İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.963 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 48 / 80

  • CVE-2026-89942
    31İzleyin

    iio: buffer: Fix potential use-after-free in anonymous buffer release

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89943
    33İzleyin

    ASoC: loongson: Fix error handling in ACPI property parsing

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89947
    32İzleyin

    clk: meson: align gxbb_32k_clk_sel number of parents with actual count

    YüksekCVSS 8,0İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89951
    35İzleyin

    batman-adv: fix stale receive device on merged fragments

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89954
    32İzleyin

    mtd: afs: validate v2 image info bounds

    YüksekCVSS 8,0İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89957
    35İzleyin

    s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89959
    35İzleyin

    s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89960
    35İzleyin

    s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89961
    31İzleyin

    powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89965
    31İzleyin

    nvdimm/btt: reject an arena whose nfree is below the lane count

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89967
    31İzleyin

    mm/migrate_device: avoid out-of-bounds writes for compound folios

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89968
    30İzleyin

    nvmet-tcp: reject unsolicited H2CData PDUs

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89969
    39İzleyin

    nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89970
    39İzleyin

    nvmet-auth: Synchronize timeout work during SQ teardown

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89971
    30İzleyin

    nvme: skip the zoned limits update if the zone info query failed

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89972
    39İzleyin

    nvme: add missing SRCU grace period in error path

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89973
    32İzleyin

    nvme-tcp: check the data direction of a C2HData PDU

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89974
    30İzleyin

    nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89979
    31İzleyin

    ALSA: pcm: Fix race between non-atomic ops and trigger-start

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89980
    33İzleyin

    ALSA: harmony: initialize locks before requesting IRQ

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89985
    31İzleyin

    memcg: keep folio's objcg same as its node

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89986
    31İzleyin

    mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89988
    31İzleyin

    kprobes: Protect kprobe_blacklist with RCU

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89990
    39İzleyin

    ceph: lock mutex in ceph_mds_check_access()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89992
    33İzleyin

    cpuidle: dt_idle_genpd: kfree() the original name allocation

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89994
    31İzleyin

    dmaengine: fsl-edma: tracing: no ptr dereference during log output

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89995
    35İzleyin

    dma-direct: return struct page from dma_direct_alloc_from_pool()

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89997
    31İzleyin

    dm: fix resume-vs-remove race

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89998
    31İzleyin

    dm: fix race when loading and unloading a table

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-89999
    32İzleyin

    HID: wacom: validate report length in wacom_intuos_pro2_bt_irq

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90000
    35İzleyin

    HID: rmi: fix OOB access with undersized RMI reports

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90001
    31İzleyin

    HID: bpf: serialize device reference release in struct_ops destroy path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90002
    31İzleyin

    ftrace: Take trace_array reference before accessing its ftrace_ops

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90003
    31İzleyin

    futex: Prevent rcuwait use-after-free during requeue PI

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90007
    31İzleyin

    scsi: pm8001: Use rollback index when freeing MSI-X vectors

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90008
    31İzleyin

    scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90009
    31İzleyin

    scsi: bsg: Fix TOCTOU in io_uring passthrough command setup

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90010
    31İzleyin

    scsi: bsg: Cap io_uring sense copy to max_response_len

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90011
    36İzleyin

    scsi: target: iscsi: Reserve a terminator byte for the login payload

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90012
    39İzleyin

    spi: Fix DMA mapping ownership on partial map failure

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90013
    31İzleyin

    tracing: Take trace_array reference when opening options file

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90014
    31İzleyin

    tracing: Have show_event_filters/triggers files take trace array ref

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90016
    28İzleyin

    staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90017
    28İzleyin

    staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90018
    35İzleyin

    staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90022
    31İzleyin

    usb: gadget: f_midi2: fix use-after-free in string attribute show path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90025
    30İzleyin

    usb: typec: ucsi: displayport: Fix OOB altmode array index

    YüksekCVSS 7,7İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90026
    31İzleyin

    usb: typec: qcom-pmic: cancel reset_work on stop

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90027
    31İzleyin

    usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90030
    31İzleyin

    usb: dwc3: clear forceRM when issuing EndTransfer

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90032
    31İzleyin

    media: usbtv: keep device alive while ALSA card exists

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90036
    39İzleyin

    NFSD: Prevent client use-after-free during blocked-lock reaping

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90037
    39İzleyin

    NFSD: Prevent client use-after-free during close_lru reaping

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90038
    39İzleyin

    NFSD: Prevent client use-after-free during export state revocation

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90041
    35İzleyin

    HID: sony: clean up device list on probe failure

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90042
    39İzleyin

    ceph: properly decrypt filenames in vmalloc() buffers

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90043
    31İzleyin

    zram: fix slot lock bit position on big-endian 64-bit

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90044
    31İzleyin

    usb: gadget: f_fs: Fix Use-After-Free in AIO error path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90045
    31İzleyin

    USB: gadget: ffs: fix mm lifetime handling

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90046
    31İzleyin

    mm/page_alloc: don't spin_trylock() in NMI on UP

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90047
    31İzleyin

    drm/xe: Don't hand out the flat CCS storage as usable VRAM

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90048
    39İzleyin

    fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-90049
    37İzleyin

    net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()

    KritikCVSS 9,3İstismar yokEPSS %0

    linux · linux16 Eyl 2026

  • CVE-2026-18212
    30İzleyin

    Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib state

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat build of keycloak 26.416 Eyl 2026

  • CVE-2026-63671
    32İzleyin

    @nuxtjs/mdc: the URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration

    YüksekCVSS 8,1İstismar yokEPSS %0

    nuxt-content · mdc16 Eyl 2026

  • CVE-2026-74909
    32İzleyin

    Keycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segments

    YüksekCVSS 8,1İstismar yokEPSS %0

    red hat · red hat build of keycloak 26.416 Eyl 2026

  • CVE-2026-76825
    33İzleyin

    RestrictedPython: Sandbox escape via string.Formatter field resolution

    YüksekCVSS 8,4İstismar yokEPSS %0

    zopefoundation · restrictedpython16 Eyl 2026

  • CVE-2026-77403
    35İzleyin

    RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation

    YüksekCVSS 8,9İstismar yokEPSS %0

    rabbitmq · amqp091-go16 Eyl 2026

  • CVE-2026-77404
    34İzleyin

    RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection

    YüksekCVSS 8,7İstismar yokEPSS %0

    rabbitmq · amqp091-go16 Eyl 2026

  • CVE-2026-77405
    37İzleyin

    RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser

    KritikCVSS 9,4İstismar yokEPSS %0

    rabbitmq · amqp091-go16 Eyl 2026

  • CVE-2026-77406
    32İzleyin

    RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration

    YüksekCVSS 8,2İstismar yokEPSS %0

    rabbitmq · amqp091-go16 Eyl 2026

  • CVE-2026-77407
    28İzleyin

    RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields

    YüksekCVSS 7,0İstismar yokEPSS %0

    rabbitmq · amqp091-go16 Eyl 2026

  • CVE-2026-77408
    36İzleyin

    RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow

    KritikCVSS 9,1İstismar yokEPSS %0

    rabbitmq · amqp091-go16 Eyl 2026

  • CVE-2026-77409
    32İzleyin

    RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking

    YüksekCVSS 8,2İstismar yokEPSS %0

    rabbitmq · amqp091-go16 Eyl 2026

  • CVE-2026-77410
    35İzleyin

    RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation

    YüksekCVSS 8,9İstismar yokEPSS %0

    rabbitmq · amqp091-go16 Eyl 2026

  • CVE-2026-77411
    38İzleyin

    RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

    KritikCVSS 9,5İstismar yokEPSS %0

    rabbitmq · amqp091-go16 Eyl 2026

  • CVE-2026-77412
    35İzleyin

    RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client

    YüksekCVSS 8,9İstismar yokEPSS %0

    rabbitmq · amqp091-go16 Eyl 2026

  • CVE-2026-79651
    30İzleyin

    Keycloak-services: keycloak-services: unauthenticated dos via unbounded locale caching

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat build of keycloak 26.416 Eyl 2026

  • CVE-2026-82964
    35İzleyin

    Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys

    YüksekCVSS 8,8İstismar yokEPSS %0

    gen digital · avast free antivirus, avast one, avast premium security, avast ultimate, avast business security16 Eyl 2026

  • CVE-2026-84858
    35İzleyin

    Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass

    YüksekCVSS 8,8İstismar yokEPSS %0

    scada-lts · scada-lts16 Eyl 2026

  • CVE-2026-84860
    35İzleyin

    Scada-LTS DWR Authorization Bypass - Systemic

    YüksekCVSS 8,8İstismar yokEPSS %0

    scada-lts · scada-lts16 Eyl 2026

  • CVE-2026-92087
    32İzleyin

    @fastify/auth vulnerable to Authorization Bypass via order-dependent evaluation of composed auth

    YüksekCVSS 8,1İstismar yokEPSS %0

    @fastify/auth · @fastify/auth16 Eyl 2026

  • CVE-2026-92395
    36İzleyin

    @fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

    KritikCVSS 9,1İstismar yokEPSS %0

    @fastify/proxy-addr · @fastify/proxy-addr16 Eyl 2026

  • CVE-2026-92566
    35İzleyin

    DataGear through 6.0.0 Unauthenticated SSRF via HTTP Dataset Preview

    YüksekCVSS 8,8İstismar yokEPSS %0

    datageartech · datagear16 Eyl 2026

  • CVE-2026-92567
    28İzleyin

    TDuck survey form through 5.0 Unauthorized Data Modification

    YüksekCVSS 7,1İstismar yokEPSS %0

    tduckcloud · tduck-survey-form16 Eyl 2026

  • CVE-2026-92570
    28İzleyin

    reNgine through 2.2.0 Unauthorized Configuration File Read

    YüksekCVSS 7,1İstismar yokEPSS %0

    yogeshojha · rengine16 Eyl 2026

  • CVE-2026-92616
    30İzleyin

    FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritance

    YüksekCVSS 7,6İstismar yokEPSS %0

    error311 · filerise16 Eyl 2026

  • CVE-2026-40854
    34İzleyin

    Session auth bypass via cookie value in T-Mobile 5G Box IDU routers

    YüksekCVSS 8,7İstismar yokEPSS %0

    wnc · t-mobile 5g box idu16 Eyl 2026

  • CVE-2026-40855
    37İzleyin

    Command Injection in T-Mobile 5G Box IDU router via ping functionality

    KritikCVSS 9,3İstismar yokEPSS %1

    wnc · t-mobile 5g box idu16 Eyl 2026

  • CVE-2026-40856
    28İzleyin

    Config disclosure in T-Mobile 5G Box IDU routers

    YüksekCVSS 7,1İstismar yokEPSS %0

    wnc · t-mobile 5g box idu16 Eyl 2026

  • CVE-2026-40857
    33İzleyin

    CSRF token bypass in T-Mobile 5G Box IDU routers

    YüksekCVSS 8,4İstismar yokEPSS %0

    wnc · t-mobile 5g box idu16 Eyl 2026

  • CVE-2026-17526
    28İzleyin

    Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accounts

    YüksekCVSS 7,2İstismar yokEPSS %0

    red hat · red hat build of keycloak 26.416 Eyl 2026

  • CVE-2026-58146
    38İzleyin

    Unauthorized remote code execution in T-Mobile 5G Box IDU routers

    KritikCVSS 9,4İstismar yokEPSS %2

    wnc · t-mobile 5g box idu16 Eyl 2026

  • CVE-2026-58147
    37İzleyin

    Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers

    KritikCVSS 9,3İstismar yokEPSS %1

    wnc · t-mobile 5g box idu16 Eyl 2026

  • CVE-2026-19607
    21İzleyin

    Keycloak-services: keycloak-services: broker-originated username collision causes account lockout

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    red hat · red hat build of keycloak 26.416 Eyl 2026

  • CVE-2026-70416
    39İzleyin

    Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %0

    dell · objectscale16 Eyl 2026

  • CVE-2026-90999
    39İzleyin

    Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment

    KritikCVSS 9,8İstismar yokEPSS %0

    functional software, inc. · sentry seer16 Eyl 2026

  • CVE-2026-92397
    35İzleyin

    Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection

    YüksekCVSS 8,5İstismar yokEPSS %3

    ruijie · rg-ew3000gx16 Eyl 2026

  • CVE-2026-92625
    30İzleyin

    Control iD iDSecure Unauthenticated Denial of Service

    YüksekCVSS 7,5İstismar yokEPSS %0

    control id · idsecure16 Eyl 2026

  • CVE-2026-92626
    30İzleyin

    Control iD iDSecure Unauthenticated Denial of Service

    YüksekCVSS 7,5İstismar yokEPSS %0

    control id · idsecure16 Eyl 2026