İzleyin
atomic-agents-stack before 1.1.0 Path Traversal via dashboard serve.py
YüksekCVSS 8,7İstismar yokEPSS %1dep0we · atomic-agents-stack15 Eyl 2026
- CVE-2026-9199034İzleyin
Tornado before 6.5.8 Memory Amplification DoS via multipart
YüksekCVSS 8,7İstismar yokEPSS %0tornadoweb · tornado15 Eyl 2026
- CVE-2026-9199232İzleyin
Tornado before 6.5.7 Credential Leak via Handle Reuse
YüksekCVSS 8,2İstismar yokEPSS %0tornadoweb · tornado15 Eyl 2026
- CVE-2026-9200635İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9200735İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9200835İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9200935İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9201035İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9201135İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9201235İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9201335İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9201435İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9201535İzleyin
Privilege escalation in the WebExtensions component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9201635İzleyin
Use-after-free in the Disability Access APIs component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9201735İzleyin
Privilege escalation in the DOM: Service Workers component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9201838İzleyin
Sandbox escape in the DOM: Core & HTML component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9201932İzleyin
Mitigation bypass in the Remote Settings Client component
YüksekCVSS 8,1İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9202035İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9202135İzleyin
Use-after-free in the JavaScript Engine: JIT component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9202235İzleyin
Use-after-free in the DOM: HTML Parser component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9202335İzleyin
Use-after-free in the XML component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9202435İzleyin
Use-after-free in the SVG component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9202535İzleyin
Use-after-free in the DOM: Navigation component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9202635İzleyin
Use-after-free in the Networking component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9202735İzleyin
Use-after-free in the DOM: Streams component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9202835İzleyin
Use-after-free in the DOM: Core & HTML component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9202935İzleyin
Use-after-free in the SVG component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9203238İzleyin
Sandbox escape due to invalid pointer in the Graphics component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9203335İzleyin
Privilege escalation in Firefox for Android
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox mobile15 Eyl 2026
- CVE-2026-9203436İzleyin
Site isolation issue in the Graphics component
KritikCVSS 9,1İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9203538İzleyin
Sandbox escape due to incorrect boundary conditions in the Graphics component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9203639İzleyin
Incorrect boundary conditions in the Networking: HTTP component
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9203739İzleyin
Incorrect boundary conditions in the DOM: Animation component
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9203836İzleyin
Mitigation bypass in the Remote Settings Client component
KritikCVSS 9,1İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9204035İzleyin
Use-after-free in the JavaScript: WebAssembly component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9204136İzleyin
Mitigation bypass in the DOM: Networking component
KritikCVSS 9,1İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9204230İzleyin
Race condition in the DOM: Content Processes component
YüksekCVSS 7,5İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9204335İzleyin
Privilege escalation due to incorrect boundary conditions in the Audio/Video component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9204430İzleyin
Information disclosure in the Networking: HTTP component
YüksekCVSS 7,5İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9204538İzleyin
Sandbox escape due to incorrect boundary conditions in the WebRTC component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9204635İzleyin
Use-after-free in the Graphics component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026