İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.953 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 5 / 80

  • CVE-2026-53671
    37İzleyin

    PREVAIL: Context-write no-op in do_mem_store allows unsafe eBPF programs to pass verification

    KritikCVSS 9,3İstismar yokEPSS %0

    vbpf · prevail2 Eyl 2026

  • CVE-2026-53706
    35İzleyin

    PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs

    YüksekCVSS 8,8İstismar yokEPSS %0

    vbpf · prevail2 Eyl 2026

  • CVE-2026-77124
    30İzleyin

    Nexus Repository 3 - Script Execution Disable Setting Not Enforced

    YüksekCVSS 7,5İstismar yokEPSS %0

    sonatype · nexus repository manager2 Eyl 2026

  • CVE-2026-77125
    28İzleyin

    Nexus Repository 3 - Incorrect Authorization on Blobstore Group Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    sonatype · nexus repository manager2 Eyl 2026

  • CVE-2026-19117
    39İzleyin

    Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    delinea · secret server (on-prem)2 Eyl 2026

  • CVE-2025-15485
    32İzleyin

    Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call

    YüksekCVSS 8,2İstismar yokEPSS %0

    unknown · auto x line2 Eyl 2026

  • CVE-2025-9314
    39İzleyin

    Developer Tools <= 1.1.3 – Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · developer tools2 Eyl 2026

  • CVE-2026-84381
    32İzleyin

    HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies

    YüksekCVSS 8,1İstismar yokEPSS %0

    pydantic · httpx22 Eyl 2026

  • CVE-2026-84382
    30İzleyin

    HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)

    YüksekCVSS 7,5İstismar yokEPSS %0

    pydantic · httpx22 Eyl 2026

  • CVE-2026-78408
    31İzleyin

    Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority

    YüksekCVSS 7,9İstismar yokEPSS %0

    red hat · red hat hardened images2 Eyl 2026

  • CVE-2026-78409
    28İzleyin

    Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks

    YüksekCVSS 7,0İstismar yokEPSS %0

    red hat · red hat hardened images2 Eyl 2026

  • CVE-2026-78410
    31İzleyin

    Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection

    YüksekCVSS 7,8İstismar yokEPSS %0

    red hat · red hat hardened images2 Eyl 2026

  • CVE-2023-20576
    30İzleyin

    Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of ser

    YüksekCVSS 7,7İstismar yokEPSS %0

    amd · amd ryzen™ 3000 series desktop processors2 Eyl 2026

  • CVE-2026-84837
    31İzleyin

    Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path

    YüksekCVSS 7,8İstismar yokEPSS %1

    red hat · red hat enterprise linux 102 Eyl 2026

  • CVE-2026-84838
    31İzleyin

    Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()

    YüksekCVSS 7,8İstismar yokEPSS %1

    red hat · red hat enterprise linux 102 Eyl 2026

  • CVE-2023-20577
    29İzleyin

    A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially res

    YüksekCVSS 7,4İstismar yokEPSS %0

    amd · 2nd gen amd epyc™ processors2 Eyl 2026

  • CVE-2026-56855
    30İzleyin

    Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

    YüksekCVSS 7,5İstismar yokEPSS %0

    golang · crypto2 Eyl 2026

  • CVE-2026-78662
    30İzleyin

    Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

    YüksekCVSS 7,5İstismar yokEPSS %0

    golang · crypto2 Eyl 2026

  • CVE-2026-66786
    36İzleyin

    Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets

    KritikCVSS 9,1İstismar yokEPSS %1

    red hat · red hat advanced cluster management for kubernetes 2.172 Eyl 2026

  • CVE-2026-82524
    34İzleyin

    UnoPim File Upload RCE via TinyMCE Image Upload Endpoint

    YüksekCVSS 8,6İstismar yokEPSS %0

    unopim · unopim2 Eyl 2026

  • CVE-2026-84292
    30İzleyin

    fast-uri vulnerable to authority injection via an unvalidated port in serialize

    YüksekCVSS 7,5İstismar yokEPSS %0

    openjsf · fast-uri2 Eyl 2026

  • CVE-2026-84452
    34İzleyin

    Windows ML CLI: CORS misconfig enables localhost RCE

    YüksekCVSS 8,6İstismar yokEPSS %1

    microsoft · winml-cli2 Eyl 2026

  • CVE-2026-84394
    30İzleyin

    fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority

    YüksekCVSS 7,5İstismar yokEPSS %0

    openjsf · fast-uri3 Eyl 2026

  • CVE-2026-84851
    34İzleyin

    Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

    YüksekCVSS 8,7İstismar yokEPSS %0

    amazon · ion-c3 Eyl 2026

  • CVE-2021-38489
    32İzleyin

    HDD Password Stored In Plaintext

    YüksekCVSS 8,2İstismar yokEPSS %0

    insyde software · insydeh2o3 Eyl 2026

  • CVE-2026-3416
    30İzleyin

    Predictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event Payloads

    YüksekCVSS 7,5İstismar yokEPSS %0

    wso2 · api control plane3 Eyl 2026

  • CVE-2026-71220
    28İzleyin

    Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit

    YüksekCVSS 7,0İstismar yokEPSS %0

    redhat · enterprise linux3 Eyl 2026

  • CVE-2026-71221
    28İzleyin

    Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta

    YüksekCVSS 7,0İstismar yokEPSS %0

    redhat · enterprise linux3 Eyl 2026

  • CVE-2026-76174
    37İzleyin

    Multiple vulnerabilities in Ocsreports for OCS Inventory NG

    KritikCVSS 9,4İstismar yokEPSS %0

    ocs inventory ng · ocsreports3 Eyl 2026

  • CVE-2026-76175
    34İzleyin

    Multiple vulnerabilities in Ocsreports for OCS Inventory NG

    YüksekCVSS 8,6İstismar yokEPSS %0

    ocs inventory ng · ocsreports3 Eyl 2026

  • CVE-2026-76176
    34İzleyin

    Multiple vulnerabilities in Ocsreports for OCS Inventory NG

    YüksekCVSS 8,6İstismar yokEPSS %0

    ocs inventory ng · ocsreports3 Eyl 2026

  • CVE-2026-76177
    28İzleyin

    Multiple vulnerabilities in Ocsreports for OCS Inventory NG

    YüksekCVSS 7,1İstismar yokEPSS %0

    ocs inventory ng · ocsreports3 Eyl 2026

  • CVE-2026-76178
    36İzleyin

    Multiple vulnerabilities in Ocsreports for OCS Inventory NG

    KritikCVSS 9,2İstismar yokEPSS %0

    ocs inventory ng · ocsreports3 Eyl 2026

  • CVE-2026-76642
    34İzleyin

    util-linux libmount Privilege Escalation via Failed Mount Helper

    YüksekCVSS 8,5İstismar yokEPSS %0

    util-linux · util-linux3 Eyl 2026

  • CVE-2026-77999
    34İzleyin

    Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1

    YüksekCVSS 8,7İstismar yokEPSS %0

    j2commerce.com · j2store extension for joomla3 Eyl 2026

  • CVE-2026-78064
    35İzleyin

    Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6

    YüksekCVSS 8,8İstismar yokEPSS %0

    j2commerce.com · j2store extension for joomla3 Eyl 2026

  • CVE-2026-78065
    28İzleyin

    Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6

    YüksekCVSS 7,1İstismar yokEPSS %0

    j2commerce.com · j2store extension for joomla3 Eyl 2026

  • CVE-2026-78069
    38İzleyin

    Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6

    KritikCVSS 9,5İstismar yokEPSS %0

    j2commerce.com · j2store extension for joomla3 Eyl 2026

  • CVE-2026-78080
    37İzleyin

    Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0

    KritikCVSS 9,3İstismar yokEPSS %0

    joodb.feenders.de · joodatabase lite extension for joomla3 Eyl 2026

  • CVE-2026-79679
    28İzleyin

    Use of Weak Credentials

    YüksekCVSS 7,0İstismar yokEPSS %0

    b&r industrial automation gmbh · mapp services3 Eyl 2026

  • CVE-2026-80253
    28İzleyin

    An improper physical access control issue exists in ShizenBox2 (dev-conf).

    YüksekCVSS 7,0İstismar yokEPSS %0

    shizen connect inc. · shizenbox2 (dev-conf)3 Eyl 2026

  • CVE-2026-80254
    28İzleyin

    Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app).

    YüksekCVSS 7,1İstismar yokEPSS %0

    shizen connect inc. · shizenbox2 (edge-app)3 Eyl 2026

  • CVE-2026-80465
    35İzleyin

    A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 11 compatible) (All v

    YüksekCVSS 8,8İstismar yokEPSS %0

    siemens · mendix saml (mendix 10 compatible)3 Eyl 2026

  • CVE-2026-80732
    31İzleyin

    ata: pata_sl82c105: fix bridge revision use-after-free

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80735
    29İzleyin

    ovpn: ensure socket is owned by ovpn before deref sk_user_data

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80736
    31İzleyin

    thunderbolt: Fix bandwidth group reservation indexing

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80741
    28İzleyin

    drm/log: Fix out-of-bounds read on empty message length

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80745
    33İzleyin

    regulator: fp9931: Fix VPOS/VNEG voltage selector table

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80748
    31İzleyin

    mmc: loongson2: Fix sg iteration in data reorder functions

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80749
    28İzleyin

    drm/connector/hdmi: Fix out of bounds memory read

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80750
    33İzleyin

    pmdomain: mediatek: fix remaining %pOF after of_node_put()

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80751
    31İzleyin

    pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80752
    33İzleyin

    Input: psxpad-spi - set driver data before use

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80753
    33İzleyin

    ovpn: run deferred work on a module-owned workqueue

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-84830
    34İzleyin

    OS command injection in privileged configuration handling

    YüksekCVSS 8,6İstismar yokEPSS %1

    seppmail ag · secure email gateway3 Eyl 2026

  • CVE-2026-84831
    30İzleyin

    Mandatory MFA bypass before enrollment

    YüksekCVSS 7,7İstismar yokEPSS %0

    seppmail ag · seppmail secure email gateway (seg)3 Eyl 2026

  • CVE-2026-84832
    34İzleyin

    Unsafe deserialization in the REST interface

    YüksekCVSS 8,6İstismar yokEPSS %0

    seppmail ag · seppmail secure email gateway (seg)3 Eyl 2026

  • CVE-2026-85031
    34İzleyin

    TOTOLINK CP450 cstecgi.cgi buffer overflow

    YüksekCVSS 8,6İstismar yokEPSS %0

    totolink · cp4503 Eyl 2026

  • CVE-2026-85089
    28İzleyin

    FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory

    YüksekCVSS 7,1İstismar yokEPSS %0

    freerdp · freerdp3 Eyl 2026

  • CVE-2026-85091
    33İzleyin

    zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate

    YüksekCVSS 8,3İstismar yokEPSS %0

    zlib · zlib3 Eyl 2026

  • CVE-2026-85093
    28İzleyin

    Cheshire Cat AI Memory Collection Endpoint Information Disclosure

    YüksekCVSS 7,1İstismar yokEPSS %0

    cheshire-cat-ai · core3 Eyl 2026

  • CVE-2026-85124
    30İzleyin

    @fastify/http-proxy vulnerable to prefix escape via backslash dot-segments

    YüksekCVSS 7,5İstismar yokEPSS %0

    fastify · fastify\/http-proxy3 Eyl 2026

  • CVE-2026-85150
    30İzleyin

    Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted digest authorization/ww

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat enterprise linux 103 Eyl 2026

  • CVE-2026-85154
    37İzleyin

    WWBN AVideo Authentication Bypass via Non-Expiring video_id_hash

    KritikCVSS 9,3İstismar yokEPSS %0

    wwbn · avideo3 Eyl 2026

  • CVE-2026-85155
    34İzleyin

    WWBN AVideo SQL Injection via get.json.php APIName channels

    YüksekCVSS 8,7İstismar yokEPSS %0

    wwbn · avideo3 Eyl 2026

  • CVE-2026-85160
    28İzleyin

    AVideo through c91b5975d CSRF and Path Traversal via stopLive.php

    YüksekCVSS 7,2İstismar yokEPSS %0

    wwbn · avideo3 Eyl 2026

  • CVE-2026-85162
    28İzleyin

    AVideo through c91b5975d CSRF via saveLive.php

    YüksekCVSS 7,1İstismar yokEPSS %0

    wwbn · avideo3 Eyl 2026

  • CVE-2026-85163
    28İzleyin

    AVideo Server-Side Request Forgery via epg_link parameter

    YüksekCVSS 7,1İstismar yokEPSS %0

    wwbn · avideo3 Eyl 2026

  • CVE-2026-85164
    28İzleyin

    WWBN AVideo Server-Side Request Forgery via set_api_userImages

    YüksekCVSS 7,1İstismar yokEPSS %0

    wwbn · avideo3 Eyl 2026

  • CVE-2026-85165
    28İzleyin

    n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement

    YüksekCVSS 7,2İstismar yokEPSS %0

    n8n · n8n3 Eyl 2026

  • CVE-2026-85166
    28İzleyin

    n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node

    YüksekCVSS 7,2İstismar yokEPSS %0

    n8n · n8n3 Eyl 2026

  • CVE-2026-85168
    30İzleyin

    n8n before 1.123.73 Remote Code Execution via Git Node

    YüksekCVSS 7,7İstismar yokEPSS %0

    n8n · n8n3 Eyl 2026

  • CVE-2026-85169
    34İzleyin

    n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak

    YüksekCVSS 8,7İstismar yokEPSS %0

    n8n · n8n3 Eyl 2026

  • CVE-2026-85170
    28İzleyin

    n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes

    YüksekCVSS 7,1İstismar yokEPSS %0

    n8n · n8n3 Eyl 2026

  • CVE-2026-85171
    28İzleyin

    n8n before 1.123.73 Credential Exposure via Error Logging

    YüksekCVSS 7,1İstismar yokEPSS %0

    n8n · n8n3 Eyl 2026

  • CVE-2026-85174
    34İzleyin

    SiYuan before v3.8.2 API Token Exposure via Log File

    YüksekCVSS 8,7İstismar yokEPSS %0

    siyuan-note · siyuan3 Eyl 2026

  • CVE-2026-85175
    34İzleyin

    SiYuan before v3.8.2 TLS Private Key Disclosure via getFile

    YüksekCVSS 8,7İstismar yokEPSS %0

    siyuan-note · siyuan3 Eyl 2026

  • CVE-2026-9853
    34İzleyin

    A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read a

    YüksekCVSS 8,5İstismar yokEPSS %0

    hitachienergy · microscada x sys6003 Eyl 2026

  • CVE-2026-9854
    34İzleyin

    A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to adminis

    YüksekCVSS 8,5İstismar yokEPSS %0

    hitachienergy · microscada x sys6003 Eyl 2026

  • CVE-2026-6071
    30İzleyin

    Code Execution Vulnerability in Arena®

    YüksekCVSS 7,5İstismar yokEPSS %0

    rockwell automation · arena3 Eyl 2026

  • CVE-2026-80515
    35İzleyin

    In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST endpoint decides whet

    YüksekCVSS 8,9İstismar yokEPSS %0

    eclipse foundation · eclipse arrowhead3 Eyl 2026

  • CVE-2026-82180
    38İzleyin

    In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFi

    KritikCVSS 9,5İstismar yokEPSS %0

    eclipse foundation · eclipse arrowhead3 Eyl 2026

  • CVE-2026-85109
    35İzleyin

    Tenda HG10 Boa Web Server formLogin buffer overflow

    YüksekCVSS 8,9İstismar yokEPSS %1

    tenda · hg103 Eyl 2026

  • CVE-2026-85110
    29İzleyin

    Tenda HG10 Boa Web Server formWlanSetup buffer overflow

    YüksekCVSS 7,4İstismar yokEPSS %0

    tenda · hg103 Eyl 2026

  • CVE-2026-71404
    34İzleyin

    Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole

    YüksekCVSS 8,7İstismar yokEPSS %0

    suse · rancher3 Eyl 2026

  • CVE-2026-75033
    30İzleyin

    Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing

    YüksekCVSS 7,7İstismar yokEPSS %0

    suse · rancher3 Eyl 2026

  • CVE-2026-84971
    28İzleyin

    Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path

    YüksekCVSS 7,1İstismar yokEPSS %0

    mongodb · libmongocrypt3 Eyl 2026

  • CVE-2026-84989
    28İzleyin

    ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tags

    YüksekCVSS 7,1İstismar yokEPSS %0

    ntop · ntopng3 Eyl 2026

  • CVE-2026-85176
    34İzleyin

    DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid

    YüksekCVSS 8,7İstismar yokEPSS %0

    dbgate · dbgate3 Eyl 2026

  • CVE-2026-85178
    33İzleyin

    Helicone Cross-Tenant Provider Key Disclosure via Missing Organization Filter

    YüksekCVSS 8,3İstismar yokEPSS %0

    helicone · helicone3 Eyl 2026

  • CVE-2026-85179
    33İzleyin

    Label Studio through 1.23.0 SSRF via Unvalidated Webhook URL

    YüksekCVSS 8,4İstismar yokEPSS %0

    humansignal · label-studio3 Eyl 2026

  • CVE-2026-85180
    34İzleyin

    Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect

    YüksekCVSS 8,7İstismar yokEPSS %0

    ollama · ollama3 Eyl 2026

  • CVE-2026-85181
    37İzleyin

    CAT through 3.1.0 Session Cookie Forgery via Unkeyed hashCode Checksum

    KritikCVSS 9,3İstismar yokEPSS %0

    dianping · cat3 Eyl 2026

  • CVE-2026-85182
    30İzleyin

    vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Change

    YüksekCVSS 7,7İstismar yokEPSS %0

    lenve · vhr3 Eyl 2026

  • CVE-2026-85183
    37İzleyin

    Taipy through 4.1.1 Cross-Site WebSocket Hijacking via Wildcard socket.io CORS

    KritikCVSS 9,3İstismar yokEPSS %0

    avaiga · taipy3 Eyl 2026

  • CVE-2026-85199
    35İzleyin

    Eclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability in the REST API.

    YüksekCVSS 8,8İstismar yokEPSS %0

    eclipse foundation · eclipse aerios3 Eyl 2026

  • CVE-2026-85211
    33İzleyin

    Label Studio through 1.23.0 Cross-Organization Storage URI Resolution

    YüksekCVSS 8,3İstismar yokEPSS %0

    humansignal · label-studio3 Eyl 2026

  • CVE-2026-85212
    34İzleyin

    CRMEB through 6.0.0 Missing Authorization via Inert verifyAuth Role Check

    YüksekCVSS 8,7İstismar yokEPSS %0

    crmeb · crmeb3 Eyl 2026

  • CVE-2026-85213
    28İzleyin

    Kill Bill through 0.24.21 Missing Authorization on AdminResource Endpoints

    YüksekCVSS 7,2İstismar yokEPSS %0

    killbill · killbill3 Eyl 2026

  • CVE-2026-85214
    28İzleyin

    vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite

    YüksekCVSS 7,2İstismar yokEPSS %0

    lenve · vhr3 Eyl 2026