İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.953 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 44 / 80

  • CVE-2026-87233
    30İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 7,6İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87234
    32İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87235
    29İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 7,4İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87236
    28İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 7,1İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87237
    30İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 7,5İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87238
    35İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 8,8İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87239
    28İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 7,2İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87240
    28İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 7,0İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87241
    32İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87242
    29İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 7,4İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87243
    32İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 8,0İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87244
    28İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 7,2İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87245
    32İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 8,0İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87246
    28İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 7,2İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87247
    30İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 7,5İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87249
    28İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 7,1İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87250
    30İzleyin

    Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).

    YüksekCVSS 7,6İstismar yokEPSS %0

    oracle · hyperion financial management15 Eyl 2026

  • CVE-2026-87254
    30İzleyin

    Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments).

    YüksekCVSS 7,5İstismar yokEPSS %0

    oracle · agile product lifecycle management15 Eyl 2026

  • CVE-2026-87256
    30İzleyin

    Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).

    YüksekCVSS 7,7İstismar yokEPSS %0

    oracle · agile product lifecycle management15 Eyl 2026

  • CVE-2026-87257
    30İzleyin

    Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: SDK).

    YüksekCVSS 7,7İstismar yokEPSS %0

    oracle · agile product lifecycle management15 Eyl 2026

  • CVE-2026-87258
    30İzleyin

    Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments).

    YüksekCVSS 7,6İstismar yokEPSS %0

    oracle · agile product lifecycle management15 Eyl 2026

  • CVE-2026-87259
    33İzleyin

    Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface

    YüksekCVSS 8,4İstismar yokEPSS %0

    oracle corporation · oracle agile engineering data management15 Eyl 2026

  • CVE-2026-87260
    29İzleyin

    Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface

    YüksekCVSS 7,3İstismar yokEPSS %0

    oracle corporation · oracle agile engineering data management15 Eyl 2026

  • CVE-2026-87261
    29İzleyin

    Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface

    YüksekCVSS 7,3İstismar yokEPSS %0

    oracle corporation · oracle agile engineering data management15 Eyl 2026

  • CVE-2026-87262
    28İzleyin

    Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface

    YüksekCVSS 7,1İstismar yokEPSS %0

    oracle corporation · oracle agile engineering data management15 Eyl 2026

  • CVE-2026-87264
    30İzleyin

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).

    YüksekCVSS 7,7İstismar yokEPSS %0

    oracle corporation · peoplesoft enterprise peopletools15 Eyl 2026

  • CVE-2026-87265
    32İzleyin

    Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · purchasing15 Eyl 2026

  • CVE-2026-87266
    32İzleyin

    Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).

    YüksekCVSS 8,2İstismar yokEPSS %0

    oracle · agile product lifecycle management15 Eyl 2026

  • CVE-2026-87268
    31İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 7,8İstismar yokEPSS %0

    oracle · vm virtualbox15 Eyl 2026

  • CVE-2026-87269
    31İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 7,8İstismar yokEPSS %0

    oracle · vm virtualbox15 Eyl 2026

  • CVE-2026-87270
    31İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 7,8İstismar yokEPSS %0

    oracle · vm virtualbox15 Eyl 2026

  • CVE-2026-87271
    31İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 7,8İstismar yokEPSS %0

    oracle · vm virtualbox15 Eyl 2026

  • CVE-2026-87272
    31İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 7,8İstismar yokEPSS %0

    oracle · vm virtualbox15 Eyl 2026

  • CVE-2026-87273
    34İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 8,6İstismar yokEPSS %0

    oracle · vm virtualbox15 Eyl 2026

  • CVE-2026-87276
    30İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 7,5İstismar yokEPSS %0

    oracle · vm virtualbox15 Eyl 2026

  • CVE-2026-87277
    30İzleyin

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

    YüksekCVSS 7,5İstismar yokEPSS %0

    oracle · vm virtualbox15 Eyl 2026

  • CVE-2026-87286
    32İzleyin

    Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle corporation · oracle graalvm15 Eyl 2026

  • CVE-2026-87287
    32İzleyin

    Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle corporation · oracle graalvm15 Eyl 2026

  • CVE-2026-87288
    32İzleyin

    Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle corporation · oracle graalvm15 Eyl 2026

  • CVE-2026-87289
    30İzleyin

    Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content).

    YüksekCVSS 7,5İstismar yokEPSS %0

    oracle · helidon15 Eyl 2026

  • CVE-2026-88975
    30İzleyin

    Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE

    YüksekCVSS 7,5İstismar yokEPSS %0

    http4s · http4s15 Eyl 2026

  • CVE-2026-89040
    37İzleyin

    Tencent Mass Service Engine in Cluster (MSEC) path traversal

    KritikCVSS 9,3İstismar yokEPSS %1

    tencent · mass service engine in cluster (msec)15 Eyl 2026

  • CVE-2026-92238
    39İzleyin

    Ambiguous parsing of mail headers

    KritikCVSS 9,8İstismar yokEPSS %0

    mozilla · thunderbird15 Eyl 2026

  • CVE-2026-92239
    32İzleyin

    Buffer overrun in IMAP

    YüksekCVSS 8,1İstismar yokEPSS %0

    mozilla · thunderbird15 Eyl 2026

  • CVE-2026-92240
    36İzleyin

    Out-of-bounds read in IMAP response parser

    KritikCVSS 9,1İstismar yokEPSS %0

    mozilla · thunderbird15 Eyl 2026

  • CVE-2026-19655
    28İzleyin

    On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or w

    YüksekCVSS 7,1İstismar yokEPSS %0

    arista networks · eos15 Eyl 2026

  • CVE-2026-66372
    30İzleyin

    Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups

    YüksekCVSS 7,6İstismar yokEPSS %0

    digital watchdog · vmax a1 g4 dvr15 Eyl 2026

  • CVE-2026-66887
    37İzleyin

    Missing Authorization in Digital Watchdog VMAX DVR and NVR Product Lineups

    KritikCVSS 9,4İstismar yokEPSS %0

    digital watchdog · vmax a1 g4 dvr15 Eyl 2026

  • CVE-2026-66890
    37İzleyin

    Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups

    KritikCVSS 9,4İstismar yokEPSS %0

    digital watchdog · vmax a1 g4 dvr15 Eyl 2026

  • CVE-2026-68070
    34İzleyin

    Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups

    YüksekCVSS 8,7İstismar yokEPSS %0

    digital watchdog · vmax a1 g4 dvr15 Eyl 2026

  • CVE-2026-68491
    37İzleyin

    An insufficient check allowed for the overwrite of arbitrary files via a symlink.

    KritikCVSS 9,4İstismar yokEPSS %0

    webpros · solusvm15 Eyl 2026

  • CVE-2026-68950
    34İzleyin

    Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups

    YüksekCVSS 8,7İstismar yokEPSS %0

    digital watchdog · vmax a1 g4 dvr15 Eyl 2026

  • CVE-2026-68953
    28İzleyin

    Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups

    YüksekCVSS 7,1İstismar yokEPSS %0

    digital watchdog · vmax a1 g4 dvr15 Eyl 2026

  • CVE-2026-79994
    34İzleyin

    Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race

    YüksekCVSS 8,7İstismar yokEPSS %0

    docker · docker sandboxes15 Eyl 2026

  • CVE-2026-91709
    35İzleyin

    Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandb

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91710
    38İzleyin

    Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the san

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91711
    35İzleyin

    Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91712
    33İzleyin

    Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer pr

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91715
    35İzleyin

    Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandb

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91716
    38İzleyin

    Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91718
    38İzleyin

    Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91719
    32İzleyin

    Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.

    YüksekCVSS 8,1İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91721
    35İzleyin

    Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91722
    35İzleyin

    Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91724
    33İzleyin

    Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potent

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91727
    32İzleyin

    Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised

    YüksekCVSS 8,1İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91728
    38İzleyin

    Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91729
    38İzleyin

    Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to exec

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91731
    35İzleyin

    Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91732
    32İzleyin

    Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer proc

    YüksekCVSS 8,1İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91733
    33İzleyin

    Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91734
    29İzleyin

    Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code out

    YüksekCVSS 7,4İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91735
    33İzleyin

    Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91736
    35İzleyin

    Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91737
    35İzleyin

    Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91738
    38İzleyin

    Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code o

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91741
    35İzleyin

    Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbo

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91743
    33İzleyin

    Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potenti

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91745
    35İzleyin

    Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91748
    33İzleyin

    Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer pr

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91749
    38İzleyin

    Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside th

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome15 Eyl 2026

  • CVE-2026-91939
    37İzleyin

    Cotonti 1.0.0 Comments Plugin PHP Object Injection via ci Parameter

    KritikCVSS 9,3İstismar yokEPSS %0

    cotonti · cotonti15 Eyl 2026

  • CVE-2026-92000
    34İzleyin

    adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size

    YüksekCVSS 8,7İstismar yokEPSS %0

    cthackers · adm-zip15 Eyl 2026

  • CVE-2026-18111
    34İzleyin

    Concrete CMS below 9.5.4 allows privilege escalation because adding users and assigning groups do not require additional identity verification

    YüksekCVSS 8,5İstismar yokEPSS %0

    concretecms · concrete cms15 Eyl 2026

  • CVE-2026-46488
    36İzleyin

    motionEye: Authentication possible via password hash

    KritikCVSS 9,1İstismar yokEPSS %0

    motioneye-project · motioneye15 Eyl 2026

  • CVE-2026-53710
    40Planlayın

    MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

    KritikCVSS 10,0İstismar yokEPSS %1

    ibm · mcp-context-forge15 Eyl 2026

  • CVE-2026-55149
    30İzleyin

    Vouch Proxy: Unbounded Multipart Cookie Allocation DoS

    YüksekCVSS 7,5İstismar yokEPSS %0

    vouch · vouch-proxy15 Eyl 2026

  • CVE-2026-55690
    30İzleyin

    EmbedVideo Extension: Stored XSS via unsanitized service name in exception text

    YüksekCVSS 7,5İstismar yokEPSS %0

    starcitizenwiki · mediawiki-extensions-embedvideo15 Eyl 2026

  • CVE-2026-55691
    34İzleyin

    EmbedVideo Extension : Stored XSS via unsanitized class passed to template

    YüksekCVSS 8,6İstismar yokEPSS %0

    starcitizenwiki · mediawiki-extensions-embedvideo15 Eyl 2026

  • CVE-2026-55692
    30İzleyin

    EmbedVideo Extension: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled

    YüksekCVSS 7,5İstismar yokEPSS %0

    starcitizenwiki · mediawiki-extensions-embedvideo15 Eyl 2026

  • CVE-2026-58200
    28İzleyin

    @jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing

    YüksekCVSS 7,1İstismar yokEPSS %0

    jhb-software · payload-plugins15 Eyl 2026

  • CVE-2026-58201
    34İzleyin

    Lokka: Azure Resource Manager URL path validation issue

    YüksekCVSS 8,7İstismar yokEPSS %0

    merill · lokka15 Eyl 2026

  • CVE-2026-59160
    35İzleyin

    Yeger: Unauthenticated Network-Exposed Turborepo Task Execution via /api/run

    YüksekCVSS 8,8İstismar yokEPSS %0

    deryeger · yeger15 Eyl 2026

  • CVE-2026-63443
    33İzleyin

    Coder: Workspace agent API insecure redirect handling allowed cross-agent file read and write

    YüksekCVSS 8,3İstismar yokEPSS %0

    coder · coder15 Eyl 2026

  • CVE-2026-10144
    28İzleyin

    Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

    YüksekCVSS 7,1İstismar yokEPSS %1

    web-infra-dev · rsbuild15 Eyl 2026

  • CVE-2026-73807
    37İzleyin

    mySCADA myPRO Manager Missing Authorization

    KritikCVSS 9,3İstismar yokEPSS %0

    myscada technologies · myscada mypro15 Eyl 2026

  • CVE-2026-76852
    34İzleyin

    Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write

    YüksekCVSS 8,7İstismar yokEPSS %0

    netcore · nr26815 Eyl 2026

  • CVE-2026-76853
    28İzleyin

    Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi

    YüksekCVSS 7,2İstismar yokEPSS %0

    netcore · nr26815 Eyl 2026

  • CVE-2026-76854
    28İzleyin

    Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via l7_web_auth_user_show.cgi

    YüksekCVSS 7,1İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026

  • CVE-2026-76855
    28İzleyin

    Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026