Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.955 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 49 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-92397İstismar yok | Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injectionruijie · rg-ew3000gx · CWE-77 | Yüksek8,5 | — | %3,1 | 16 Eyl 2026 |
30İzleyin | CVE-2026-92625İstismar yok | Control iD iDSecure Unauthenticated Denial of Servicecontrol id · idsecure · CWE-306 | Yüksek7,5 | — | %0,6 | 16 Eyl 2026 |
30İzleyin | CVE-2026-92626İstismar yok | Control iD iDSecure Unauthenticated Denial of Servicecontrol id · idsecure · CWE-476 | Yüksek7,5 | — | %0,4 | 16 Eyl 2026 |
39İzleyin | CVE-2026-20234İstismar yok | Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilitiescisco · identity services engine · CWE-522 | Kritik9,9 | — | %0,3 | 16 Eyl 2026 |
36İzleyin | CVE-2026-20305İstismar yok | Cisco Identity Services Engine Command Injection Vulnerabilitycisco · cisco identity services engine software · CWE-78 | Kritik9,1 | — | %1,4 | 16 Eyl 2026 |
36İzleyin | CVE-2026-20306İstismar yok | Cisco Identity Services Engine Command Injection Vulnerabilitycisco · cisco identity services engine software · CWE-78 | Kritik9,1 | — | %1,3 | 16 Eyl 2026 |
39İzleyin | CVE-2026-20307İstismar yok | Cisco Identity Services Engine Remote Code Execution Vulnerabilitycisco · cisco identity services engine software · CWE-502 | Kritik9,9 | — | %0,9 | 16 Eyl 2026 |
38İzleyin | CVE-2026-20331İstismar yok | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Prcisco · cisco secure firewall adaptive security appliance (asa) software · CWE-693 | Kritik9,6 | — | %0,2 | 16 Eyl 2026 |
31İzleyin | CVE-2026-71179İstismar yok | Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('Odell · update package framework · CWE-78 | Yüksek7,8 | — | %0,5 | 16 Eyl 2026 |
31İzleyin | CVE-2026-71180İstismar yok | Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability.dell · update package framework · CWE-252 | Yüksek7,8 | — | %0,1 | 16 Eyl 2026 |
36İzleyin | CVE-2026-76420İstismar yok | Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-285 | Kritik9,0 | — | %0,3 | 16 Eyl 2026 |
30İzleyin | CVE-2026-85385İstismar yok | Concrete CMS below 9.5.4 is vulnerable to Stored XSS via User Timezone Fieldconcretecms · concrete cms · CWE-79 | Yüksek7,7 | — | %0,5 | 16 Eyl 2026 |
29İzleyin | CVE-2026-85386İstismar yok | Concrete CMS before 9.5.4 stored is vulneratble to cross-site scripting via unauthenticated XML/XSLT file upload in the Form Blockconcretecms · concrete cms · CWE-79 | Yüksek7,3 | — | %0,2 | 16 Eyl 2026 |
35İzleyin | CVE-2026-85731İstismar yok | oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)oras-project · oras-go · CWE-22 | Yüksek8,8 | — | %0,6 | 16 Eyl 2026 |
35İzleyin | CVE-2026-86358İstismar yok | Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability.dell · update package framework · CWE-121 | Yüksek8,8 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-86359İstismar yok | Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability.dell · repository manager · CWE-276 | Yüksek8,5 | — | %0,3 | 16 Eyl 2026 |
35İzleyin | CVE-2026-92398İstismar yok | Ruijie RG-EW3000GX user_list_note admin os command injectionruijie · rg-ew3000gx · CWE-77 | Yüksek8,5 | — | %3,1 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92600İstismar yok | Guns through 8.3.5 Information Disclosure via Missing Permission Checkstylefeng · guns · CWE-862 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92601İstismar yok | Guns through 8.3.5 Improper Access Control via SysNoticeControllerstylefeng · guns · CWE-862 | Yüksek7,1 | — | %0,3 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92602İstismar yok | TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URLtduckcloud · tduck-survey-form · CWE-918 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92603İstismar yok | ContiNew Admin through 4.1.0 Unauthorized Message Deletion via UserMessageControllercontinew-org · continew-admin · CWE-639 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
29İzleyin | CVE-2026-61590İstismar yok | djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUGdjust-org · djust · CWE-306 | Yüksek7,4 | — | %0,3 | 16 Eyl 2026 |
28İzleyin | CVE-2026-61598İstismar yok | Client mass-assignment of arbitrary view attributes via the default dj-model update_model handlerdjust-org · djust · CWE-915 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-47094İstismar yok | SIMAC MyPHR 1.1 IDOR Account Takeover via /api/employes/put/{id}simac · myphr · CWE-639 | Yüksek8,7 | — | %0,5 | 16 Eyl 2026 |
39İzleyin | CVE-2026-51990Kavram kanıtı | An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote attacker to execute arbitrary code via the biz_helCWE-94 | Kritik9,8 | — | %0,9 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92604İstismar yok | Scirius through 3.8.0 Arbitrary File Write via PCAP Uploadstamusnetworks · scirius · CWE-22 | Yüksek7,2 | — | %0,5 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92605İstismar yok | IRIS through 2.4.29 Unauthorized Comment Access via Object IDdfir-iris · iris-web · CWE-639 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92716İstismar yok | Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege Escalationshuffle · shuffle · CWE-639 | Yüksek8,6 | — | %0,4 | 16 Eyl 2026 |
37İzleyin | CVE-2026-92717İstismar yok | Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hubcobbr · covenant · CWE-306 | Kritik9,3 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92718İstismar yok | Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cacheprojectdiscovery · nuclei · CWE-347 | Yüksek7,0 | — | %0,1 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92719İstismar yok | Quickwit through 0.9.0 SSRF via SQS queue_url Parameterquickwit-oss · quickwit · CWE-918 | Yüksek8,7 | — | %0,4 | 16 Eyl 2026 |
37İzleyin | CVE-2026-92720İstismar yok | Kubero through 3.1.1 Unauthenticated Notifications API Accesskubero-dev · kubero · CWE-306 | Kritik9,3 | — | %0,6 | 16 Eyl 2026 |
30İzleyin | CVE-2026-38999İstismar yok | A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows attackersCWE-476 | Yüksek7,5 | — | %1,4 | 16 Eyl 2026 |
31İzleyin | CVE-2026-63325İstismar yok | Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`redocly · redocly-cli · CWE-94 | Yüksek7,8 | — | %0,2 | 16 Eyl 2026 |
39İzleyin | CVE-2026-68536İstismar yok | Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerabilityapache software foundation · apache myfaces · CWE-918 | Kritik9,8 | — | %0,4 | 16 Eyl 2026 |
36İzleyin | CVE-2026-73456İstismar yok | Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administarista networks · eos · CWE-94 | Kritik9,2 | — | %0,6 | 16 Eyl 2026 |
28İzleyin | CVE-2026-73462İstismar yok | On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacenarista networks · eos · CWE-125 | Yüksek7,1 | — | %0,2 | 16 Eyl 2026 |
34İzleyin | CVE-2026-75516İstismar yok | RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcementrabbitmq · rabbitmq-java-client · CWE-770 | Yüksek8,7 | — | %0,5 | 16 Eyl 2026 |
32İzleyin | CVE-2026-63127İstismar yok | RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discoverymodelcontextprotocol · rust-sdk · CWE-345 | Yüksek8,2 | — | %0,2 | 16 Eyl 2026 |
30İzleyin | CVE-2026-63128İstismar yok | RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-servicemodelcontextprotocol · rust-sdk · CWE-400 | Yüksek7,5 | — | %0,6 | 16 Eyl 2026 |
33İzleyin | CVE-2026-79298Kavram kanıtı | An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrarCWE-693 | Yüksek8,4 | — | %0,1 | 16 Eyl 2026 |
30İzleyin | CVE-2026-82399İstismar yok | CoreDNS: Unauthenticated memory exhaustion in custom transportscoredns · coredns · CWE-770 | Yüksek7,5 | — | %0,6 | 16 Eyl 2026 |
30İzleyin | CVE-2026-86003İstismar yok | CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCPcoredns · coredns · CWE-441 | Yüksek7,5 | — | %0,4 | 16 Eyl 2026 |
30İzleyin | CVE-2026-86043İstismar yok | Skipper: OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix CVE-2026-50197)zalando · skipper · CWE-863 | Yüksek7,5 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-82410İstismar yok | Pocketbase: Unhandled panic in worker goroutinespocketbase · pocketbase · CWE-248 | Yüksek8,7 | — | %0,5 | 16 Eyl 2026 |
30İzleyin | CVE-2026-84997İstismar yok | react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPUreactphp · http · CWE-835 | Yüksek7,5 | — | %0,6 | 16 Eyl 2026 |
28İzleyin | CVE-2026-91097Kavram kanıtı | HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilitieshp · linux imaging and printing · CWE-787 | Yüksek7,0 | — | %1,0 | 16 Eyl 2026 |
34İzleyin | CVE-2026-91098İstismar yok | HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilitieshp · linux imaging and printing · CWE-122 | Yüksek8,6 | — | %1,0 | 16 Eyl 2026 |
33İzleyin | CVE-2026-91102İstismar yok | HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilitieshp · linux imaging and printing · CWE-78 | Yüksek8,4 | — | %0,7 | 16 Eyl 2026 |
37İzleyin | CVE-2026-91104İstismar yok | HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilitieshp · linux imaging and printing · CWE-122 | Kritik9,3 | — | %1,0 | 16 Eyl 2026 |
34İzleyin | CVE-2026-91105İstismar yok | HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilitieshp · linux imaging and printing · CWE-122 | Yüksek8,6 | — | %1,0 | 16 Eyl 2026 |
37İzleyin | CVE-2026-91106İstismar yok | HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilitieshp · linux imaging and printing · CWE-122 | Kritik9,3 | — | %1,0 | 16 Eyl 2026 |
35İzleyin | CVE-2026-88064İstismar yok | Backstage: Improper input validation in TechDocs MkDocs configurationlinuxfoundation · backstage plugin-techdocs-node · CWE-20 | Yüksek8,8 | — | %1,1 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92417İstismar yok | Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereferenceCWE-404 | Yüksek7,1 | — | %0,6 | 16 Eyl 2026 |
35İzleyin | CVE-2026-92729İstismar yok | SigNoz 0.88.0 through 0.141.0 - Missing Authentication on Trace Funnel Analytics Endpointssignoz · signoz · CWE-306 | Yüksek8,8 | — | %0,5 | 16 Eyl 2026 |
36İzleyin | CVE-2025-43936İstismar yok | Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability.dell · objectscale · CWE-287 | Kritik9,1 | — | %0,4 | 16 Eyl 2026 |
39İzleyin | CVE-2025-59953İstismar yok | LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeployinternlm · lmdeploy · CWE-502 | Kritik9,8 | — | %0,8 | 16 Eyl 2026 |
32İzleyin | CVE-2026-61593İstismar yok | djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a victim-authenticated SSE sessiondjust-org · djust · CWE-352 | Yüksek8,1 | — | %0,2 | 16 Eyl 2026 |
30İzleyin | CVE-2026-61595İstismar yok | djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' datadjust-org · djust · CWE-636 | Yüksek7,7 | — | %0,3 | 16 Eyl 2026 |
40Planlayın | CVE-2026-20130İstismar yok | Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilitiescisco · identity services engine · CWE-74 | Kritik10,0 | — | %0,3 | 16 Eyl 2026 |
36İzleyin | CVE-2026-20176İstismar yok | Cisco Identity Services Engine Remote Code Execution Vulnerabilitycisco · cisco identity services engine software · CWE-77 | Kritik9,1 | — | %0,7 | 16 Eyl 2026 |
40Planlayın | CVE-2026-20192İstismar yok | Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilitiescisco · identity services engine · CWE-284 | Kritik10,0 | — | %0,4 | 16 Eyl 2026 |
36İzleyin | CVE-2026-20194İstismar yok | Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilitiescisco · cisco identity services engine software · CWE-669 | Kritik9,1 | — | %0,4 | 16 Eyl 2026 |
36İzleyin | CVE-2026-20211İstismar yok | Cisco Identity Services Engine Remote Code Execution Vulnerabilitycisco · cisco identity services engine software · CWE-502 | Kritik9,1 | — | %0,5 | 16 Eyl 2026 |
36İzleyin | CVE-2026-20237İstismar yok | Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilitiescisco · cisco identity services engine software · CWE-20 | Kritik9,1 | — | %0,3 | 16 Eyl 2026 |
39İzleyin | CVE-2026-20242İstismar yok | Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-502 | Kritik9,8 | — | %0,6 | 16 Eyl 2026 |
39İzleyin | CVE-2026-20322İstismar yok | Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access Controlcisco · cisco nexus dashboard · CWE-284 | Kritik9,9 | — | %0,2 | 16 Eyl 2026 |
39İzleyin | CVE-2026-20324İstismar yok | Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-862 | Kritik9,9 | — | %0,4 | 16 Eyl 2026 |
39İzleyin | CVE-2026-20325İstismar yok | Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Neutralization of Special Elements used in a Commandcisco · cisco nexus dashboard · CWE-77 | Kritik9,9 | — | %0,3 | 16 Eyl 2026 |
39İzleyin | CVE-2026-20326İstismar yok | Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Missing Authentication for Critical Functioncisco · cisco nexus dashboard · CWE-306 | Kritik9,8 | — | %0,3 | 16 Eyl 2026 |
39İzleyin | CVE-2026-20329Kavram kanıtı | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Excisco · cisco secure firewall adaptive security appliance (asa) software · CWE-703 | Kritik9,9 | — | %0,4 | 16 Eyl 2026 |
39İzleyin | CVE-2026-20330İstismar yok | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Imcisco · cisco secure firewall adaptive security appliance (asa) software · CWE-707 | Kritik9,9 | — | %0,3 | 16 Eyl 2026 |
36İzleyin | CVE-2026-20341İstismar yok | Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-502 | Kritik9,1 | — | %0,4 | 16 Eyl 2026 |
35İzleyin | CVE-2026-20361İstismar yok | Cisco Nexus Dashboard Software Security Hardening Release September 2026 - SQL Injectioncisco · cisco nexus dashboard · CWE-89 | Yüksek8,8 | — | %0,2 | 16 Eyl 2026 |
30İzleyin | CVE-2026-70469İstismar yok | Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requestsapache · nifi · CWE-409 | Yüksek7,5 | — | %0,6 | 16 Eyl 2026 |
40Planlayın | CVE-2026-76423İstismar yok | Cisco ISE API Authentication Bypass Vulnerabilitycisco · cisco identity services engine software · CWE-290 | Kritik10,0 | — | %0,5 | 16 Eyl 2026 |
30İzleyin | CVE-2026-76646İstismar yok | Apache MyFaces: Denial of Service via Unbounded Request Parsingapache software foundation · apache myfaces · CWE-400 | Yüksek7,5 | — | %0,5 | 16 Eyl 2026 |
28İzleyin | CVE-2026-86865İstismar yok | Tanium addressed a SQL injection vulnerability in Asset.tanium · asset · CWE-89 | Yüksek7,2 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-87024İstismar yok | Tanium addressed a SQL injection vulnerability in Asset.tanium · asset · CWE-89 | Yüksek7,2 | — | %0,4 | 16 Eyl 2026 |
35İzleyin | CVE-2026-87105İstismar yok | Tanium addressed a SQL injection vulnerability in Threat Response.tanium · threat response · CWE-89 | Yüksek8,8 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-87976İstismar yok | Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundlesapache · nifi · CWE-22 | Yüksek7,2 | — | %0,7 | 16 Eyl 2026 |
36İzleyin | CVE-2026-88592İstismar yok | kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF).CWE-345 | Kritik9,1 | — | %0,2 | 16 Eyl 2026 |
37İzleyin | CVE-2026-89082İstismar yok | HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Writehp inc · hp ac print & scan · CWE-94 | Kritik9,3 | — | %0,6 | 16 Eyl 2026 |
37İzleyin | CVE-2026-89083İstismar yok | HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Writehp inc · hp ac print & scan · CWE-94 | Kritik9,3 | — | %0,6 | 16 Eyl 2026 |
35İzleyin | CVE-2026-89084İstismar yok | HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Writehp inc · hp ac print & scan · CWE-22 | Yüksek8,8 | — | %0,7 | 16 Eyl 2026 |
40Planlayın | CVE-2026-92808İstismar yok | Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromisealtium · altium enterprise server · CWE-306 | Kritik10,0 | — | %0,5 | 16 Eyl 2026 |
39İzleyin | CVE-2025-56563İstismar yok | A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0.CWE-918 | Kritik9,8 | — | %0,3 | 16 Eyl 2026 |
30İzleyin | CVE-2025-56565İstismar yok | DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within noCWE-312 | Yüksek7,6 | — | %0,1 | 16 Eyl 2026 |
34İzleyin | CVE-2026-20135İstismar yok | Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerabilitycisco · cisco secure firewall threat defense (ftd) software · CWE-415 | Yüksek8,6 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-20154İstismar yok | Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Servicecisco · cisco secure firewall adaptive security appliance (asa) software · CWE-835 | Yüksek8,6 | — | %0,4 | 16 Eyl 2026 |
29İzleyin | CVE-2026-20222İstismar yok | Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerabilitycisco · cisco secure firewall adaptive security appliance (asa) software · CWE-401 | Yüksek7,4 | — | %0,1 | 16 Eyl 2026 |
30İzleyin | CVE-2026-20247İstismar yok | Cisco Identity Services Engine Unauthenticated SQL Injection Vulnerabilitycisco · cisco identity services engine software · CWE-89 | Yüksek7,5 | — | %0,3 | 16 Eyl 2026 |
34İzleyin | CVE-2026-20249İstismar yok | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerabilitycisco · cisco secure firewall adaptive security appliance (asa) software · CWE-704 | Yüksek8,6 | — | %0,3 | 16 Eyl 2026 |
34İzleyin | CVE-2026-20250İstismar yok | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerabcisco · cisco secure firewall adaptive security appliance (asa) software · CWE-772 | Yüksek8,6 | — | %0,5 | 16 Eyl 2026 |
36İzleyin | CVE-2026-20284İstismar yok | Cisco Identity Search Engine SXP REST API SQL Injection Vulnerabilitycisco · cisco identity services engine software · CWE-943 | Kritik9,1 | — | %0,3 | 16 Eyl 2026 |
34İzleyin | CVE-2026-20295İstismar yok | Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-789 | Yüksek8,6 | — | %0,5 | 16 Eyl 2026 |
28İzleyin | CVE-2026-20300İstismar yok | Cisco Identity Services Engine SQL Injection Vulnerabilitycisco · cisco identity services engine software · CWE-89 | Yüksek7,1 | — | %0,2 | 16 Eyl 2026 |
33İzleyin | CVE-2026-20323İstismar yok | Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-295 | Yüksek8,3 | — | %0,0 | 16 Eyl 2026 |
39İzleyin | CVE-2026-20332İstismar yok | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Imcisco · cisco secure firewall adaptive security appliance (asa) software · CWE-284 | Kritik9,9 | — | %0,3 | 16 Eyl 2026 |
35İzleyin | CVE-2026-20333İstismar yok | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incisco · cisco secure firewall adaptive security appliance (asa) software · CWE-697 | Yüksek8,8 | — | %0,3 | 16 Eyl 2026 |
- CVE-2026-9239735İzleyin
Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection
YüksekCVSS 8,5İstismar yokEPSS %3ruijie · rg-ew3000gx16 Eyl 2026
- CVE-2026-9262530İzleyin
Control iD iDSecure Unauthenticated Denial of Service
YüksekCVSS 7,5İstismar yokEPSS %0control id · idsecure16 Eyl 2026
- CVE-2026-9262630İzleyin
Control iD iDSecure Unauthenticated Denial of Service
YüksekCVSS 7,5İstismar yokEPSS %0control id · idsecure16 Eyl 2026
- CVE-2026-2023439İzleyin
Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %0cisco · identity services engine16 Eyl 2026
- CVE-2026-2030536İzleyin
Cisco Identity Services Engine Command Injection Vulnerability
KritikCVSS 9,1İstismar yokEPSS %1cisco · cisco identity services engine software16 Eyl 2026
- CVE-2026-2030636İzleyin
Cisco Identity Services Engine Command Injection Vulnerability
KritikCVSS 9,1İstismar yokEPSS %1cisco · cisco identity services engine software16 Eyl 2026
- CVE-2026-2030739İzleyin
Cisco Identity Services Engine Remote Code Execution Vulnerability
KritikCVSS 9,9İstismar yokEPSS %0cisco · cisco identity services engine software16 Eyl 2026
- CVE-2026-2033138İzleyin
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Pr
KritikCVSS 9,6İstismar yokEPSS %0cisco · cisco secure firewall adaptive security appliance (asa) software16 Eyl 2026
- CVE-2026-7117931İzleyin
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('O
YüksekCVSS 7,8İstismar yokEPSS %0dell · update package framework16 Eyl 2026
- CVE-2026-7118031İzleyin
Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability.
YüksekCVSS 7,8İstismar yokEPSS %0dell · update package framework16 Eyl 2026
- CVE-2026-7642036İzleyin
Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection Vulnerability
KritikCVSS 9,0İstismar yokEPSS %0cisco · cisco secure firewall management center (fmc)16 Eyl 2026
- CVE-2026-8538530İzleyin
Concrete CMS below 9.5.4 is vulnerable to Stored XSS via User Timezone Field
YüksekCVSS 7,7İstismar yokEPSS %0concretecms · concrete cms16 Eyl 2026
- CVE-2026-8538629İzleyin
Concrete CMS before 9.5.4 stored is vulneratble to cross-site scripting via unauthenticated XML/XSLT file upload in the Form Block
YüksekCVSS 7,3İstismar yokEPSS %0concretecms · concrete cms16 Eyl 2026
- CVE-2026-8573135İzleyin
oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)
YüksekCVSS 8,8İstismar yokEPSS %0oras-project · oras-go16 Eyl 2026
- CVE-2026-8635835İzleyin
Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %0dell · update package framework16 Eyl 2026
- CVE-2026-8635934İzleyin
Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability.
YüksekCVSS 8,5İstismar yokEPSS %0dell · repository manager16 Eyl 2026
- CVE-2026-9239835İzleyin
Ruijie RG-EW3000GX user_list_note admin os command injection
YüksekCVSS 8,5İstismar yokEPSS %3ruijie · rg-ew3000gx16 Eyl 2026
- CVE-2026-9260028İzleyin
Guns through 8.3.5 Information Disclosure via Missing Permission Check
YüksekCVSS 7,1İstismar yokEPSS %0stylefeng · guns16 Eyl 2026
- CVE-2026-9260128İzleyin
Guns through 8.3.5 Improper Access Control via SysNoticeController
YüksekCVSS 7,1İstismar yokEPSS %0stylefeng · guns16 Eyl 2026
- CVE-2026-9260228İzleyin
TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL
YüksekCVSS 7,1İstismar yokEPSS %0tduckcloud · tduck-survey-form16 Eyl 2026
- CVE-2026-9260328İzleyin
ContiNew Admin through 4.1.0 Unauthorized Message Deletion via UserMessageController
YüksekCVSS 7,1İstismar yokEPSS %0continew-org · continew-admin16 Eyl 2026
- CVE-2026-6159029İzleyin
djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUG
YüksekCVSS 7,4İstismar yokEPSS %0djust-org · djust16 Eyl 2026
- CVE-2026-6159828İzleyin
Client mass-assignment of arbitrary view attributes via the default dj-model update_model handler
YüksekCVSS 7,1İstismar yokEPSS %0djust-org · djust16 Eyl 2026
- CVE-2026-4709434İzleyin
SIMAC MyPHR 1.1 IDOR Account Takeover via /api/employes/put/{id}
YüksekCVSS 8,7İstismar yokEPSS %0simac · myphr16 Eyl 2026
- CVE-2026-5199039İzleyin
An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote attacker to execute arbitrary code via the biz_hel
KritikCVSS 9,8Kavram kanıtıEPSS %016 Eyl 2026
- CVE-2026-9260428İzleyin
Scirius through 3.8.0 Arbitrary File Write via PCAP Upload
YüksekCVSS 7,2İstismar yokEPSS %0stamusnetworks · scirius16 Eyl 2026
- CVE-2026-9260528İzleyin
IRIS through 2.4.29 Unauthorized Comment Access via Object ID
YüksekCVSS 7,1İstismar yokEPSS %0dfir-iris · iris-web16 Eyl 2026
- CVE-2026-9271634İzleyin
Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege Escalation
YüksekCVSS 8,6İstismar yokEPSS %0shuffle · shuffle16 Eyl 2026
- CVE-2026-9271737İzleyin
Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub
KritikCVSS 9,3İstismar yokEPSS %0cobbr · covenant16 Eyl 2026
- CVE-2026-9271828İzleyin
Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cache
YüksekCVSS 7,0İstismar yokEPSS %0projectdiscovery · nuclei16 Eyl 2026
- CVE-2026-9271934İzleyin
Quickwit through 0.9.0 SSRF via SQS queue_url Parameter
YüksekCVSS 8,7İstismar yokEPSS %0quickwit-oss · quickwit16 Eyl 2026
- CVE-2026-9272037İzleyin
Kubero through 3.1.1 Unauthenticated Notifications API Access
KritikCVSS 9,3İstismar yokEPSS %0kubero-dev · kubero16 Eyl 2026
- CVE-2026-3899930İzleyin
A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows attackers
YüksekCVSS 7,5İstismar yokEPSS %116 Eyl 2026
- CVE-2026-6332531İzleyin
Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`
YüksekCVSS 7,8İstismar yokEPSS %0redocly · redocly-cli16 Eyl 2026
- CVE-2026-6853639İzleyin
Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability
KritikCVSS 9,8İstismar yokEPSS %0apache software foundation · apache myfaces16 Eyl 2026
- CVE-2026-7345636İzleyin
Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administ
KritikCVSS 9,2İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2026-7346228İzleyin
On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacen
YüksekCVSS 7,1İstismar yokEPSS %0arista networks · eos16 Eyl 2026
- CVE-2026-7551634İzleyin
RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement
YüksekCVSS 8,7İstismar yokEPSS %0rabbitmq · rabbitmq-java-client16 Eyl 2026
- CVE-2026-6312732İzleyin
RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery
YüksekCVSS 8,2İstismar yokEPSS %0modelcontextprotocol · rust-sdk16 Eyl 2026
- CVE-2026-6312830İzleyin
RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service
YüksekCVSS 7,5İstismar yokEPSS %0modelcontextprotocol · rust-sdk16 Eyl 2026
- CVE-2026-7929833İzleyin
An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrar
YüksekCVSS 8,4Kavram kanıtıEPSS %016 Eyl 2026
- CVE-2026-8239930İzleyin
CoreDNS: Unauthenticated memory exhaustion in custom transports
YüksekCVSS 7,5İstismar yokEPSS %0coredns · coredns16 Eyl 2026
- CVE-2026-8600330İzleyin
CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP
YüksekCVSS 7,5İstismar yokEPSS %0coredns · coredns16 Eyl 2026
- CVE-2026-8604330İzleyin
Skipper: OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix CVE-2026-50197)
YüksekCVSS 7,5İstismar yokEPSS %0zalando · skipper16 Eyl 2026
- CVE-2026-8241034İzleyin
Pocketbase: Unhandled panic in worker goroutines
YüksekCVSS 8,7İstismar yokEPSS %0pocketbase · pocketbase16 Eyl 2026
- CVE-2026-8499730İzleyin
react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU
YüksekCVSS 7,5İstismar yokEPSS %0reactphp · http16 Eyl 2026
- CVE-2026-9109728İzleyin
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
YüksekCVSS 7,0Kavram kanıtıEPSS %1hp · linux imaging and printing16 Eyl 2026
- CVE-2026-9109834İzleyin
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
YüksekCVSS 8,6İstismar yokEPSS %1hp · linux imaging and printing16 Eyl 2026
- CVE-2026-9110233İzleyin
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
YüksekCVSS 8,4İstismar yokEPSS %0hp · linux imaging and printing16 Eyl 2026
- CVE-2026-9110437İzleyin
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
KritikCVSS 9,3İstismar yokEPSS %1hp · linux imaging and printing16 Eyl 2026
- CVE-2026-9110534İzleyin
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
YüksekCVSS 8,6İstismar yokEPSS %1hp · linux imaging and printing16 Eyl 2026
- CVE-2026-9110637İzleyin
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
KritikCVSS 9,3İstismar yokEPSS %1hp · linux imaging and printing16 Eyl 2026
- CVE-2026-8806435İzleyin
Backstage: Improper input validation in TechDocs MkDocs configuration
YüksekCVSS 8,8İstismar yokEPSS %1linuxfoundation · backstage plugin-techdocs-node16 Eyl 2026
- CVE-2026-9241728İzleyin
Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference
YüksekCVSS 7,1İstismar yokEPSS %016 Eyl 2026
- CVE-2026-9272935İzleyin
SigNoz 0.88.0 through 0.141.0 - Missing Authentication on Trace Funnel Analytics Endpoints
YüksekCVSS 8,8İstismar yokEPSS %0signoz · signoz16 Eyl 2026
- CVE-2025-4393636İzleyin
Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability.
KritikCVSS 9,1İstismar yokEPSS %0dell · objectscale16 Eyl 2026
- CVE-2025-5995339İzleyin
LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy
KritikCVSS 9,8İstismar yokEPSS %0internlm · lmdeploy16 Eyl 2026
- CVE-2026-6159332İzleyin
djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a victim-authenticated SSE session
YüksekCVSS 8,1İstismar yokEPSS %0djust-org · djust16 Eyl 2026
- CVE-2026-6159530İzleyin
djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' data
YüksekCVSS 7,7İstismar yokEPSS %0djust-org · djust16 Eyl 2026
- CVE-2026-2013040Planlayın
Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities
KritikCVSS 10,0İstismar yokEPSS %0cisco · identity services engine16 Eyl 2026
- CVE-2026-2017636İzleyin
Cisco Identity Services Engine Remote Code Execution Vulnerability
KritikCVSS 9,1İstismar yokEPSS %0cisco · cisco identity services engine software16 Eyl 2026
- CVE-2026-2019240Planlayın
Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities
KritikCVSS 10,0İstismar yokEPSS %0cisco · identity services engine16 Eyl 2026
- CVE-2026-2019436İzleyin
Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities
KritikCVSS 9,1İstismar yokEPSS %0cisco · cisco identity services engine software16 Eyl 2026
- CVE-2026-2021136İzleyin
Cisco Identity Services Engine Remote Code Execution Vulnerability
KritikCVSS 9,1İstismar yokEPSS %0cisco · cisco identity services engine software16 Eyl 2026
- CVE-2026-2023736İzleyin
Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities
KritikCVSS 9,1İstismar yokEPSS %0cisco · cisco identity services engine software16 Eyl 2026
- CVE-2026-2024239İzleyin
Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %0cisco · cisco secure firewall management center (fmc)16 Eyl 2026
- CVE-2026-2032239İzleyin
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access Control
KritikCVSS 9,9İstismar yokEPSS %0cisco · cisco nexus dashboard16 Eyl 2026
- CVE-2026-2032439İzleyin
Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability
KritikCVSS 9,9İstismar yokEPSS %0cisco · cisco secure firewall management center (fmc)16 Eyl 2026
- CVE-2026-2032539İzleyin
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Neutralization of Special Elements used in a Command
KritikCVSS 9,9İstismar yokEPSS %0cisco · cisco nexus dashboard16 Eyl 2026
- CVE-2026-2032639İzleyin
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Missing Authentication for Critical Function
KritikCVSS 9,8İstismar yokEPSS %0cisco · cisco nexus dashboard16 Eyl 2026
- CVE-2026-2032939İzleyin
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Ex
KritikCVSS 9,9Kavram kanıtıEPSS %0cisco · cisco secure firewall adaptive security appliance (asa) software16 Eyl 2026
- CVE-2026-2033039İzleyin
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Im
KritikCVSS 9,9İstismar yokEPSS %0cisco · cisco secure firewall adaptive security appliance (asa) software16 Eyl 2026
- CVE-2026-2034136İzleyin
Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution Vulnerability
KritikCVSS 9,1İstismar yokEPSS %0cisco · cisco secure firewall management center (fmc)16 Eyl 2026
- CVE-2026-2036135İzleyin
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %0cisco · cisco nexus dashboard16 Eyl 2026
- CVE-2026-7046930İzleyin
Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests
YüksekCVSS 7,5İstismar yokEPSS %0apache · nifi16 Eyl 2026
- CVE-2026-7642340Planlayın
Cisco ISE API Authentication Bypass Vulnerability
KritikCVSS 10,0İstismar yokEPSS %0cisco · cisco identity services engine software16 Eyl 2026
- CVE-2026-7664630İzleyin
Apache MyFaces: Denial of Service via Unbounded Request Parsing
YüksekCVSS 7,5İstismar yokEPSS %0apache software foundation · apache myfaces16 Eyl 2026
- CVE-2026-8686528İzleyin
Tanium addressed a SQL injection vulnerability in Asset.
YüksekCVSS 7,2İstismar yokEPSS %0tanium · asset16 Eyl 2026
- CVE-2026-8702428İzleyin
Tanium addressed a SQL injection vulnerability in Asset.
YüksekCVSS 7,2İstismar yokEPSS %0tanium · asset16 Eyl 2026
- CVE-2026-8710535İzleyin
Tanium addressed a SQL injection vulnerability in Threat Response.
YüksekCVSS 8,8İstismar yokEPSS %0tanium · threat response16 Eyl 2026
- CVE-2026-8797628İzleyin
Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles
YüksekCVSS 7,2İstismar yokEPSS %0apache · nifi16 Eyl 2026
- CVE-2026-8859236İzleyin
kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF).
KritikCVSS 9,1İstismar yokEPSS %016 Eyl 2026
- CVE-2026-8908237İzleyin
HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
KritikCVSS 9,3İstismar yokEPSS %0hp inc · hp ac print & scan16 Eyl 2026
- CVE-2026-8908337İzleyin
HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
KritikCVSS 9,3İstismar yokEPSS %0hp inc · hp ac print & scan16 Eyl 2026
- CVE-2026-8908435İzleyin
HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
YüksekCVSS 8,8İstismar yokEPSS %0hp inc · hp ac print & scan16 Eyl 2026
- CVE-2026-9280840Planlayın
Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise
KritikCVSS 10,0İstismar yokEPSS %0altium · altium enterprise server16 Eyl 2026
- CVE-2025-5656339İzleyin
A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0.
KritikCVSS 9,8İstismar yokEPSS %016 Eyl 2026
- CVE-2025-5656530İzleyin
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within no
YüksekCVSS 7,6İstismar yokEPSS %016 Eyl 2026
- CVE-2026-2013534İzleyin
Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0cisco · cisco secure firewall threat defense (ftd) software16 Eyl 2026
- CVE-2026-2015434İzleyin
Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service
YüksekCVSS 8,6İstismar yokEPSS %0cisco · cisco secure firewall adaptive security appliance (asa) software16 Eyl 2026
- CVE-2026-2022229İzleyin
Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability
YüksekCVSS 7,4İstismar yokEPSS %0cisco · cisco secure firewall adaptive security appliance (asa) software16 Eyl 2026
- CVE-2026-2024730İzleyin
Cisco Identity Services Engine Unauthenticated SQL Injection Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0cisco · cisco identity services engine software16 Eyl 2026
- CVE-2026-2024934İzleyin
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0cisco · cisco secure firewall adaptive security appliance (asa) software16 Eyl 2026
- CVE-2026-2025034İzleyin
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerab
YüksekCVSS 8,6İstismar yokEPSS %0cisco · cisco secure firewall adaptive security appliance (asa) software16 Eyl 2026
- CVE-2026-2028436İzleyin
Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability
KritikCVSS 9,1İstismar yokEPSS %0cisco · cisco identity services engine software16 Eyl 2026
- CVE-2026-2029534İzleyin
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0cisco · cisco secure firewall management center (fmc)16 Eyl 2026
- CVE-2026-2030028İzleyin
Cisco Identity Services Engine SQL Injection Vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0cisco · cisco identity services engine software16 Eyl 2026
- CVE-2026-2032333İzleyin
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass Vulnerability
YüksekCVSS 8,3İstismar yokEPSS %0cisco · cisco secure firewall management center (fmc)16 Eyl 2026
- CVE-2026-2033239İzleyin
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Im
KritikCVSS 9,9İstismar yokEPSS %0cisco · cisco secure firewall adaptive security appliance (asa) software16 Eyl 2026
- CVE-2026-2033335İzleyin
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - In
YüksekCVSS 8,8İstismar yokEPSS %0cisco · cisco secure firewall adaptive security appliance (asa) software16 Eyl 2026