İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.964 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 38 / 80

  • CVE-2026-56945
    31İzleyin

    In VPU, there is a possible out-of-bounds write due to a confused deputy.

    YüksekCVSS 7,8İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-56960
    39İzleyin

    In multiple locations, there is a possible use-after-free due to a logic error in the code.

    KritikCVSS 9,8İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-56967
    32İzleyin

    In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow.

    YüksekCVSS 8,0İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-56970
    33İzleyin

    In multiple locations, there is a possible permission bypass due to a missing permission check.

    YüksekCVSS 8,4İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-56974
    35İzleyin

    In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation.

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-56978
    33İzleyin

    In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check.

    YüksekCVSS 8,4İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-56982
    31İzleyin

    In VPU, there is a possible permission bypass due to a missing permission check.

    YüksekCVSS 7,8İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-56985
    33İzleyin

    In multiple files, there is a possible way to obtain signatures due to type confusion.

    YüksekCVSS 8,4İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-56986
    33İzleyin

    In multiple files, there is a possible out-of-bounds read due to type confusion.

    YüksekCVSS 8,4İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-56997
    35İzleyin

    In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-57008
    30İzleyin

    In Modem, there is a possible information disclosure due to improper input validation.

    YüksekCVSS 7,5İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-57012
    33İzleyin

    In the Setup Wizard, there is a possible remote package install due to a missing permission check.

    YüksekCVSS 8,4İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-57014
    31İzleyin

    In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check.

    YüksekCVSS 7,8İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58678
    31İzleyin

    In Bootloader, there is a possible permission bypass due to a logic error in the code.

    YüksekCVSS 7,8İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58679
    33İzleyin

    In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code.

    YüksekCVSS 8,4İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58683
    35İzleyin

    In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation.

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58691
    33İzleyin

    In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation.

    YüksekCVSS 8,4İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58695
    31İzleyin

    In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check.

    YüksekCVSS 7,8İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58699
    33İzleyin

    In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check.

    YüksekCVSS 8,4İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58701
    28İzleyin

    In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition.

    YüksekCVSS 7,0İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58710
    35İzleyin

    In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check.

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58724
    28İzleyin

    In multiple locations, there is a possible use-after-free due to a race condition.

    YüksekCVSS 7,0İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58728
    28İzleyin

    In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition.

    YüksekCVSS 7,0İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58734
    28İzleyin

    In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition.

    YüksekCVSS 7,0İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58744
    31İzleyin

    In multiple locations, there is a possible escalation of privilege due to improper input validation.

    YüksekCVSS 7,8İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-58766
    31İzleyin

    In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code.

    YüksekCVSS 7,8İstismar yokEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-69204
    36İzleyin

    Http4s: Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)

    KritikCVSS 9,2İstismar yokEPSS %0

    http4s · http4s15 Eyl 2026

  • CVE-2026-69208
    30İzleyin

    Http4s: DigestAuth nonce map grows unbounded

    YüksekCVSS 7,5İstismar yokEPSS %0

    http4s · http4s15 Eyl 2026

  • CVE-2026-69209
    30İzleyin

    Http4s: WebSocket decoder accepts unbounded message sizes

    YüksekCVSS 7,5İstismar yokEPSS %0

    http4s · http4s15 Eyl 2026

  • CVE-2026-69212
    23İzleyin

    Http4s: FollowRedirect middleware leaks credentials over https->http same-authority redirect

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    http4s · http4s15 Eyl 2026

  • CVE-2026-69213
    30İzleyin

    Http4s Ember HTTP/2: unbounded outbound frame queue

    YüksekCVSS 7,5İstismar yokEPSS %0

    http4s · http4s15 Eyl 2026

  • CVE-2026-78081
    28İzleyin

    Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout and myprofile controllers in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

    YüksekCVSS 7,1İstismar yokEPSS %0

    j2commerce.com · j2store extension for joomla15 Eyl 2026

  • CVE-2026-79410
    32İzleyin

    Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce thei

    YüksekCVSS 8,1İstismar yokEPSS %0

    15 Eyl 2026

  • CVE-2026-79411
    35İzleyin

    Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated backend user holding o

    YüksekCVSS 8,8İstismar yokEPSS %0

    15 Eyl 2026

  • CVE-2026-81567
    34İzleyin

    Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

    YüksekCVSS 8,7İstismar yokEPSS %0

    j2commerce.com · j2store extension for joomla15 Eyl 2026

  • CVE-2026-81568
    34İzleyin

    Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

    YüksekCVSS 8,7İstismar yokEPSS %0

    j2commerce.com · j2store extension for joomla15 Eyl 2026

  • CVE-2026-82189
    34İzleyin

    Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

    YüksekCVSS 8,7İstismar yokEPSS %0

    j2commerce.com · j2store extension for joomla15 Eyl 2026

  • CVE-2026-92176
    31İzleyin

    pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    pdfforge · pdf architect15 Eyl 2026

  • CVE-2026-92177
    31İzleyin

    pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    pdfforge · pdf architect15 Eyl 2026

  • CVE-2026-92178
    31İzleyin

    pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    pdfforge · pdf architect15 Eyl 2026

  • CVE-2026-92179
    31İzleyin

    pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    pdfforge · pdf architect15 Eyl 2026

  • CVE-2026-92180
    31İzleyin

    pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    pdfforge · pdf architect15 Eyl 2026

  • CVE-2026-13327
    33İzleyin

    Improper certificate validation on LDAPS connections to Active Directory in Devolutions Server 2026.2.16 and earlier allows a network-positi

    YüksekCVSS 8,3İstismar yokEPSS %0

    devolutions · server15 Eyl 2026

  • CVE-2026-54076
    32İzleyin

    ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)

    YüksekCVSS 8,1İstismar yokEPSS %0

    arcadedata · arcadedb15 Eyl 2026

  • CVE-2026-54077
    28İzleyin

    ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users

    YüksekCVSS 7,1İstismar yokEPSS %0

    arcadedata · arcadedb15 Eyl 2026

  • CVE-2026-55211
    39İzleyin

    surfio IRAP header size fields cause out-of-bounds reads

    KritikCVSS 9,8İstismar yokEPSS %0

    equinor · surfio15 Eyl 2026

  • CVE-2026-55701
    27İzleyin

    OpenTelemetry githubreceiver silently ignores configured required_headers authentication

    OrtaCVSS 6,9İstismar yokEPSS %0

    open-telemetry · opentelemetry-collector-contrib15 Eyl 2026

  • CVE-2026-55864
    31İzleyin

    GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    geonetwork · core-geonetwork15 Eyl 2026

  • CVE-2026-55887
    34İzleyin

    MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway

    YüksekCVSS 8,7İstismar yokEPSS %0

    docker · mcp-gateway15 Eyl 2026

  • CVE-2026-59965
    28İzleyin

    @jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission

    YüksekCVSS 7,1İstismar yokEPSS %0

    jhb-software · payload-plugins15 Eyl 2026

  • CVE-2026-51133
    24İzleyin

    Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary cod

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    15 Eyl 2026

  • CVE-2026-51134
    31İzleyin

    The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    15 Eyl 2026

  • CVE-2026-59973
    34İzleyin

    mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi

    YüksekCVSS 8,5İstismar yokEPSS %0

    agentfront · frontmcp15 Eyl 2026

  • CVE-2026-65831
    30İzleyin

    ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read

    YüksekCVSS 7,7İstismar yokEPSS %0

    arcadedata · arcadedb15 Eyl 2026

  • CVE-2026-85013
    29İzleyin

    Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters

    YüksekCVSS 7,3İstismar yokEPSS %0

    red hat · red hat hardened images15 Eyl 2026

  • CVE-2026-69202
    30İzleyin

    Http4s Ember HTTP/2: unbounded inbound body buffering

    YüksekCVSS 7,5İstismar yokEPSS %0

    http4s · http4s15 Eyl 2026

  • CVE-2026-69203
    30İzleyin

    Http4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMS

    YüksekCVSS 7,5İstismar yokEPSS %0

    http4s · http4s15 Eyl 2026

  • CVE-2026-69205
    34İzleyin

    Http4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)

    YüksekCVSS 8,7İstismar yokEPSS %0

    http4s · http4s15 Eyl 2026

  • CVE-2026-69210
    30İzleyin

    Http4s: WebSocket decoder accepts negative length, causing infinite decode loop

    YüksekCVSS 7,5İstismar yokEPSS %0

    http4s · http4s15 Eyl 2026

  • CVE-2026-69217
    34İzleyin

    Http4s: Ember Server accepts duplicate Content-Length headers

    YüksekCVSS 8,7İstismar yokEPSS %0

    http4s · http4s15 Eyl 2026

  • CVE-2026-69218
    30İzleyin

    Http4s Ember HTTP/2: unbounded continuation frame accumulation

    YüksekCVSS 7,5İstismar yokEPSS %0

    http4s · http4s15 Eyl 2026

  • CVE-2026-70756
    39İzleyin

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    KritikCVSS 9,8İstismar yokEPSS %0

    oracle · weblogic server15 Eyl 2026

  • CVE-2026-70757
    39İzleyin

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    KritikCVSS 9,8İstismar yokEPSS %0

    oracle · weblogic server15 Eyl 2026

  • CVE-2026-70913
    39İzleyin

    Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).

    KritikCVSS 9,8İstismar yokEPSS %0

    oracle · identity manager15 Eyl 2026

  • CVE-2026-70915
    35İzleyin

    Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).

    YüksekCVSS 8,8İstismar yokEPSS %0

    oracle · identity manager15 Eyl 2026

  • CVE-2026-71047
    35İzleyin

    Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).

    YüksekCVSS 8,8İstismar yokEPSS %0

    oracle · identity manager15 Eyl 2026

  • CVE-2026-71133
    40Planlayın

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    KritikCVSS 10,0İstismar yokEPSS %0

    oracle · access manager15 Eyl 2026

  • CVE-2026-71163
    39İzleyin

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    KritikCVSS 9,9İstismar yokEPSS %0

    oracle · access manager15 Eyl 2026

  • CVE-2026-73458
    36İzleyin

    On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause t

    KritikCVSS 9,2İstismar yokEPSS %0

    arista networks · eos15 Eyl 2026

  • CVE-2026-73926
    34İzleyin

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    YüksekCVSS 8,7İstismar yokEPSS %0

    oracle · access manager15 Eyl 2026

  • CVE-2026-73940
    39İzleyin

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    KritikCVSS 9,8İstismar yokEPSS %0

    oracle · access manager15 Eyl 2026

  • CVE-2026-73941
    34İzleyin

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    YüksekCVSS 8,6İstismar yokEPSS %0

    oracle · access manager15 Eyl 2026

  • CVE-2026-73942
    35İzleyin

    Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

    YüksekCVSS 8,8İstismar yokEPSS %0

    oracle · identity manager15 Eyl 2026

  • CVE-2026-73943
    30İzleyin

    Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

    YüksekCVSS 7,6İstismar yokEPSS %0

    oracle · identity manager15 Eyl 2026

  • CVE-2026-73944
    36İzleyin

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    KritikCVSS 9,1İstismar yokEPSS %0

    oracle · access manager15 Eyl 2026

  • CVE-2026-73945
    39İzleyin

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    KritikCVSS 9,9İstismar yokEPSS %0

    oracle · access manager15 Eyl 2026

  • CVE-2026-73946
    36İzleyin

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    KritikCVSS 9,1İstismar yokEPSS %0

    oracle · access manager15 Eyl 2026

  • CVE-2026-73947
    39İzleyin

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    KritikCVSS 9,8İstismar yokEPSS %0

    oracle · access manager15 Eyl 2026

  • CVE-2026-73948
    39İzleyin

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

    KritikCVSS 9,9İstismar yokEPSS %0

    oracle · webcenter portal15 Eyl 2026

  • CVE-2026-73949
    35İzleyin

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

    YüksekCVSS 8,8İstismar yokEPSS %0

    oracle · webcenter portal15 Eyl 2026

  • CVE-2026-73950
    39İzleyin

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    KritikCVSS 9,8İstismar yokEPSS %0

    oracle · access manager15 Eyl 2026

  • CVE-2026-73951
    32İzleyin

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · webcenter portal15 Eyl 2026

  • CVE-2026-73952
    36İzleyin

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

    KritikCVSS 9,1İstismar yokEPSS %0

    oracle · webcenter portal15 Eyl 2026

  • CVE-2026-73953
    39İzleyin

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

    KritikCVSS 9,8İstismar yokEPSS %0

    oracle · webcenter portal15 Eyl 2026

  • CVE-2026-73956
    39İzleyin

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

    KritikCVSS 9,8İstismar yokEPSS %0

    oracle · webcenter portal15 Eyl 2026

  • CVE-2026-73957
    37İzleyin

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

    KritikCVSS 9,3İstismar yokEPSS %0

    oracle · webcenter portal15 Eyl 2026

  • CVE-2026-73958
    32İzleyin

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · access manager15 Eyl 2026

  • CVE-2026-73959
    35İzleyin

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

    YüksekCVSS 8,8İstismar yokEPSS %0

    oracle · webcenter portal15 Eyl 2026

  • CVE-2026-73962
    38İzleyin

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    KritikCVSS 9,6İstismar yokEPSS %0

    oracle · access manager15 Eyl 2026

  • CVE-2026-73963
    39İzleyin

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

    KritikCVSS 9,8İstismar yokEPSS %0

    oracle · webcenter portal15 Eyl 2026

  • CVE-2026-73966
    28İzleyin

    Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

    YüksekCVSS 7,2İstismar yokEPSS %0

    oracle corporation · siebel apps - marketing15 Eyl 2026

  • CVE-2026-91947
    30İzleyin

    FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC

    YüksekCVSS 7,7İstismar yokEPSS %0

    freerdp · freerdp15 Eyl 2026

  • CVE-2026-76669
    39İzleyin

    Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator

    KritikCVSS 9,9İstismar yokEPSS %0

    hpe · edgeconnect operating system15 Eyl 2026

  • CVE-2026-76670
    39İzleyin

    Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator

    KritikCVSS 9,9İstismar yokEPSS %0

    hpe · edgeconnect operating system15 Eyl 2026

  • CVE-2026-76672
    39İzleyin

    Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator

    KritikCVSS 9,9İstismar yokEPSS %0

    arubanetworks · edgeconnect sd-wan orchestrator15 Eyl 2026

  • CVE-2026-76673
    39İzleyin

    Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator

    KritikCVSS 9,8İstismar yokEPSS %0

    arubanetworks · edgeconnect sd-wan orchestrator15 Eyl 2026

  • CVE-2026-76674
    39İzleyin

    Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways

    KritikCVSS 9,8İstismar yokEPSS %1

    hpe · edgeconnect operating system15 Eyl 2026

  • CVE-2026-76675
    36İzleyin

    Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways

    KritikCVSS 9,1İstismar yokEPSS %1

    arubanetworks · edgeconnect sd-wan orchestrator15 Eyl 2026

  • CVE-2026-76676
    35İzleyin

    Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in EdgeConnect SD-WAN Gateways

    YüksekCVSS 8,8İstismar yokEPSS %0

    arubanetworks · edgeconnect sd-wan orchestrator15 Eyl 2026

  • CVE-2026-76677
    35İzleyin

    Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways

    YüksekCVSS 8,8İstismar yokEPSS %0

    arubanetworks · edgeconnect sd-wan orchestrator15 Eyl 2026