İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.957 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 45 / 80

  • CVE-2026-76856
    28İzleyin

    Netcore NR255-V 1.5.130703 Cross-Site Request Forgery in WAN/LAN Configuration Endpoints

    YüksekCVSS 7,0İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026

  • CVE-2026-76857
    28İzleyin

    Netcore NR255-V 1.5.130703 Plaintext DDNS Credential Disclosure via ddns_wan_list_show.cgi

    YüksekCVSS 7,1İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026

  • CVE-2026-76859
    28İzleyin

    Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgi

    YüksekCVSS 7,1İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026

  • CVE-2026-76860
    34İzleyin

    Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization

    YüksekCVSS 8,7İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026

  • CVE-2026-76861
    34İzleyin

    Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgi

    YüksekCVSS 8,7İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026

  • CVE-2026-76862
    34İzleyin

    Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths

    YüksekCVSS 8,7İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026

  • CVE-2026-76866
    34İzleyin

    Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters

    YüksekCVSS 8,6İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026

  • CVE-2026-76869
    34İzleyin

    Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgi

    YüksekCVSS 8,6İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026

  • CVE-2026-76870
    28İzleyin

    Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation

    YüksekCVSS 7,1İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026

  • CVE-2026-76871
    28İzleyin

    Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers

    YüksekCVSS 7,1İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026

  • CVE-2026-78225
    38İzleyin

    Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

    KritikCVSS 9,5İstismar yokEPSS %0

    wärtsilä · fos-onboard15 Eyl 2026

  • CVE-2026-81855
    37İzleyin

    Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

    KritikCVSS 9,3İstismar yokEPSS %0

    wärtsilä · fos-onboard15 Eyl 2026

  • CVE-2026-83357
    32İzleyin

    Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle corporation · oracle graalvm for jdk, oracle graalvm15 Eyl 2026

  • CVE-2026-83368
    28İzleyin

    Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE (component: Compile

    YüksekCVSS 7,0İstismar yokEPSS %0

    oracle corporation · oracle graalvm for jdk, oracle graalvm enterprise edition, oracle graalvm15 Eyl 2026

  • CVE-2026-83408
    32İzleyin

    Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle corporation · oracle graalvm for jdk, oracle graalvm15 Eyl 2026

  • CVE-2026-92256
    28İzleyin

    Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers

    YüksekCVSS 7,1İstismar yokEPSS %0

    netcore · nr255-v15 Eyl 2026

  • CVE-2026-13210
    30İzleyin

    Incorrect Authorization in GitLab

    YüksekCVSS 7,7İstismar yokEPSS %0

    gitlab · gitlab15 Eyl 2026

  • CVE-2026-44300
    35İzleyin

    OpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    opencost · opencost15 Eyl 2026

  • CVE-2026-45579
    39İzleyin

    DIRAC: RCE in RequestManager due to eval on untrusted input

    KritikCVSS 9,9İstismar yokEPSS %0

    diracgrid · dirac15 Eyl 2026

  • CVE-2026-53459
    37İzleyin

    Bambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpoints

    KritikCVSS 9,3İstismar yokEPSS %0

    maziggy · bambuddy15 Eyl 2026

  • CVE-2026-54251
    34İzleyin

    netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service

    YüksekCVSS 8,7İstismar yokEPSS %0

    netty · netty-incubator-codec-ohttp15 Eyl 2026

  • CVE-2026-54547
    29İzleyin

    Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token

    YüksekCVSS 7,4İstismar yokEPSS %0

    pipeboard-co · meta-ads-mcp15 Eyl 2026

  • CVE-2026-54549
    33İzleyin

    Meta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch

    YüksekCVSS 8,3İstismar yokEPSS %0

    pipeboard-co · meta-ads-mcp15 Eyl 2026

  • CVE-2026-55225
    32İzleyin

    Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`

    YüksekCVSS 8,0İstismar yokEPSS %0

    strimzi · strimzi-kafka-operator15 Eyl 2026

  • CVE-2026-56825
    32İzleyin

    Shopper: Missing authorization on product removal actions in CollectionProducts component

    YüksekCVSS 8,1İstismar yokEPSS %0

    shopperlabs · shopper15 Eyl 2026

  • CVE-2026-56827
    32İzleyin

    Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/s

    YüksekCVSS 8,1İstismar yokEPSS %0

    shopperlabs · shopper15 Eyl 2026

  • CVE-2026-56829
    32İzleyin

    Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

    YüksekCVSS 8,1İstismar yokEPSS %0

    shopperlabs · shopper15 Eyl 2026

  • CVE-2026-57441
    33İzleyin

    MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence

    YüksekCVSS 8,4İstismar yokEPSS %0

    bitbonsai · mcpvault15 Eyl 2026

  • CVE-2026-58483
    30İzleyin

    mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`

    YüksekCVSS 7,5İstismar yokEPSS %0

    ihor-sokoliuk · mcp-searxng15 Eyl 2026

  • CVE-2026-58485
    28İzleyin

    mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read`

    YüksekCVSS 7,1İstismar yokEPSS %0

    ihor-sokoliuk · mcp-searxng15 Eyl 2026

  • CVE-2026-58502
    28İzleyin

    githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow

    YüksekCVSS 7,1İstismar yokEPSS %0

    gouef · githubtoplanguages15 Eyl 2026

  • CVE-2026-61667
    39İzleyin

    DIRAC: RCE in FileCatalog DatasetManager via SQL injection + eval

    KritikCVSS 9,9İstismar yokEPSS %1

    diracgrid · dirac15 Eyl 2026

  • CVE-2026-61668
    32İzleyin

    DIRAC: Pilot code downloaded over unverified HTTPS connection

    YüksekCVSS 8,1İstismar yokEPSS %0

    diracgrid · dirac15 Eyl 2026

  • CVE-2026-85234
    30İzleyin

    Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat enterprise linux 1015 Eyl 2026

  • CVE-2026-88765
    34İzleyin

    Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

    YüksekCVSS 8,5İstismar yokEPSS %0

    gitlab · gitlab15 Eyl 2026

  • CVE-2026-58704
    65Bu hafta

    In Cellular Modem, there is a possible permission bypass due to a logic error in the code.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %0

    google · android15 Eyl 2026

  • CVE-2026-69486
    35İzleyin

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · edge chromium15 Eyl 2026

  • CVE-2026-85893
    35İzleyin

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · edge chromium15 Eyl 2026

  • CVE-2026-15638
    36İzleyin

    Cryptographic Padding Oracle

    KritikCVSS 9,1İstismar yokEPSS %0

    delinea · secret server (on-prem)15 Eyl 2026

  • CVE-2026-15639
    37İzleyin

    Reflected Cross-Site Scripting

    KritikCVSS 9,3İstismar yokEPSS %0

    delinea · secret server (on-prem)15 Eyl 2026

  • CVE-2026-15640
    38İzleyin

    Authentication Bypass via SAML Response Manipulation

    KritikCVSS 9,5İstismar yokEPSS %0

    delinea · secret server (on-prem)15 Eyl 2026

  • CVE-2026-73446
    28İzleyin

    Security Advisory 0160

    YüksekCVSS 7,0İstismar yokEPSS %0

    arista networks · eos15 Eyl 2026

  • CVE-2026-73459
    28İzleyin

    Security Advisory 0160

    YüksekCVSS 7,0İstismar yokEPSS %0

    arista networks · eos15 Eyl 2026

  • CVE-2026-73460
    28İzleyin

    Security Advisory 0160

    YüksekCVSS 7,0İstismar yokEPSS %0

    arista networks · eos15 Eyl 2026

  • CVE-2026-61544
    32İzleyin

    libp2p-quic: Remote panic via certificate expiry race during QUIC handshake

    YüksekCVSS 8,2İstismar yokEPSS %0

    libp2p · rust-libp2p15 Eyl 2026

  • CVE-2026-70748
    39İzleyin

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    KritikCVSS 9,8İstismar yokEPSS %0

    oracle · weblogic server15 Eyl 2026

  • CVE-2026-76820
    30İzleyin

    OpenCTI: Synchronizer SSRF: stream fetch has no URL validation

    YüksekCVSS 7,7İstismar yokEPSS %0

    opencti-platform · opencti15 Eyl 2026

  • CVE-2026-76821
    28İzleyin

    OpenCTI: User-Controlled ReDoS in JSON Ingestion Mapper

    YüksekCVSS 7,1İstismar yokEPSS %0

    opencti-platform · opencti15 Eyl 2026

  • CVE-2026-83038
    39İzleyin

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration).

    KritikCVSS 9,9İstismar yokEPSS %0

    oracle · weblogic server15 Eyl 2026

  • CVE-2026-83428
    32İzleyin

    Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · e-business suite15 Eyl 2026

  • CVE-2026-83429
    32İzleyin

    Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · e-business suite15 Eyl 2026

  • CVE-2026-83430
    32İzleyin

    Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · product workbench15 Eyl 2026

  • CVE-2026-83432
    32İzleyin

    Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · e-business suite15 Eyl 2026

  • CVE-2026-83434
    32İzleyin

    Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · product workbench15 Eyl 2026

  • CVE-2026-83435
    32İzleyin

    Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,2İstismar yokEPSS %0

    oracle · bills of material15 Eyl 2026

  • CVE-2026-83437
    30İzleyin

    Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management).

    YüksekCVSS 7,7İstismar yokEPSS %0

    oracle · e-business suite15 Eyl 2026

  • CVE-2026-83438
    32İzleyin

    Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,2İstismar yokEPSS %0

    oracle · e-business suite15 Eyl 2026

  • CVE-2026-83447
    32İzleyin

    Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · bills of material15 Eyl 2026

  • CVE-2026-83448
    32İzleyin

    Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · bills of material15 Eyl 2026

  • CVE-2026-83449
    34İzleyin

    Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,5İstismar yokEPSS %0

    oracle · bills of material15 Eyl 2026

  • CVE-2026-83450
    32İzleyin

    Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench).

    YüksekCVSS 8,0İstismar yokEPSS %0

    oracle · bills of material15 Eyl 2026

  • CVE-2026-83451
    34İzleyin

    Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,5İstismar yokEPSS %0

    oracle · product workbench15 Eyl 2026

  • CVE-2026-83452
    39İzleyin

    Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations).

    KritikCVSS 9,8İstismar yokEPSS %0

    oracle · document management and collaboration15 Eyl 2026

  • CVE-2026-83453
    28İzleyin

    Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 7,2İstismar yokEPSS %0

    oracle · document management and collaboration15 Eyl 2026

  • CVE-2026-83454
    35İzleyin

    Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,8İstismar yokEPSS %0

    oracle · document management and collaboration15 Eyl 2026

  • CVE-2026-83455
    32İzleyin

    Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · e-business suite15 Eyl 2026

  • CVE-2026-83456
    35İzleyin

    Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,8İstismar yokEPSS %0

    oracle · e-business suite15 Eyl 2026

  • CVE-2026-83457
    32İzleyin

    Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · e-business suite15 Eyl 2026

  • CVE-2026-83461
    32İzleyin

    Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).

    YüksekCVSS 8,2İstismar yokEPSS %0

    oracle · mobile application server15 Eyl 2026

  • CVE-2026-83462
    39İzleyin

    Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).

    KritikCVSS 9,8İstismar yokEPSS %0

    oracle · mobile application server15 Eyl 2026

  • CVE-2026-83463
    30İzleyin

    Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).

    YüksekCVSS 7,5İstismar yokEPSS %0

    oracle · mobile application server15 Eyl 2026

  • CVE-2026-83464
    32İzleyin

    Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · mobile application server15 Eyl 2026

  • CVE-2026-83465
    32İzleyin

    Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server).

    YüksekCVSS 8,2İstismar yokEPSS %0

    oracle · mobile application server15 Eyl 2026

  • CVE-2026-83479
    35İzleyin

    Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 8,8İstismar yokEPSS %0

    oracle · e-business suite15 Eyl 2026

  • CVE-2026-83481
    28İzleyin

    Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 7,2İstismar yokEPSS %0

    oracle · e-business suite15 Eyl 2026

  • CVE-2026-83482
    28İzleyin

    Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations).

    YüksekCVSS 7,2İstismar yokEPSS %0

    oracle · e-business suite15 Eyl 2026

  • CVE-2026-87150
    35İzleyin

    Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench).

    YüksekCVSS 8,8İstismar yokEPSS %0

    oracle · bills of material15 Eyl 2026

  • CVE-2026-87151
    30İzleyin

    Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench).

    YüksekCVSS 7,7İstismar yokEPSS %0

    oracle · bills of material15 Eyl 2026

  • CVE-2026-87157
    32İzleyin

    Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).

    YüksekCVSS 8,1İstismar yokEPSS %0

    oracle · order management enterprise command center15 Eyl 2026

  • CVE-2026-87158
    28İzleyin

    Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Enterprise Command Center).

    YüksekCVSS 7,1İstismar yokEPSS %0

    oracle · order management enterprise command center15 Eyl 2026

  • GHSA-5648-rgj9-v224
    32İzleyin

    @zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unauthenticated transports, session-exhaustion DoS

    YüksekCVSS 8,1İstismar yok

    npm · @zereight/mcp-gitlab15 Eyl 2026

  • CVE-2026-54337
    39İzleyin

    Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    shaneisrael · fireshare15 Eyl 2026

  • CVE-2026-54544
    28İzleyin

    Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints

    YüksekCVSS 7,2İstismar yokEPSS %0

    shaneisrael · fireshare15 Eyl 2026

  • CVE-2026-61554
    30İzleyin

    emp3r0r has an unauthenticated HTTP Polling DoS

    YüksekCVSS 7,5İstismar yokEPSS %0

    jm33-m0 · emp3r0r15 Eyl 2026

  • CVE-2026-61559
    38İzleyin

    @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

    KritikCVSS 9,6İstismar yokEPSS %0

    zereight · gitlab-mcp15 Eyl 2026

  • CVE-2026-61568
    38İzleyin

    @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

    KritikCVSS 9,6İstismar yokEPSS %0

    zereight · gitlab-mcp15 Eyl 2026

  • CVE-2026-88065
    30İzleyin

    `tts-be` application has a Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    niaefeup · tts-be15 Eyl 2026

  • CVE-2026-61560
    40Planlayın

    @zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    zereight · gitlab-mcp15 Eyl 2026

  • CVE-2026-92248
    31İzleyin

    Gimp: integer overflow when generating a thumbnail preview for a psd file

    YüksekCVSS 7,8İstismar yokEPSS %0

    gnome · gimp15 Eyl 2026

  • CVE-2026-92299
    28İzleyin

    @jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture

    YüksekCVSS 7,1İstismar yokEPSS %0

    jitsi · @jitsi/electron-sdk15 Eyl 2026

  • CVE-2026-73450
    28İzleyin

    Security Advisory 0161

    YüksekCVSS 7,0İstismar yokEPSS %0

    arista networks · eos15 Eyl 2026

  • CVE-2026-86108
    30İzleyin

    Security Advisory 0181

    YüksekCVSS 7,5İstismar yokEPSS %0

    arista networks · velocloud edge15 Eyl 2026

  • CVE-2026-86109
    30İzleyin

    Security Advisory 0182

    YüksekCVSS 7,5İstismar yokEPSS %0

    arista networks · velocloud edge15 Eyl 2026

  • CVE-2026-92247
    8İzleyin

    synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload

    DüşükCVSS 2,0Kavram kanıtıEPSS %0

    synaptikcms · synaptik-cms15 Eyl 2026

  • CVE-2026-12793
    39İzleyin

    JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    jetmonsters · jetformbuilder — dynamic blocks form builder16 Eyl 2026

  • CVE-2026-14349
    39İzleyin

    TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Action

    KritikCVSS 9,8İstismar yokEPSS %0

    themetechmount · truebooker – appointment booking and scheduler system16 Eyl 2026

  • CVE-2026-18595
    28İzleyin

    WP-Lister Lite for eBay <= 3.8.9 - Unauthenticated Stored Cross-Site Scripting via AJAX Cron Handler Request

    YüksekCVSS 7,2İstismar yokEPSS %0

    wp-lab · wp-lister lite for ebay16 Eyl 2026

  • CVE-2026-78088
    35İzleyin

    Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    contest-gallery · contest gallery – upload & vote photos, media, sell with paypal & stripe16 Eyl 2026

  • CVE-2026-89063
    30İzleyin

    Online Scheduling and Appointment Booking System <= 28.1 - Insecure Direct Object Reference to Unauthenticated Sensitive Data Access and Message Injection via '

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    ladela · online scheduling and appointment booking system – bookly16 Eyl 2026

  • CVE-2026-74926
    28İzleyin

    MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST Endpoint

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · multivendorx16 Eyl 2026