İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.963 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 47 / 80

  • CVE-2026-73173
    35İzleyin

    Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol o

    YüksekCVSS 8,8İstismar yokEPSS %0

    advantech · eki-1242ieims16 Eyl 2026

  • CVE-2026-73174
    34İzleyin

    Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protoco

    YüksekCVSS 8,7İstismar yokEPSS %0

    advantech · eki-1242ieims16 Eyl 2026

  • CVE-2026-73175
    28İzleyin

    Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-

    YüksekCVSS 7,1İstismar yokEPSS %0

    advantech · eki-1242ieims16 Eyl 2026

  • CVE-2026-73176
    34İzleyin

    Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera

    YüksekCVSS 8,6İstismar yokEPSS %1

    advantech · eki-1242ieims16 Eyl 2026

  • CVE-2026-88817
    34İzleyin

    Privilege escalation via legacy access group creation endpoint

    YüksekCVSS 8,7İstismar yokEPSS %0

    curiosity gmbh · curiosity workspace16 Eyl 2026

  • CVE-2026-89793
    31İzleyin

    ublk: clear VM_MAYWRITE on read-only ublk char device mmap

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-73177
    34İzleyin

    Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of

    YüksekCVSS 8,6İstismar yokEPSS %0

    advantech · eki-1242ieims16 Eyl 2026

  • CVE-2026-89028
    32İzleyin

    MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX

    YüksekCVSS 8,2İstismar yokEPSS %0

    mikrotik · routeros16 Eyl 2026

  • CVE-2026-91843
    39İzleyin

    Stack overflow in login process to the Security Management and Log Servers

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    checkpoint · quantum security management16 Eyl 2026

  • CVE-2026-92122
    35İzleyin

    Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called through the proxy created when a sandboxed

    YüksekCVSS 8,8İstismar yokEPSS %0

    jenkins · script security16 Eyl 2026

  • CVE-2026-92123
    35İzleyin

    Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations performed on a null receiver (method calls, p

    YüksekCVSS 8,8İstismar yokEPSS %0

    jenkins · script security16 Eyl 2026

  • CVE-2026-92124
    35İzleyin

    Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy will perform with the elements it reads from a

    YüksekCVSS 8,8İstismar yokEPSS %0

    jenkins · script security16 Eyl 2026

  • CVE-2026-92125
    35İzleyin

    Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the @GroovyASTTransformationClass annotation, allowing atta

    YüksekCVSS 8,8İstismar yokEPSS %0

    jenkins · script security16 Eyl 2026

  • CVE-2026-92126
    34İzleyin

    Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder annotations whose builderStrategy member names an

    YüksekCVSS 8,5İstismar yokEPSS %0

    jenkins · script security16 Eyl 2026

  • CVE-2026-92127
    32İzleyin

    Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration when

    YüksekCVSS 8,0İstismar yokEPSS %0

    jenkins · script security16 Eyl 2026

  • CVE-2026-92128
    30İzleyin

    Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of the

    YüksekCVSS 7,5İstismar yokEPSS %0

    jenkins · script security16 Eyl 2026

  • CVE-2026-92129
    30İzleyin

    Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added dynamically to

    YüksekCVSS 7,5İstismar yokEPSS %0

    jenkins · script security16 Eyl 2026

  • CVE-2026-92134
    32İzleyin

    Jenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier does not validate the analysis results ID when a job configuration is submitte

    YüksekCVSS 8,0İstismar yokEPSS %0

    jenkins project · jenkins warnings plugin16 Eyl 2026

  • CVE-2026-92135
    32İzleyin

    Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results ID when a job configuration is submitted thr

    YüksekCVSS 8,0İstismar yokEPSS %0

    jenkins project · jenkins coverage plugin16 Eyl 2026

  • CVE-2026-92136
    32İzleyin

    Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resultin

    YüksekCVSS 8,0İstismar yokEPSS %0

    jenkins project · jenkins owasp dependency-check plugin16 Eyl 2026

  • CVE-2026-92137
    35İzleyin

    Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is co

    YüksekCVSS 8,8İstismar yokEPSS %0

    jenkins project · jenkins robot framework plugin16 Eyl 2026

  • CVE-2026-92466
    34İzleyin

    microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking

    YüksekCVSS 8,7İstismar yokEPSS %0

    zlt2000 · microservices-platform16 Eyl 2026

  • CVE-2026-92467
    34İzleyin

    microservices-platform through 6.0.0 Unverified Password Change via /users/password

    YüksekCVSS 8,7İstismar yokEPSS %0

    zlt2000 · microservices-platform16 Eyl 2026

  • CVE-2026-92468
    28İzleyin

    microservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-center

    YüksekCVSS 7,1İstismar yokEPSS %0

    zlt2000 · microservices-platform16 Eyl 2026

  • CVE-2026-92469
    28İzleyin

    microservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership Check

    YüksekCVSS 7,2İstismar yokEPSS %0

    zlt2000 · microservices-platform16 Eyl 2026

  • CVE-2026-89795
    33İzleyin

    PCI: Allow per function PCI slots to fix slot reset on s390

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89799
    31İzleyin

    bpf: Disable preemption in bpf_get_stackid

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89801
    31İzleyin

    drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89803
    31İzleyin

    drm/nouveau: unsubscribe the channel-kill event before the fence context

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89804
    35İzleyin

    drm/nouveau/dmem: fix mismatched DMA unmap size for large folios

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89805
    31İzleyin

    drm/pagemap: Fix folio allocation fallback and use-after-put

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89806
    33İzleyin

    drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89808
    31İzleyin

    drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89810
    31İzleyin

    drm/amdkfd: Fix error path at svm_migrate_copy_to_ram

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89811
    35İzleyin

    drm/amdkfd: Add TLB flush after MES queue eviction/suspension

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89814
    31İzleyin

    drm/amdgpu: clamp the isolation index for rings outside a partition

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89815
    31İzleyin

    drm/ttm: Drop tt->restore after successful restore

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89818
    28İzleyin

    drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89819
    31İzleyin

    drm/amd/display: validate plane degamma LUT size for private color prop

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89823
    31İzleyin

    drm: fix race between partial drm_dev_register() failure and ioctl

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89825
    31İzleyin

    drm/panthor: fix firmware control interface bounds checks

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89826
    28İzleyin

    drm/panthor: harden firmware build-info bounds checks

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89829
    31İzleyin

    f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89832
    31İzleyin

    f2fs: fix to clear dirty flag on folio in error path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89836
    31İzleyin

    f2fs: fix folio_nr_pages() race after put in large folio invalidate

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89838
    28İzleyin

    f2fs: limit recovery filename logging to stored length

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89840
    28İzleyin

    f2fs: validate MOVE_RANGE destination size

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89841
    31İzleyin

    f2fs: only redirty pinned folios in redirty_blocks

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89844
    35İzleyin

    scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89846
    36İzleyin

    scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89847
    39İzleyin

    scsi: qla2xxx: Avoid double completion in async IOCB timeout

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89848
    32İzleyin

    scsi: qla2xxx: Quiesce response IRQ before freeing request queue

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89849
    35İzleyin

    scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89854
    31İzleyin

    scsi: qla2xxx: Fix cs84xx use-after-free on host teardown

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89856
    33İzleyin

    scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89857
    39İzleyin

    scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89860
    35İzleyin

    scsi: qla2xxx: Initialize NVMe abort_work once at submission

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89861
    32İzleyin

    scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89863
    30İzleyin

    scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89870
    31İzleyin

    media: zoran: Avoid freeing a registered video_device twice

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89873
    31İzleyin

    media: v4l2-ctrls: validate HEVC EXT SPS RPS counts

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89875
    31İzleyin

    media: ti: vpe: quiesce overflow recovery before freeing streams

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89877
    33İzleyin

    media: saa7164: fix cleanup on resource allocation failure

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89880
    31İzleyin

    media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89882
    31İzleyin

    media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89883
    31İzleyin

    media: rc: sunxi-cir: Unregister rc device on probe failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89885
    33İzleyin

    media: platform: mtk-mdp3: Fix SCP device refcounting

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89887
    31İzleyin

    media: i2c: ov7740: fix use-after-destroy in remove

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89888
    31İzleyin

    media: i2c: ov02a10: fix endpoint parsing use-after-free

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89890
    31İzleyin

    media: go7007: defer the ALSA v4l2 put until card release

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89893
    31İzleyin

    media: cx23885: cancel NetUP CI work before teardown

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89894
    31İzleyin

    media: cx231xx: reject geometry changes while the VBI queue is busy

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89897
    30İzleyin

    media: cec: Serialize exclusive follower delivery

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89898
    35İzleyin

    media: cec: extron-da-hd-4k-plus: add sanity check

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89899
    31İzleyin

    media: cec: disable delayed work before freeing an interrupted transmit

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89902
    31İzleyin

    LoongArch: Avoid preempt count underflow without probe

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89903
    31İzleyin

    LoongArch: Do not save/restore percpu base register in rethook trampoline

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89904
    33İzleyin

    LoongArch: Fix acpi_package_ids[] array overflow

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89906
    31İzleyin

    LoongArch: BPF: Refactor jump offset calculation in tail call

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89907
    35İzleyin

    LoongArch: KVM: Validate MSI data before routing it to EIOINTC

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89908
    35İzleyin

    LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89910
    29İzleyin

    LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89911
    31İzleyin

    KVM: arm64: Correctly cap TLBI Range to the architural limit

    YüksekCVSS 7,9İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89912
    28İzleyin

    KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89913
    35İzleyin

    KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89914
    37İzleyin

    KVM: arm64: Sign-extend VA for range-based TLBI invalidation

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89915
    37İzleyin

    KVM: arm64: Remove VM-wide VNCR mapping counter

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89916
    37İzleyin

    KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89918
    37İzleyin

    KVM: arm64: Correctly handle end of VA space TLBI invalidation

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89919
    31İzleyin

    KVM: s390: keyop: use mmu_lock to read gmap->asce

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89920
    31İzleyin

    KVM: s390: Fix memory corruption by not reinjecting CK machine checks

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89922
    31İzleyin

    KVM: s390: Take srcu when importing watchpoint data

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89927
    28İzleyin

    KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89928
    35İzleyin

    KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89929
    35İzleyin

    KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89930
    37İzleyin

    KVM: nVMX: Service local TLB flushes on failed nested VM-Enter

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89932
    35İzleyin

    KVM: nVMX: Always flush vpid02 on first use

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89938
    31İzleyin

    iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89940
    31İzleyin

    iio: buffer: Tie IIO dma fence lock lifetime to the fence

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89941
    31İzleyin

    iio: buffer: Make IIO DMA fence release RCU-safe

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026