Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.953 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 46 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-76550İstismar yok | WP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path Traversalunknown · wp import export lite · CWE-94 | Yüksek7,2 | — | %0,8 | 16 Eyl 2026 |
28İzleyin | CVE-2026-76551İstismar yok | WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP Functionunknown · wp import export lite · CWE-94 | Yüksek7,2 | — | %0,8 | 16 Eyl 2026 |
35İzleyin | CVE-2026-76552İstismar yok | WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Importunknown · wp import export lite · CWE-434 | Yüksek8,8 | — | %0,7 | 16 Eyl 2026 |
27İzleyin | CVE-2026-76555Kavram kanıtı | WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversalunknown · wp import export lite · CWE-22 | Orta6,8 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-78472İstismar yok | Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated SQLi via 'sort' Parameterunknown · ni woocommerce sales report · CWE-89 | Yüksek8,6 | — | %0,4 | 16 Eyl 2026 |
35İzleyin | CVE-2026-84829İstismar yok | Optimole < 4.2.12 - Unauthenticated Stored XSS via Srcset Descriptor Parameterunknown · optimole · CWE-79 | Yüksek8,8 | — | %0,5 | 16 Eyl 2026 |
32İzleyin | CVE-2026-85530İstismar yok | GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatchunknown · givewp · CWE-269 | Yüksek8,1 | — | %0,3 | 16 Eyl 2026 |
28İzleyin | CVE-2026-85569İstismar yok | Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassificationunknown · tutor lms · CWE-269 | Yüksek7,2 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-86444İstismar yok | LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameterunknown · learnpress · CWE-79 | Yüksek7,1 | — | %0,2 | 16 Eyl 2026 |
28İzleyin | CVE-2026-19248İstismar yok | Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qtqt · qt · CWE-674 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
19İzleyin | CVE-2026-19857İstismar yok | Formidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML Tokenunknown · formidable forms · CWE-74 | Orta4,8 | — | %0,1 | 16 Eyl 2026 |
30İzleyin | CVE-2026-1168İstismar yok | Allocation of Resources Without Limits or Throttling in GitLabgitlab · gitlab · CWE-770 | Yüksek7,5 | — | %0,4 | 16 Eyl 2026 |
37İzleyin | CVE-2026-73447İstismar yok | Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Requestarista networks · eos · CWE-78 | Kritik9,4 | — | %0,7 | 16 Eyl 2026 |
34İzleyin | CVE-2026-79708İstismar yok | Incorrect Authorization in GitLabgitlab · gitlab · CWE-863 | Yüksek8,5 | — | %0,3 | 16 Eyl 2026 |
39İzleyin | CVE-2026-27546İstismar yok | Authentication Bypass in _account_logpepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-288 | Kritik9,8 | — | %1,0 | 16 Eyl 2026 |
36İzleyin | CVE-2026-27547İstismar yok | Command Injection in /index.php/ajax/get_iodd_menu_infopepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek8,8 | — | %2,9 | 16 Eyl 2026 |
36İzleyin | CVE-2026-27548İstismar yok | Command Injection in /index.php/ajax/get_iodd_port_infopepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek8,8 | — | %2,9 | 16 Eyl 2026 |
36İzleyin | CVE-2026-27549İstismar yok | Command Injection in /index.php/attached_devices_tab/do_uploadpepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek8,8 | — | %2,9 | 16 Eyl 2026 |
36İzleyin | CVE-2026-27550İstismar yok | Command Injection in Field_Shadow_Password Classpepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek8,8 | — | %2,9 | 16 Eyl 2026 |
36İzleyin | CVE-2026-27551İstismar yok | Command Injection in /index.php/ajax/parameterManagepepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek8,8 | — | %2,9 | 16 Eyl 2026 |
32İzleyin | CVE-2026-27552İstismar yok | Unauthorized IODD File Upload due to Improper Authorizationpepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-863 | Yüksek8,1 | — | %0,6 | 16 Eyl 2026 |
36İzleyin | CVE-2026-27554İstismar yok | Command Injection in /index.php/ajax/save_iodd_parameterspepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek8,8 | — | %2,9 | 16 Eyl 2026 |
35İzleyin | CVE-2026-27555İstismar yok | Local File Inclusion in /index.php/ajax/get_iodd_port_infopepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-98 | Yüksek8,8 | — | %0,8 | 16 Eyl 2026 |
35İzleyin | CVE-2026-27556İstismar yok | Local File Inclusion in /index.php/ajax/save_iodd_parameterspepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-98 | Yüksek8,8 | — | %0,8 | 16 Eyl 2026 |
30İzleyin | CVE-2026-27557İstismar yok | Path Traversal in /index.php/view_uploaded_iodd_filepepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-35 | Yüksek7,5 | — | %0,7 | 16 Eyl 2026 |
36İzleyin | CVE-2026-27558İstismar yok | Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_filespepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek8,8 | — | %2,9 | 16 Eyl 2026 |
36İzleyin | CVE-2026-27559İstismar yok | Command Injection via GET in /api/status/datapepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek8,8 | — | %2,9 | 16 Eyl 2026 |
29İzleyin | CVE-2026-27560İstismar yok | Command Injection via DELETE in /api/status/datapepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek7,2 | — | %2,7 | 16 Eyl 2026 |
29İzleyin | CVE-2026-27561İstismar yok | Command Injection via GET in /api/iodd/configpepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek7,2 | — | %2,7 | 16 Eyl 2026 |
29İzleyin | CVE-2026-27562İstismar yok | Command Injection via PUT in /api/iodd/configpepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek7,2 | — | %2,7 | 16 Eyl 2026 |
29İzleyin | CVE-2026-27563İstismar yok | Command Injection via GET in /api/datastorage/datapepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek7,2 | — | %2,7 | 16 Eyl 2026 |
29İzleyin | CVE-2026-27564İstismar yok | Command Injection via PUT in /api/datastorage/datapepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Yüksek7,2 | — | %2,7 | 16 Eyl 2026 |
39İzleyin | CVE-2026-27565İstismar yok | Remote code execution via uploading a malicious IODD filepepperl+fuchs · ice2-8iol1-g65l-v1d · CWE-78 | Kritik9,8 | — | %0,9 | 16 Eyl 2026 |
34İzleyin | CVE-2026-84408İstismar yok | QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC whequalitysoft corporation · qnd premium · CWE-782 | Yüksek8,7 | — | %0,6 | 16 Eyl 2026 |
34İzleyin | CVE-2026-88263İstismar yok | XikeStor Layer3 switches miss authentication for downloading configuration data.xikestor · sks8310-8x · CWE-306 | Yüksek8,7 | — | %0,5 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92355İstismar yok | In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to octopus deploy · octopus server · CWE-22 | Yüksek8,7 | — | %0,6 | 16 Eyl 2026 |
30İzleyin | CVE-2026-73439İstismar yok | Security Advisory 0164arista networks · eos · CWE-842 | Yüksek7,7 | — | %0,3 | 16 Eyl 2026 |
34İzleyin | CVE-2026-73454İstismar yok | Security Advisory 0165arista networks · eos · CWE-77 | Yüksek8,6 | — | %0,3 | 16 Eyl 2026 |
37İzleyin | CVE-2026-73461İstismar yok | Security Advisory 0163arista networks · eos · CWE-266 | Kritik9,4 | — | %0,3 | 16 Eyl 2026 |
34İzleyin | CVE-2026-73464İstismar yok | Security Advisory 0166arista networks · eos · CWE-94 | Yüksek8,7 | — | %0,6 | 16 Eyl 2026 |
30İzleyin | CVE-2026-80225İstismar yok | Possible degradation of service from continuous queries on the same TCP/DoT connectionnlnetlabs · unbound · CWE-770 | Yüksek7,5 | — | %0,4 | 16 Eyl 2026 |
30İzleyin | CVE-2026-81634İstismar yok | Possible heap buffer overflow during DNSSEC canonicalizationnlnetlabs · unbound · CWE-122 | Yüksek7,5 | — | %0,4 | 16 Eyl 2026 |
36İzleyin | CVE-2026-81642Kavram kanıtı | Heap buffer overflow and possible Remote Code Execution when digesting DNSKEYnlnetlabs · unbound · CWE-122 | Kritik9,1 | — | %0,9 | 16 Eyl 2026 |
39İzleyin | CVE-2026-82311İstismar yok | Apache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always falseapache · apache-airflow-providers-fab · CWE-613 | Kritik9,8 | — | %0,9 | 16 Eyl 2026 |
33İzleyin | CVE-2026-82717İstismar yok | CNAME synthesis could lead to heap corruptionnlnetlabs · unbound · CWE-122 | Yüksek8,4 | — | %0,7 | 16 Eyl 2026 |
30İzleyin | CVE-2026-85501İstismar yok | Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSECnlnetlabs · unbound · CWE-770 | Yüksek7,5 | — | %0,4 | 16 Eyl 2026 |
36İzleyin | CVE-2026-86462İstismar yok | Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessionsapache · apache-airflow-providers-fab · CWE-613 | Kritik9,1 | — | %0,8 | 16 Eyl 2026 |
35İzleyin | CVE-2026-89774İstismar yok | Bluetooth: SCO: hold sk properly in sco_conn_readylinux · linux | Yüksek8,8 | — | %0,4 | 16 Eyl 2026 |
30İzleyin | CVE-2026-14917İstismar yok | Kong API Gateway Enterprise: SAML Authentication bypasskong · kong enterprise gateway · CWE-288 | Yüksek7,7 | — | %0,7 | 16 Eyl 2026 |
30İzleyin | CVE-2026-59739İstismar yok | Apache ZooKeeper: Information disclosure via SetWatches reconnect replayapache · zookeeper · CWE-862 | Yüksek7,5 | — | %0,5 | 16 Eyl 2026 |
30İzleyin | CVE-2026-59969İstismar yok | Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS modeapache · zookeeper · CWE-297 | Yüksek7,5 | — | %0,3 | 16 Eyl 2026 |
28İzleyin | CVE-2026-73435İstismar yok | Security Advisory 0171arista networks · eos · CWE-345 | Yüksek7,0 | — | %0,1 | 16 Eyl 2026 |
28İzleyin | CVE-2026-73438İstismar yok | Security Advisory 0172arista networks · eos · CWE-617 | Yüksek7,0 | — | %0,2 | 16 Eyl 2026 |
38İzleyin | CVE-2026-73453İstismar yok | Security Advisory 0174arista networks · eos · CWE-94 | Kritik9,5 | — | %0,6 | 16 Eyl 2026 |
35İzleyin | CVE-2026-73455İstismar yok | Security Advisory 0173arista networks · eos · CWE-130 | Yüksek8,9 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-73468İstismar yok | Security Advisory 0175arista networks · eos · CWE-670 | Yüksek7,1 | — | %0,2 | 16 Eyl 2026 |
36İzleyin | CVE-2026-76186İstismar yok | Apache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identityapache · apache-airflow-providers-keycloak · CWE-565 | Kritik9,1 | — | %0,8 | 16 Eyl 2026 |
39İzleyin | CVE-2026-76187İstismar yok | Apache Airflow Keycloak provider: Any realm client's credentials mint an Airflow session JWTapache · apache-airflow-providers-keycloak · CWE-287 | Kritik9,8 | — | %0,9 | 16 Eyl 2026 |
30İzleyin | CVE-2026-79993İstismar yok | Apache ZooKeeper: Missing ACL check on deleteContainer opcode allows unauthorized deletion of any empty persistent/container znodeapache · zookeeper · CWE-862 | Yüksek7,5 | — | %0,6 | 16 Eyl 2026 |
28İzleyin | CVE-2026-82310İstismar yok | Apache Airflow FAB provider: FAB auth manager: deactivated users retain and renew Core API JWT accessapache · apache-airflow-providers-fab · CWE-613 | Yüksek7,2 | — | %1,0 | 16 Eyl 2026 |
28İzleyin | CVE-2026-85628İstismar yok | Cleartext Transmission of Sensitive Information in the Pairing Process vulnerabilityfermax electronica s.a.u. · duoxme · CWE-319 | Yüksek7,0 | — | %0,0 | 16 Eyl 2026 |
32İzleyin | CVE-2026-86466İstismar yok | Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validatedapache · apache-airflow-providers-fab · CWE-346 | Yüksek8,1 | — | %0,3 | 16 Eyl 2026 |
30İzleyin | CVE-2026-86474İstismar yok | Improper Certificate Validation in the Firmware Download vulnerabilityfermax electronica s.a.u. · duox plus monitor firmware (veo wi-fi range) · CWE-295 | Yüksek7,7 | — | %0,1 | 16 Eyl 2026 |
35İzleyin | CVE-2026-86792İstismar yok | Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configurationapache · apache-airflow-providers-apache-kafka · CWE-470 | Yüksek8,8 | — | %1,1 | 16 Eyl 2026 |
30İzleyin | CVE-2025-14871İstismar yok | Allocation of Resources Without Limits or Throttling in GitLabgitlab · gitlab · CWE-770 | Yüksek7,5 | — | %0,5 | 16 Eyl 2026 |
30İzleyin | CVE-2026-14916İstismar yok | Kong API Gateway Enterprise: JWT Algorithm-Confusionkong · kong enteprise gateway · CWE-241 | Yüksek7,7 | — | %0,6 | 16 Eyl 2026 |
34İzleyin | CVE-2026-86106İstismar yok | Security Advisory 0179arista networks · velocloud edge · CWE-306 | Yüksek8,7 | — | %0,3 | 16 Eyl 2026 |
32İzleyin | CVE-2026-86107İstismar yok | Security Advisory 0180arista networks · velocloud · CWE-787 | Yüksek8,2 | — | %0,3 | 16 Eyl 2026 |
30İzleyin | CVE-2026-86585İstismar yok | Improper Verification of the Firmware Signature vulnerabilityfermax electronica s.a.u. · duox plus monitor firmware (veo wi-fi range) · CWE-347 | Yüksek7,7 | — | %0,1 | 16 Eyl 2026 |
35İzleyin | CVE-2026-8462İstismar yok | OpenMeter SQL Injection in ClickHouse-backed Meter Definitionsopenmeter · openmeter · CWE-89 | Yüksek8,9 | — | %0,5 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92456İstismar yok | yshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration Endpointsguchengwuyue · yshop-crm · CWE-862 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92457İstismar yok | yshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoiceguchengwuyue · yshop-crm · CWE-862 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92459İstismar yok | yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpointguchengwuyue · yshop-crm · CWE-862 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92460İstismar yok | yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listingguchengwuyue · yshop-crm · CWE-862 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92462İstismar yok | yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStepguchengwuyue · yshop-crm · CWE-862 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92463İstismar yok | yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listingguchengwuyue · yshop-crm · CWE-862 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
30İzleyin | CVE-2026-92465İstismar yok | WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection vulnerabilitythemeum · wp mega menu · CWE-89 | Yüksek7,6 | — | %0,3 | 16 Eyl 2026 |
37İzleyin | CVE-2026-89775İstismar yok | KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluationlinux · linux | Kritik9,3 | — | %0,2 | 16 Eyl 2026 |
35İzleyin | CVE-2026-89777İstismar yok | vfio/pci: clear vdev->msi_perm after freeing it on init failurelinux · linux | Yüksek8,8 | — | %0,1 | 16 Eyl 2026 |
39İzleyin | CVE-2026-89778İstismar yok | isofs: fix out-of-bounds page array access on empty zisofs blocklinux · linux | Kritik9,8 | — | %0,6 | 16 Eyl 2026 |
36İzleyin | CVE-2026-89779İstismar yok | fs/ntfs3: validate ef->size covers the record's name and valuelinux · linux | Kritik9,1 | — | %0,6 | 16 Eyl 2026 |
33İzleyin | CVE-2026-89781İstismar yok | fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()linux · linux | Yüksek8,4 | — | %0,1 | 16 Eyl 2026 |
33İzleyin | CVE-2026-89782İstismar yok | fs/ntfs3: reject restart table growth beyond U16_MAX entrieslinux · linux | Yüksek8,4 | — | %0,1 | 16 Eyl 2026 |
39İzleyin | CVE-2026-89783İstismar yok | xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is fulllinux · linux | Kritik9,8 | — | %0,7 | 16 Eyl 2026 |
36İzleyin | CVE-2026-89786İstismar yok | ext4: fix out-of-bounds read in ext4_read_inline_dir()linux · linux | Kritik9,1 | — | %0,6 | 16 Eyl 2026 |
39İzleyin | CVE-2026-89788İstismar yok | ksmbd: fix tree connection use-after-free in smb2_tree_connect()linux · linux | Kritik9,8 | — | %0,6 | 16 Eyl 2026 |
31İzleyin | CVE-2026-89789İstismar yok | gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-freelinux · linux | Yüksek7,8 | — | %0,1 | 16 Eyl 2026 |
31İzleyin | CVE-2026-89791İstismar yok | perf: Fix use-after-free when perf mmap() revival races with the last munmap()linux · linux | Yüksek7,8 | — | %0,1 | 16 Eyl 2026 |
28İzleyin | CVE-2026-89792İstismar yok | ksmbd: prevent out-of-bounds reads in share config responseslinux · linux | Yüksek7,1 | — | %0,1 | 16 Eyl 2026 |
34İzleyin | CVE-2026-19535İstismar yok | Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advanadvantech · eki-1242ieims · CWE-352 | Yüksek8,6 | — | %0,2 | 16 Eyl 2026 |
34İzleyin | CVE-2026-73163İstismar yok | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulneraadvantech · eki-1242ieims · CWE-78 | Yüksek8,6 | — | %1,1 | 16 Eyl 2026 |
34İzleyin | CVE-2026-73164İstismar yok | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulneraadvantech · eki-1242ieims · CWE-78 | Yüksek8,6 | — | %1,1 | 16 Eyl 2026 |
34İzleyin | CVE-2026-73165İstismar yok | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulneraadvantech · eki-1242ieims · CWE-78 | Yüksek8,6 | — | %1,1 | 16 Eyl 2026 |
34İzleyin | CVE-2026-73166İstismar yok | Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management inteadvantech · eki-1242ieims · CWE-94 | Yüksek8,6 | — | %0,7 | 16 Eyl 2026 |
34İzleyin | CVE-2026-73167İstismar yok | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulneraadvantech · eki-1242ieims · CWE-78 | Yüksek8,6 | — | %1,1 | 16 Eyl 2026 |
34İzleyin | CVE-2026-73170İstismar yok | Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import wadvantech · eki-1242ieims · CWE-94 | Yüksek8,6 | — | %0,5 | 16 Eyl 2026 |
34İzleyin | CVE-2026-73171İstismar yok | Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKadvantech · eki-1242ieims · CWE-73 | Yüksek8,6 | — | %0,5 | 16 Eyl 2026 |
38İzleyin | CVE-2026-73172İstismar yok | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulneraadvantech · eki-1242ieims · CWE-78 | Kritik9,3 | — | %2,1 | 16 Eyl 2026 |
35İzleyin | CVE-2026-73173İstismar yok | Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol oadvantech · eki-1242ieims · CWE-306 | Yüksek8,8 | — | %0,7 | 16 Eyl 2026 |
34İzleyin | CVE-2026-73174İstismar yok | Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocoadvantech · eki-1242ieims · CWE-319 | Yüksek8,7 | — | %0,1 | 16 Eyl 2026 |
- CVE-2026-7655028İzleyin
WP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path Traversal
YüksekCVSS 7,2İstismar yokEPSS %0unknown · wp import export lite16 Eyl 2026
- CVE-2026-7655128İzleyin
WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP Function
YüksekCVSS 7,2İstismar yokEPSS %0unknown · wp import export lite16 Eyl 2026
- CVE-2026-7655235İzleyin
WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import
YüksekCVSS 8,8İstismar yokEPSS %0unknown · wp import export lite16 Eyl 2026
- CVE-2026-7655527İzleyin
WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal
OrtaCVSS 6,8Kavram kanıtıEPSS %0unknown · wp import export lite16 Eyl 2026
- CVE-2026-7847234İzleyin
Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated SQLi via 'sort' Parameter
YüksekCVSS 8,6İstismar yokEPSS %0unknown · ni woocommerce sales report16 Eyl 2026
- CVE-2026-8482935İzleyin
Optimole < 4.2.12 - Unauthenticated Stored XSS via Srcset Descriptor Parameter
YüksekCVSS 8,8İstismar yokEPSS %0unknown · optimole16 Eyl 2026
- CVE-2026-8553032İzleyin
GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch
YüksekCVSS 8,1İstismar yokEPSS %0unknown · givewp16 Eyl 2026
- CVE-2026-8556928İzleyin
Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassification
YüksekCVSS 7,2İstismar yokEPSS %0unknown · tutor lms16 Eyl 2026
- CVE-2026-8644428İzleyin
LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter
YüksekCVSS 7,1İstismar yokEPSS %0unknown · learnpress16 Eyl 2026
- CVE-2026-1924828İzleyin
Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt
YüksekCVSS 7,1İstismar yokEPSS %0qt · qt16 Eyl 2026
- CVE-2026-1985719İzleyin
Formidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML Token
OrtaCVSS 4,8İstismar yokEPSS %0unknown · formidable forms16 Eyl 2026
- CVE-2026-116830İzleyin
Allocation of Resources Without Limits or Throttling in GitLab
YüksekCVSS 7,5İstismar yokEPSS %0gitlab · gitlab16 Eyl 2026
- CVE-2026-7344737İzleyin
Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request
KritikCVSS 9,4İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2026-7970834İzleyin
Incorrect Authorization in GitLab
YüksekCVSS 8,5İstismar yokEPSS %0gitlab · gitlab16 Eyl 2026
- CVE-2026-2754639İzleyin
Authentication Bypass in _account_log
KritikCVSS 9,8İstismar yokEPSS %1pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2754736İzleyin
Command Injection in /index.php/ajax/get_iodd_menu_info
YüksekCVSS 8,8İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2754836İzleyin
Command Injection in /index.php/ajax/get_iodd_port_info
YüksekCVSS 8,8İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2754936İzleyin
Command Injection in /index.php/attached_devices_tab/do_upload
YüksekCVSS 8,8İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2755036İzleyin
Command Injection in Field_Shadow_Password Class
YüksekCVSS 8,8İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2755136İzleyin
Command Injection in /index.php/ajax/parameterManage
YüksekCVSS 8,8İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2755232İzleyin
Unauthorized IODD File Upload due to Improper Authorization
YüksekCVSS 8,1İstismar yokEPSS %0pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2755436İzleyin
Command Injection in /index.php/ajax/save_iodd_parameters
YüksekCVSS 8,8İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2755535İzleyin
Local File Inclusion in /index.php/ajax/get_iodd_port_info
YüksekCVSS 8,8İstismar yokEPSS %0pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2755635İzleyin
Local File Inclusion in /index.php/ajax/save_iodd_parameters
YüksekCVSS 8,8İstismar yokEPSS %0pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2755730İzleyin
Path Traversal in /index.php/view_uploaded_iodd_file
YüksekCVSS 7,5İstismar yokEPSS %0pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2755836İzleyin
Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files
YüksekCVSS 8,8İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2755936İzleyin
Command Injection via GET in /api/status/data
YüksekCVSS 8,8İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2756029İzleyin
Command Injection via DELETE in /api/status/data
YüksekCVSS 7,2İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2756129İzleyin
Command Injection via GET in /api/iodd/config
YüksekCVSS 7,2İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2756229İzleyin
Command Injection via PUT in /api/iodd/config
YüksekCVSS 7,2İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2756329İzleyin
Command Injection via GET in /api/datastorage/data
YüksekCVSS 7,2İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2756429İzleyin
Command Injection via PUT in /api/datastorage/data
YüksekCVSS 7,2İstismar yokEPSS %2pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-2756539İzleyin
Remote code execution via uploading a malicious IODD file
KritikCVSS 9,8İstismar yokEPSS %0pepperl+fuchs · ice2-8iol1-g65l-v1d16 Eyl 2026
- CVE-2026-8440834İzleyin
QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC whe
YüksekCVSS 8,7İstismar yokEPSS %0qualitysoft corporation · qnd premium16 Eyl 2026
- CVE-2026-8826334İzleyin
XikeStor Layer3 switches miss authentication for downloading configuration data.
YüksekCVSS 8,7İstismar yokEPSS %0xikestor · sks8310-8x16 Eyl 2026
- CVE-2026-9235534İzleyin
In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to
YüksekCVSS 8,7İstismar yokEPSS %0octopus deploy · octopus server16 Eyl 2026
- CVE-2026-7343930İzleyin
Security Advisory 0164
YüksekCVSS 7,7İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2026-7345434İzleyin
Security Advisory 0165
YüksekCVSS 8,6İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2026-7346137İzleyin
Security Advisory 0163
KritikCVSS 9,4İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2026-7346434İzleyin
Security Advisory 0166
YüksekCVSS 8,7İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2026-8022530İzleyin
Possible degradation of service from continuous queries on the same TCP/DoT connection
YüksekCVSS 7,5İstismar yokEPSS %0nlnetlabs · unbound16 Eyl 2026
- CVE-2026-8163430İzleyin
Possible heap buffer overflow during DNSSEC canonicalization
YüksekCVSS 7,5İstismar yokEPSS %0nlnetlabs · unbound16 Eyl 2026
- CVE-2026-8164236İzleyin
Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
KritikCVSS 9,1Kavram kanıtıEPSS %0nlnetlabs · unbound16 Eyl 2026
- CVE-2026-8231139İzleyin
Apache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always false
KritikCVSS 9,8İstismar yokEPSS %0apache · apache-airflow-providers-fab16 Eyl 2026
- CVE-2026-8271733İzleyin
CNAME synthesis could lead to heap corruption
YüksekCVSS 8,4İstismar yokEPSS %0nlnetlabs · unbound16 Eyl 2026
- CVE-2026-8550130İzleyin
Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC
YüksekCVSS 7,5İstismar yokEPSS %0nlnetlabs · unbound16 Eyl 2026
- CVE-2026-8646236İzleyin
Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessions
KritikCVSS 9,1İstismar yokEPSS %0apache · apache-airflow-providers-fab16 Eyl 2026
- CVE-2026-8977435İzleyin
Bluetooth: SCO: hold sk properly in sco_conn_ready
YüksekCVSS 8,8İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-1491730İzleyin
Kong API Gateway Enterprise: SAML Authentication bypass
YüksekCVSS 7,7İstismar yokEPSS %0kong · kong enterprise gateway16 Eyl 2026
- CVE-2026-5973930İzleyin
Apache ZooKeeper: Information disclosure via SetWatches reconnect replay
YüksekCVSS 7,5İstismar yokEPSS %0apache · zookeeper16 Eyl 2026
- CVE-2026-5996930İzleyin
Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode
YüksekCVSS 7,5İstismar yokEPSS %0apache · zookeeper16 Eyl 2026
- CVE-2026-7343528İzleyin
Security Advisory 0171
YüksekCVSS 7,0İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2026-7343828İzleyin
Security Advisory 0172
YüksekCVSS 7,0İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2026-7345338İzleyin
Security Advisory 0174
KritikCVSS 9,5İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2026-7345535İzleyin
Security Advisory 0173
YüksekCVSS 8,9İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2026-7346828İzleyin
Security Advisory 0175
YüksekCVSS 7,1İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2026-7618636İzleyin
Apache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identity
KritikCVSS 9,1İstismar yokEPSS %0apache · apache-airflow-providers-keycloak16 Eyl 2026
- CVE-2026-7618739İzleyin
Apache Airflow Keycloak provider: Any realm client's credentials mint an Airflow session JWT
KritikCVSS 9,8İstismar yokEPSS %0apache · apache-airflow-providers-keycloak16 Eyl 2026
- CVE-2026-7999330İzleyin
Apache ZooKeeper: Missing ACL check on deleteContainer opcode allows unauthorized deletion of any empty persistent/container znode
YüksekCVSS 7,5İstismar yokEPSS %0apache · zookeeper16 Eyl 2026
- CVE-2026-8231028İzleyin
Apache Airflow FAB provider: FAB auth manager: deactivated users retain and renew Core API JWT access
YüksekCVSS 7,2İstismar yokEPSS %1apache · apache-airflow-providers-fab16 Eyl 2026
- CVE-2026-8562828İzleyin
Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability
YüksekCVSS 7,0İstismar yokEPSS %0fermax electronica s.a.u. · duoxme16 Eyl 2026
- CVE-2026-8646632İzleyin
Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validated
YüksekCVSS 8,1İstismar yokEPSS %0apache · apache-airflow-providers-fab16 Eyl 2026
- CVE-2026-8647430İzleyin
Improper Certificate Validation in the Firmware Download vulnerability
YüksekCVSS 7,7İstismar yokEPSS %0fermax electronica s.a.u. · duox plus monitor firmware (veo wi-fi range)16 Eyl 2026
- CVE-2026-8679235İzleyin
Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configuration
YüksekCVSS 8,8İstismar yokEPSS %1apache · apache-airflow-providers-apache-kafka16 Eyl 2026
- CVE-2025-1487130İzleyin
Allocation of Resources Without Limits or Throttling in GitLab
YüksekCVSS 7,5İstismar yokEPSS %0gitlab · gitlab16 Eyl 2026
- CVE-2026-1491630İzleyin
Kong API Gateway Enterprise: JWT Algorithm-Confusion
YüksekCVSS 7,7İstismar yokEPSS %0kong · kong enteprise gateway16 Eyl 2026
- CVE-2026-8610634İzleyin
Security Advisory 0179
YüksekCVSS 8,7İstismar yokEPSS %0arista networks · velocloud edge16 Eyl 2026
- CVE-2026-8610732İzleyin
Security Advisory 0180
YüksekCVSS 8,2İstismar yokEPSS %0arista networks · velocloud16 Eyl 2026
- CVE-2026-8658530İzleyin
Improper Verification of the Firmware Signature vulnerability
YüksekCVSS 7,7İstismar yokEPSS %0fermax electronica s.a.u. · duox plus monitor firmware (veo wi-fi range)16 Eyl 2026
- CVE-2026-846235İzleyin
OpenMeter SQL Injection in ClickHouse-backed Meter Definitions
YüksekCVSS 8,9İstismar yokEPSS %0openmeter · openmeter16 Eyl 2026
- CVE-2026-9245628İzleyin
yshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration Endpoints
YüksekCVSS 7,1İstismar yokEPSS %0guchengwuyue · yshop-crm16 Eyl 2026
- CVE-2026-9245728İzleyin
yshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoice
YüksekCVSS 7,1İstismar yokEPSS %0guchengwuyue · yshop-crm16 Eyl 2026
- CVE-2026-9245928İzleyin
yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpoint
YüksekCVSS 7,1İstismar yokEPSS %0guchengwuyue · yshop-crm16 Eyl 2026
- CVE-2026-9246028İzleyin
yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listing
YüksekCVSS 7,1İstismar yokEPSS %0guchengwuyue · yshop-crm16 Eyl 2026
- CVE-2026-9246228İzleyin
yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStep
YüksekCVSS 7,1İstismar yokEPSS %0guchengwuyue · yshop-crm16 Eyl 2026
- CVE-2026-9246328İzleyin
yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listing
YüksekCVSS 7,1İstismar yokEPSS %0guchengwuyue · yshop-crm16 Eyl 2026
- CVE-2026-9246530İzleyin
WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0themeum · wp mega menu16 Eyl 2026
- CVE-2026-8977537İzleyin
KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation
KritikCVSS 9,3İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-8977735İzleyin
vfio/pci: clear vdev->msi_perm after freeing it on init failure
YüksekCVSS 8,8İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-8977839İzleyin
isofs: fix out-of-bounds page array access on empty zisofs block
KritikCVSS 9,8İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-8977936İzleyin
fs/ntfs3: validate ef->size covers the record's name and value
KritikCVSS 9,1İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-8978133İzleyin
fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()
YüksekCVSS 8,4İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-8978233İzleyin
fs/ntfs3: reject restart table growth beyond U16_MAX entries
YüksekCVSS 8,4İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-8978339İzleyin
xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full
KritikCVSS 9,8İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-8978636İzleyin
ext4: fix out-of-bounds read in ext4_read_inline_dir()
KritikCVSS 9,1İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-8978839İzleyin
ksmbd: fix tree connection use-after-free in smb2_tree_connect()
KritikCVSS 9,8İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-8978931İzleyin
gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-8979131İzleyin
perf: Fix use-after-free when perf mmap() revival races with the last munmap()
YüksekCVSS 7,8İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-8979228İzleyin
ksmbd: prevent out-of-bounds reads in share config responses
YüksekCVSS 7,1İstismar yokEPSS %0linux · linux16 Eyl 2026
- CVE-2026-1953534İzleyin
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advan
YüksekCVSS 8,6İstismar yokEPSS %0advantech · eki-1242ieims16 Eyl 2026
- CVE-2026-7316334İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera
YüksekCVSS 8,6İstismar yokEPSS %1advantech · eki-1242ieims16 Eyl 2026
- CVE-2026-7316434İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera
YüksekCVSS 8,6İstismar yokEPSS %1advantech · eki-1242ieims16 Eyl 2026
- CVE-2026-7316534İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera
YüksekCVSS 8,6İstismar yokEPSS %1advantech · eki-1242ieims16 Eyl 2026
- CVE-2026-7316634İzleyin
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management inte
YüksekCVSS 8,6İstismar yokEPSS %0advantech · eki-1242ieims16 Eyl 2026
- CVE-2026-7316734İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera
YüksekCVSS 8,6İstismar yokEPSS %1advantech · eki-1242ieims16 Eyl 2026
- CVE-2026-7317034İzleyin
Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import w
YüksekCVSS 8,6İstismar yokEPSS %0advantech · eki-1242ieims16 Eyl 2026
- CVE-2026-7317134İzleyin
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EK
YüksekCVSS 8,6İstismar yokEPSS %0advantech · eki-1242ieims16 Eyl 2026
- CVE-2026-7317238İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera
KritikCVSS 9,3İstismar yokEPSS %2advantech · eki-1242ieims16 Eyl 2026
- CVE-2026-7317335İzleyin
Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol o
YüksekCVSS 8,8İstismar yokEPSS %0advantech · eki-1242ieims16 Eyl 2026
- CVE-2026-7317434İzleyin
Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protoco
YüksekCVSS 8,7İstismar yokEPSS %0advantech · eki-1242ieims16 Eyl 2026