Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.957 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 37 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-92049İstismar yok | Use-after-free in the Widget: Win32 componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
36İzleyin | CVE-2026-92050İstismar yok | Sandbox escape due to race condition in the XPConnect componentmozilla · firefox · CWE-362 | Kritik9,1 | — | %0,4 | 15 Eyl 2026 |
36İzleyin | CVE-2026-92051İstismar yok | Spoofing issue due to invalid pointer in the Graphics componentmozilla · firefox · CWE-476 | Kritik9,1 | — | %0,5 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92052İstismar yok | Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-457 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92053İstismar yok | Privilege escalation in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-269 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92054İstismar yok | Privilege escalation in the Memory componentmozilla · firefox · CWE-119 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92055İstismar yok | Privilege escalation in the DevTools componentmozilla · firefox · CWE-269 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92056İstismar yok | Use-after-free in the Graphics: Text componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
36İzleyin | CVE-2026-92057İstismar yok | Mitigation bypass in the Enterprise Policies componentmozilla · firefox · CWE-693 | Kritik9,1 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92058İstismar yok | Use-after-free in the Graphics componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
37İzleyin | CVE-2026-92059İstismar yok | Incorrect boundary conditions in the DOM: Editor componentmozilla · firefox · CWE-119 | Kritik9,3 | — | %0,1 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92060İstismar yok | Use-after-free in the Internationalization componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
39İzleyin | CVE-2026-92061İstismar yok | Incorrect boundary conditions in the Security: Process Sandboxing componentmozilla · firefox · CWE-119 | Kritik9,8 | — | %0,5 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92062İstismar yok | Privilege escalation in the Session Restore componentmozilla · firefox · CWE-269 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92064İstismar yok | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentmozilla · firefox · CWE-119 | Yüksek8,8 | — | %0,1 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92065İstismar yok | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentmozilla · firefox · CWE-119 | Yüksek8,8 | — | %0,1 | 15 Eyl 2026 |
39İzleyin | CVE-2026-92066İstismar yok | Sandbox escape in the Profile Backup componentmozilla · firefox · CWE-693 | Kritik9,8 | — | %0,5 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92067İstismar yok | Use-after-free in the Widget: Gtk componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
38İzleyin | CVE-2026-92071İstismar yok | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentmozilla · firefox · CWE-119 | Kritik9,6 | — | %0,2 | 15 Eyl 2026 |
32İzleyin | CVE-2026-92072İstismar yok | Incorrect boundary conditions in the Safe Browsing componentmozilla · firefox · CWE-119 | Yüksek8,0 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92073İstismar yok | Privilege escalation in the Enterprise Policies componentmozilla · firefox · CWE-269 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92074İstismar yok | Mitigation bypass in the Popup Blocker componentmozilla · firefox · CWE-693 | Yüksek8,8 | — | %0,1 | 15 Eyl 2026 |
36İzleyin | CVE-2026-92075İstismar yok | Mitigation bypass in the Networking componentmozilla · firefox · CWE-693 | Kritik9,1 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-92076İstismar yok | Incorrect boundary conditions in the Networking componentmozilla · firefox · CWE-119 | Yüksek8,8 | — | %0,1 | 15 Eyl 2026 |
36İzleyin | CVE-2026-92079İstismar yok | Mitigation bypass in the Widget: Win32 componentmozilla · firefox · CWE-693 | Kritik9,1 | — | %0,2 | 15 Eyl 2026 |
37İzleyin | CVE-2023-54398İstismar yok | Yonyou U8 Cloud Java Deserialization RCE via FileManageServletyonyou · u8 cloud · CWE-502 | Kritik9,3 | — | %1,2 | 15 Eyl 2026 |
37İzleyin | CVE-2024-58385İstismar yok | Yonyou U8 CRM SQL Injection via fillbacksettingedit.phpyonyou · u8 crm · CWE-89 | Kritik9,3 | — | %0,6 | 15 Eyl 2026 |
34İzleyin | CVE-2026-18110Kavram kanıtı | Concrete CMS 9.0.0 through 9.5.2 is vulnerable to missing authorization in the user selector autocomplete endpoint (/ccm/system/user/autocomplete), allowing an concretecms · concrete cms · CWE-862 | Yüksek8,7 | — | %1,5 | 15 Eyl 2026 |
35İzleyin | CVE-2026-19780İstismar yok | Koha Eval Code Injection Remote Code Execution Vulnerabilitykoha · koha · CWE-95 | Yüksek8,8 | — | %1,0 | 15 Eyl 2026 |
28İzleyin | CVE-2026-21586İstismar yok | This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, atlassian · confluence data center · CWE-285 | Yüksek7,1 | — | %0,4 | 15 Eyl 2026 |
28İzleyin | CVE-2026-21587İstismar yok | This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center.atlassian · jira service management data center · CWE-285 | Yüksek7,1 | — | %0,4 | 15 Eyl 2026 |
28İzleyin | CVE-2026-21588İstismar yok | This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2,atlassian · confluence data center · CWE-400 | Yüksek7,1 | — | %0,3 | 15 Eyl 2026 |
34İzleyin | CVE-2026-81894İstismar yok | Concrete CMS 9.5.2 and below is vulnerable to Stored DOM-based Cross-site Scripting (XSS) in the Gallery block image Caption fieldconcretecms · concrete cms · CWE-89 | Yüksek8,5 | — | %0,2 | 15 Eyl 2026 |
34İzleyin | CVE-2026-81895İstismar yok | Concrete CMS 9.5.2 and below is vulnerable to Stored SQL Injection in Concrete CMS Document Library Block via `fsID[]` in `setMode=any`concretecms · concrete cms · CWE-89 | Yüksek8,5 | — | %0,5 | 15 Eyl 2026 |
33İzleyin | CVE-2026-81896İstismar yok | Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question Labelconcretecms · concrete cms · CWE-79 | Yüksek8,4 | — | %0,2 | 15 Eyl 2026 |
30İzleyin | CVE-2026-81897İstismar yok | Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via Express form Text control save_controlconcretecms · concrete cms · CWE-79 | Yüksek7,7 | — | %0,1 | 15 Eyl 2026 |
36İzleyin | CVE-2026-89022İstismar yok | BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusionbookstackapp · bookstack · CWE-290 | Kritik9,1 | — | %0,4 | 15 Eyl 2026 |
38İzleyin | CVE-2026-89026Kavram kanıtı | Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originateissabel foundation · issabel framework · CWE-321 | Kritik9,3 | — | %2,6 | 15 Eyl 2026 |
32İzleyin | CVE-2026-11728İstismar yok | IBM MQ .NET client is vulnerable to remote code executionibm · mq · CWE-787 | Yüksek8,1 | — | %0,3 | 15 Eyl 2026 |
34İzleyin | CVE-2026-11729İstismar yok | IBM MQ Java messaging is vulnerable to remote code executionibm · mq · CWE-502 | Yüksek8,5 | — | %0,5 | 15 Eyl 2026 |
36İzleyin | CVE-2026-11921İstismar yok | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-522 | Kritik9,1 | — | %0,4 | 15 Eyl 2026 |
30İzleyin | CVE-2026-11926İstismar yok | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-400 | Yüksek7,5 | — | %0,5 | 15 Eyl 2026 |
39İzleyin | CVE-2026-11928İstismar yok | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-787 | Kritik9,8 | — | %0,5 | 15 Eyl 2026 |
30İzleyin | CVE-2026-11929İstismar yok | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-327 | Yüksek7,5 | — | %0,2 | 15 Eyl 2026 |
28İzleyin | CVE-2026-11934İstismar yok | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-285 | Yüksek7,2 | — | %0,4 | 15 Eyl 2026 |
32İzleyin | CVE-2026-12101İstismar yok | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-289 | Yüksek8,1 | — | %0,3 | 15 Eyl 2026 |
28İzleyin | CVE-2026-12150İstismar yok | IBM MQ queue manager is vulnerable to denial of serviceibm · mq · CWE-121 | Yüksek7,0 | — | %0,2 | 15 Eyl 2026 |
39İzleyin | CVE-2026-12351İstismar yok | IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injectionibm · mq · CWE-74 | Kritik9,8 | — | %0,8 | 15 Eyl 2026 |
30İzleyin | CVE-2026-12354İstismar yok | IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injectionibm · mq · CWE-913 | Yüksek7,5 | — | %0,4 | 15 Eyl 2026 |
32İzleyin | CVE-2026-12355İstismar yok | IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code executionibm · mq · CWE-74 | Yüksek8,1 | — | %0,6 | 15 Eyl 2026 |
30İzleyin | CVE-2026-12358İstismar yok | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-674 | Yüksek7,5 | — | %0,5 | 15 Eyl 2026 |
32İzleyin | CVE-2026-12666İstismar yok | IBM MQ Java messaging is vulnerable to XML external entity injectionibm · mq · CWE-611 | Yüksek8,1 | — | %0,4 | 15 Eyl 2026 |
28İzleyin | CVE-2026-12667İstismar yok | IBM MQ .NET client is vulnerable to XML external entity injectionibm · mq · CWE-611 | Yüksek7,1 | — | %0,2 | 15 Eyl 2026 |
35İzleyin | CVE-2026-12728İstismar yok | IBM MQ Java messaging is vulnerable to remote code executionibm · mq · CWE-502 | Yüksek8,8 | — | %0,6 | 15 Eyl 2026 |
28İzleyin | CVE-2026-12752İstismar yok | Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026ibm · business automation workflow containers and traditional · CWE-611 | Yüksek7,1 | — | %0,4 | 15 Eyl 2026 |
30İzleyin | CVE-2026-18113İstismar yok | Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS in the Top Navigation Bar Block via Dropdown Child Page Namesconcrete cms · concrete cms · CWE-79 | Yüksek7,5 | — | %0,4 | 15 Eyl 2026 |
29İzleyin | CVE-2026-18115İstismar yok | In Concrete CMS 9.2.0 to 9.5.2, Missing Authorization in REST API Users update() and change_password Enables Account Takeover.concrete cms · concrete cms · CWE-862 | Yüksek7,4 | — | %0,4 | 15 Eyl 2026 |
35İzleyin | CVE-2026-40058İstismar yok | Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windowscrowdstrike · falcon sensor for windows · CWE-367 | Yüksek8,8 | — | %0,0 | 15 Eyl 2026 |
35İzleyin | CVE-2026-52484İstismar yok | An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/deCWE-78 | Yüksek8,8 | — | %0,6 | 15 Eyl 2026 |
39İzleyin | CVE-2026-81236İstismar yok | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.dell · wyse management suite · CWE-434 | Kritik9,8 | — | %0,4 | 15 Eyl 2026 |
36İzleyin | CVE-2026-81238İstismar yok | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability.dell · wyse management suite · CWE-306 | Kritik9,1 | — | %0,2 | 15 Eyl 2026 |
39İzleyin | CVE-2026-81239İstismar yok | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.dell · wyse management suite · CWE-434 | Kritik9,8 | — | %0,4 | 15 Eyl 2026 |
39İzleyin | CVE-2026-81240İstismar yok | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.dell · wyse management suite · CWE-434 | Kritik9,8 | — | %0,4 | 15 Eyl 2026 |
30İzleyin | CVE-2026-81898İstismar yok | Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via country-less Address attribute in Express association viewsconcrete cms · concrete cms · CWE-79 | Yüksek7,5 | — | %0,4 | 15 Eyl 2026 |
29İzleyin | CVE-2026-81899İstismar yok | Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS via group folder name on the Members > Groups dashboardconcrete cms · concrete cms · CWE-79 | Yüksek7,3 | — | %0,4 | 15 Eyl 2026 |
35İzleyin | CVE-2026-0159İstismar yok | In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-787 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-0170İstismar yok | In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-787 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-0171İstismar yok | In multiple locations, there is a possible out-of-bounds write due to a logic error in the code.google · android · CWE-787 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
33İzleyin | CVE-2026-0189İstismar yok | In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code.google · android · CWE-693 | Yüksek8,4 | — | %0,1 | 15 Eyl 2026 |
33İzleyin | CVE-2026-0194İstismar yok | In multiple locations, there is a possible permission bypass due to an integer overflow.google · android · CWE-190 | Yüksek8,4 | — | %0,1 | 15 Eyl 2026 |
31İzleyin | CVE-2026-0199İstismar yok | In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation.google · android · CWE-20 | Yüksek7,8 | — | %0,0 | 15 Eyl 2026 |
35İzleyin | CVE-2026-0200İstismar yok | In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow.google · android · CWE-122 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
30İzleyin | CVE-2026-53957İstismar yok | Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpcontentful · contentful-mcp-server · CWE-918 | Yüksek7,7 | — | %0,4 | 15 Eyl 2026 |
28İzleyin | CVE-2026-53966İstismar yok | XWiki Platform: Privilege escalation from edit to script right through Live Data editingxwiki · xwiki-platform · CWE-862 | Yüksek7,1 | — | %0,7 | 15 Eyl 2026 |
32İzleyin | CVE-2026-54167İstismar yok | Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host headertektoncd · pipelines-as-code · CWE-345 | Yüksek8,2 | — | %0,2 | 15 Eyl 2026 |
39İzleyin | CVE-2026-19773İstismar yok | libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilitylibwebsockets · libwebsockets · CWE-787 | Kritik9,8 | — | %0,6 | 15 Eyl 2026 |
28İzleyin | CVE-2026-19774İstismar yok | BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerabilitybluez · bluez · CWE-121 | Yüksek7,1 | — | %0,2 | 15 Eyl 2026 |
31İzleyin | CVE-2026-19781İstismar yok | Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilityashlar-vellum · cobalt · CWE-122 | Yüksek7,8 | — | %0,2 | 15 Eyl 2026 |
31İzleyin | CVE-2026-19885İstismar yok | OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilityoriginlab · origin viewer · CWE-787 | Yüksek7,8 | — | %0,2 | 15 Eyl 2026 |
31İzleyin | CVE-2026-19886İstismar yok | OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerabilityoriginlab · origin viewer · CWE-119 | Yüksek7,8 | — | %0,2 | 15 Eyl 2026 |
36İzleyin | CVE-2026-55158İstismar yok | Conflibot: Command injection via crafted pull request branch names under pull_request_targetwktk · conflibot · CWE-78 | Kritik9,1 | — | %0,8 | 15 Eyl 2026 |
30İzleyin | CVE-2026-55178İstismar yok | GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile datageolens-io · geolens · CWE-200 | Yüksek7,5 | — | %0,6 | 15 Eyl 2026 |
34İzleyin | CVE-2026-57586İstismar yok | CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Executionnaranor · agent-coderag · CWE-78 | Yüksek8,6 | — | %0,2 | 15 Eyl 2026 |
40Planlayın | CVE-2026-59971İstismar yok | MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)designcomputer · mysql_mcp_server · CWE-306 | Kritik10,0 | — | %0,4 | 15 Eyl 2026 |
36İzleyin | CVE-2026-61549İstismar yok | Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backendwoodpecker-ci · woodpecker · CWE-269 | Kritik9,0 | — | %0,2 | 15 Eyl 2026 |
33İzleyin | CVE-2026-55301İstismar yok | In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-120 | Yüksek8,4 | — | %0,1 | 15 Eyl 2026 |
30İzleyin | CVE-2026-55306İstismar yok | In Cellular Modem, there is a possible denial of service due to improper input validation.google · android · CWE-20 | Yüksek7,5 | — | %0,3 | 15 Eyl 2026 |
35İzleyin | CVE-2026-55318İstismar yok | In multiple locations, there is a possible use-after-free due to a race condition.google · android · CWE-362 | Yüksek8,8 | — | %0,2 | 15 Eyl 2026 |
31İzleyin | CVE-2026-55323İstismar yok | In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow.google · android · CWE-122 | Yüksek7,8 | — | %0,0 | 15 Eyl 2026 |
35İzleyin | CVE-2026-55331İstismar yok | In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check.google · android · CWE-120 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
32İzleyin | CVE-2026-55343İstismar yok | In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-120 | Yüksek8,0 | — | %0,2 | 15 Eyl 2026 |
31İzleyin | CVE-2026-55351İstismar yok | In VPU, there is a possible out-of-bounds write due to an integer overflow.google · android · CWE-190 | Yüksek7,8 | — | %0,0 | 15 Eyl 2026 |
31İzleyin | CVE-2026-55359İstismar yok | In multiple locations, there is a possible permission bypass due to a logic error in the code.google · android · CWE-693 | Yüksek7,8 | — | %0,1 | 15 Eyl 2026 |
39İzleyin | CVE-2026-55366İstismar yok | In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code.google · android · CWE-693 | Kritik9,8 | — | %0,4 | 15 Eyl 2026 |
33İzleyin | CVE-2026-56881İstismar yok | In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code.google · android · CWE-693 | Yüksek8,4 | — | %0,1 | 15 Eyl 2026 |
35İzleyin | CVE-2026-56882İstismar yok | In Cellular Modem, there is a possible information disclosure due to a logic error in the code.google · android · CWE-200 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
33İzleyin | CVE-2026-56914İstismar yok | In multiple locations, there is a possible use-after-free due to improper locking.google · android · CWE-416 | Yüksek8,4 | — | %0,0 | 15 Eyl 2026 |
35İzleyin | CVE-2026-56920İstismar yok | In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code.google · android · CWE-787 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
33İzleyin | CVE-2026-56941İstismar yok | In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code.google · android · CWE-693 | Yüksek8,4 | — | %0,1 | 15 Eyl 2026 |
35İzleyin | CVE-2026-56942İstismar yok | In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-787 | Yüksek8,8 | — | %0,3 | 15 Eyl 2026 |
- CVE-2026-9204935İzleyin
Use-after-free in the Widget: Win32 component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9205036İzleyin
Sandbox escape due to race condition in the XPConnect component
KritikCVSS 9,1İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9205136İzleyin
Spoofing issue due to invalid pointer in the Graphics component
KritikCVSS 9,1İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9205235İzleyin
Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9205335İzleyin
Privilege escalation in the Graphics: CanvasWebGL component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9205435İzleyin
Privilege escalation in the Memory component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9205535İzleyin
Privilege escalation in the DevTools component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9205635İzleyin
Use-after-free in the Graphics: Text component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9205736İzleyin
Mitigation bypass in the Enterprise Policies component
KritikCVSS 9,1İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9205835İzleyin
Use-after-free in the Graphics component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9205937İzleyin
Incorrect boundary conditions in the DOM: Editor component
KritikCVSS 9,3İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9206035İzleyin
Use-after-free in the Internationalization component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9206139İzleyin
Incorrect boundary conditions in the Security: Process Sandboxing component
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9206235İzleyin
Privilege escalation in the Session Restore component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9206435İzleyin
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9206535İzleyin
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9206639İzleyin
Sandbox escape in the Profile Backup component
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9206735İzleyin
Use-after-free in the Widget: Gtk component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9207138İzleyin
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9207232İzleyin
Incorrect boundary conditions in the Safe Browsing component
YüksekCVSS 8,0İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9207335İzleyin
Privilege escalation in the Enterprise Policies component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9207435İzleyin
Mitigation bypass in the Popup Blocker component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9207536İzleyin
Mitigation bypass in the Networking component
KritikCVSS 9,1İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9207635İzleyin
Incorrect boundary conditions in the Networking component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2026-9207936İzleyin
Mitigation bypass in the Widget: Win32 component
KritikCVSS 9,1İstismar yokEPSS %0mozilla · firefox15 Eyl 2026
- CVE-2023-5439837İzleyin
Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet
KritikCVSS 9,3İstismar yokEPSS %1yonyou · u8 cloud15 Eyl 2026
- CVE-2024-5838537İzleyin
Yonyou U8 CRM SQL Injection via fillbacksettingedit.php
KritikCVSS 9,3İstismar yokEPSS %0yonyou · u8 crm15 Eyl 2026
- CVE-2026-1811034İzleyin
Concrete CMS 9.0.0 through 9.5.2 is vulnerable to missing authorization in the user selector autocomplete endpoint (/ccm/system/user/autocomplete), allowing an
YüksekCVSS 8,7Kavram kanıtıEPSS %1concretecms · concrete cms15 Eyl 2026
- CVE-2026-1978035İzleyin
Koha Eval Code Injection Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1koha · koha15 Eyl 2026
- CVE-2026-2158628İzleyin
This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1,
YüksekCVSS 7,1İstismar yokEPSS %0atlassian · confluence data center15 Eyl 2026
- CVE-2026-2158728İzleyin
This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center.
YüksekCVSS 7,1İstismar yokEPSS %0atlassian · jira service management data center15 Eyl 2026
- CVE-2026-2158828İzleyin
This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2,
YüksekCVSS 7,1İstismar yokEPSS %0atlassian · confluence data center15 Eyl 2026
- CVE-2026-8189434İzleyin
Concrete CMS 9.5.2 and below is vulnerable to Stored DOM-based Cross-site Scripting (XSS) in the Gallery block image Caption field
YüksekCVSS 8,5İstismar yokEPSS %0concretecms · concrete cms15 Eyl 2026
- CVE-2026-8189534İzleyin
Concrete CMS 9.5.2 and below is vulnerable to Stored SQL Injection in Concrete CMS Document Library Block via `fsID[]` in `setMode=any`
YüksekCVSS 8,5İstismar yokEPSS %0concretecms · concrete cms15 Eyl 2026
- CVE-2026-8189633İzleyin
Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question Label
YüksekCVSS 8,4İstismar yokEPSS %0concretecms · concrete cms15 Eyl 2026
- CVE-2026-8189730İzleyin
Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via Express form Text control save_control
YüksekCVSS 7,7İstismar yokEPSS %0concretecms · concrete cms15 Eyl 2026
- CVE-2026-8902236İzleyin
BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusion
KritikCVSS 9,1İstismar yokEPSS %0bookstackapp · bookstack15 Eyl 2026
- CVE-2026-8902638İzleyin
Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
KritikCVSS 9,3Kavram kanıtıEPSS %2issabel foundation · issabel framework15 Eyl 2026
- CVE-2026-1172832İzleyin
IBM MQ .NET client is vulnerable to remote code execution
YüksekCVSS 8,1İstismar yokEPSS %0ibm · mq15 Eyl 2026
- CVE-2026-1172934İzleyin
IBM MQ Java messaging is vulnerable to remote code execution
YüksekCVSS 8,5İstismar yokEPSS %0ibm · mq15 Eyl 2026
- CVE-2026-1192136İzleyin
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
KritikCVSS 9,1İstismar yokEPSS %0ibm · verify identity access15 Eyl 2026
- CVE-2026-1192630İzleyin
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
YüksekCVSS 7,5İstismar yokEPSS %0ibm · verify identity access15 Eyl 2026
- CVE-2026-1192839İzleyin
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
KritikCVSS 9,8İstismar yokEPSS %0ibm · verify identity access15 Eyl 2026
- CVE-2026-1192930İzleyin
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
YüksekCVSS 7,5İstismar yokEPSS %0ibm · verify identity access15 Eyl 2026
- CVE-2026-1193428İzleyin
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
YüksekCVSS 7,2İstismar yokEPSS %0ibm · verify identity access15 Eyl 2026
- CVE-2026-1210132İzleyin
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
YüksekCVSS 8,1İstismar yokEPSS %0ibm · verify identity access15 Eyl 2026
- CVE-2026-1215028İzleyin
IBM MQ queue manager is vulnerable to denial of service
YüksekCVSS 7,0İstismar yokEPSS %0ibm · mq15 Eyl 2026
- CVE-2026-1235139İzleyin
IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection
KritikCVSS 9,8İstismar yokEPSS %0ibm · mq15 Eyl 2026
- CVE-2026-1235430İzleyin
IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection
YüksekCVSS 7,5İstismar yokEPSS %0ibm · mq15 Eyl 2026
- CVE-2026-1235532İzleyin
IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution
YüksekCVSS 8,1İstismar yokEPSS %0ibm · mq15 Eyl 2026
- CVE-2026-1235830İzleyin
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
YüksekCVSS 7,5İstismar yokEPSS %0ibm · verify identity access15 Eyl 2026
- CVE-2026-1266632İzleyin
IBM MQ Java messaging is vulnerable to XML external entity injection
YüksekCVSS 8,1İstismar yokEPSS %0ibm · mq15 Eyl 2026
- CVE-2026-1266728İzleyin
IBM MQ .NET client is vulnerable to XML external entity injection
YüksekCVSS 7,1İstismar yokEPSS %0ibm · mq15 Eyl 2026
- CVE-2026-1272835İzleyin
IBM MQ Java messaging is vulnerable to remote code execution
YüksekCVSS 8,8İstismar yokEPSS %0ibm · mq15 Eyl 2026
- CVE-2026-1275228İzleyin
Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026
YüksekCVSS 7,1İstismar yokEPSS %0ibm · business automation workflow containers and traditional15 Eyl 2026
- CVE-2026-1811330İzleyin
Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS in the Top Navigation Bar Block via Dropdown Child Page Names
YüksekCVSS 7,5İstismar yokEPSS %0concrete cms · concrete cms15 Eyl 2026
- CVE-2026-1811529İzleyin
In Concrete CMS 9.2.0 to 9.5.2, Missing Authorization in REST API Users update() and change_password Enables Account Takeover.
YüksekCVSS 7,4İstismar yokEPSS %0concrete cms · concrete cms15 Eyl 2026
- CVE-2026-4005835İzleyin
Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows
YüksekCVSS 8,8İstismar yokEPSS %0crowdstrike · falcon sensor for windows15 Eyl 2026
- CVE-2026-5248435İzleyin
An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/de
YüksekCVSS 8,8İstismar yokEPSS %015 Eyl 2026
- CVE-2026-8123639İzleyin
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.
KritikCVSS 9,8İstismar yokEPSS %0dell · wyse management suite15 Eyl 2026
- CVE-2026-8123836İzleyin
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability.
KritikCVSS 9,1İstismar yokEPSS %0dell · wyse management suite15 Eyl 2026
- CVE-2026-8123939İzleyin
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.
KritikCVSS 9,8İstismar yokEPSS %0dell · wyse management suite15 Eyl 2026
- CVE-2026-8124039İzleyin
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.
KritikCVSS 9,8İstismar yokEPSS %0dell · wyse management suite15 Eyl 2026
- CVE-2026-8189830İzleyin
Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via country-less Address attribute in Express association views
YüksekCVSS 7,5İstismar yokEPSS %0concrete cms · concrete cms15 Eyl 2026
- CVE-2026-8189929İzleyin
Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS via group folder name on the Members > Groups dashboard
YüksekCVSS 7,3İstismar yokEPSS %0concrete cms · concrete cms15 Eyl 2026
- CVE-2026-015935İzleyin
In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check.
YüksekCVSS 8,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-017035İzleyin
In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.
YüksekCVSS 8,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-017135İzleyin
In multiple locations, there is a possible out-of-bounds write due to a logic error in the code.
YüksekCVSS 8,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-018933İzleyin
In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code.
YüksekCVSS 8,4İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-019433İzleyin
In multiple locations, there is a possible permission bypass due to an integer overflow.
YüksekCVSS 8,4İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-019931İzleyin
In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation.
YüksekCVSS 7,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-020035İzleyin
In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow.
YüksekCVSS 8,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5395730İzleyin
Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endp
YüksekCVSS 7,7İstismar yokEPSS %0contentful · contentful-mcp-server15 Eyl 2026
- CVE-2026-5396628İzleyin
XWiki Platform: Privilege escalation from edit to script right through Live Data editing
YüksekCVSS 7,1İstismar yokEPSS %0xwiki · xwiki-platform15 Eyl 2026
- CVE-2026-5416732İzleyin
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header
YüksekCVSS 8,2İstismar yokEPSS %0tektoncd · pipelines-as-code15 Eyl 2026
- CVE-2026-1977339İzleyin
libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %0libwebsockets · libwebsockets15 Eyl 2026
- CVE-2026-1977428İzleyin
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0bluez · bluez15 Eyl 2026
- CVE-2026-1978131İzleyin
Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0ashlar-vellum · cobalt15 Eyl 2026
- CVE-2026-1988531İzleyin
OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0originlab · origin viewer15 Eyl 2026
- CVE-2026-1988631İzleyin
OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0originlab · origin viewer15 Eyl 2026
- CVE-2026-5515836İzleyin
Conflibot: Command injection via crafted pull request branch names under pull_request_target
KritikCVSS 9,1İstismar yokEPSS %0wktk · conflibot15 Eyl 2026
- CVE-2026-5517830İzleyin
GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data
YüksekCVSS 7,5İstismar yokEPSS %0geolens-io · geolens15 Eyl 2026
- CVE-2026-5758634İzleyin
CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution
YüksekCVSS 8,6İstismar yokEPSS %0naranor · agent-coderag15 Eyl 2026
- CVE-2026-5997140Planlayın
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
KritikCVSS 10,0İstismar yokEPSS %0designcomputer · mysql_mcp_server15 Eyl 2026
- CVE-2026-6154936İzleyin
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend
KritikCVSS 9,0İstismar yokEPSS %0woodpecker-ci · woodpecker15 Eyl 2026
- CVE-2026-5530133İzleyin
In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check.
YüksekCVSS 8,4İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5530630İzleyin
In Cellular Modem, there is a possible denial of service due to improper input validation.
YüksekCVSS 7,5İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5531835İzleyin
In multiple locations, there is a possible use-after-free due to a race condition.
YüksekCVSS 8,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5532331İzleyin
In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow.
YüksekCVSS 7,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5533135İzleyin
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check.
YüksekCVSS 8,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5534332İzleyin
In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check.
YüksekCVSS 8,0İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5535131İzleyin
In VPU, there is a possible out-of-bounds write due to an integer overflow.
YüksekCVSS 7,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5535931İzleyin
In multiple locations, there is a possible permission bypass due to a logic error in the code.
YüksekCVSS 7,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5536639İzleyin
In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code.
KritikCVSS 9,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5688133İzleyin
In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code.
YüksekCVSS 8,4İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5688235İzleyin
In Cellular Modem, there is a possible information disclosure due to a logic error in the code.
YüksekCVSS 8,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5691433İzleyin
In multiple locations, there is a possible use-after-free due to improper locking.
YüksekCVSS 8,4İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5692035İzleyin
In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code.
YüksekCVSS 8,8İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5694133İzleyin
In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code.
YüksekCVSS 8,4İstismar yokEPSS %0google · android15 Eyl 2026
- CVE-2026-5694235İzleyin
In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.
YüksekCVSS 8,8İstismar yokEPSS %0google · android15 Eyl 2026