Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.965 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 50 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-20336İstismar yok | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Recisco · cisco secure firewall adaptive security appliance (asa) software · CWE-664 | Yüksek8,8 | — | %0,3 | 16 Eyl 2026 |
35İzleyin | CVE-2026-20340İstismar yok | Cisco Secure Firewall Management Center Software Deserialization Arbitrary Root Command Execution Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-502 | Yüksek8,8 | — | %0,7 | 16 Eyl 2026 |
30İzleyin | CVE-2026-20342İstismar yok | Cisco Secure Firewall Management Center Software Low Privileged Arbitrary File Download Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-639 | Yüksek7,7 | — | %0,5 | 16 Eyl 2026 |
30İzleyin | CVE-2026-20343İstismar yok | Cisco Secure Firewall Management Center Software Information Disclosure and Disk Denial of Service Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-306 | Yüksek7,5 | — | %0,6 | 16 Eyl 2026 |
35İzleyin | CVE-2026-20344İstismar yok | Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-89 | Yüksek8,8 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-20352İstismar yok | Cisco Identity Services Engine RADIUS Denial of Service Vulnerabilitycisco · cisco identity services engine software · CWE-119 | Yüksek8,6 | — | %0,5 | 16 Eyl 2026 |
35İzleyin | CVE-2026-20360İstismar yok | Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Information Exposure & Insecure Handlingcisco · cisco nexus dashboard · CWE-200 | Yüksek8,8 | — | %0,4 | 16 Eyl 2026 |
36İzleyin | CVE-2026-75513İstismar yok | Marten: SQL injection in Marten's LINQ provider via unescaped string literalsjasperfx · marten · CWE-89 | Kritik9,1 | — | %0,4 | 16 Eyl 2026 |
35İzleyin | CVE-2026-76409İstismar yok | Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Limitation of a Pathnamecisco · cisco nexus dashboard · CWE-22 | Yüksek8,8 | — | %0,5 | 16 Eyl 2026 |
34İzleyin | CVE-2026-76412İstismar yok | Cisco Secure Firewall Management Center Software Authenticated Privilege Escalation to Root Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-264 | Yüksek8,5 | — | %0,4 | 16 Eyl 2026 |
32İzleyin | CVE-2026-76413İstismar yok | Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-1259 | Yüksek8,2 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-76424İstismar yok | Cisco ISE Arbitrary File Access Vulnerabilitycisco · identity services engine · CWE-23 | Yüksek7,2 | — | %0,9 | 16 Eyl 2026 |
30İzleyin | CVE-2026-76425İstismar yok | Cisco ISE SQL Injection Vulnerabilitycisco · identity services engine · CWE-89 | Yüksek7,6 | — | %0,4 | 16 Eyl 2026 |
29İzleyin | CVE-2026-42784İstismar yok | Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusionred hat · red hat hardened images · CWE-347 | Yüksek7,4 | — | %0,3 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92748İstismar yok | BC Security Empire before 6.7.1 Path Traversal File Upload RCEbc-security · empire · CWE-22 | Yüksek8,7 | — | %0,8 | 16 Eyl 2026 |
36İzleyin | CVE-2026-92749İstismar yok | SafeLine through 9.4.1 Authentication Bypass via Weak Session Secretchaitin · safeline · CWE-338 | Kritik9,2 | — | %0,7 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92750İstismar yok | Harness through 3.3.0 Missing Access Control via infraproviders endpointharness · harness · CWE-862 | Yüksek7,1 | — | %0,2 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92751İstismar yok | CMAK through 3.0.0.6 Cross-Site Request Forgery via Missing CSRF Filteryahoo · cmak · CWE-352 | Yüksek7,2 | — | %0,2 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92752İstismar yok | metasfresh Unauthorized Access via Document Attachments and Comments Endpointsmetasfresh · metasfresh · CWE-639 | Yüksek8,7 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92753İstismar yok | PatrowlManager through 1.8.4 Authorization Bypass via Events APIpatrowl · patrowlmanager · CWE-862 | Yüksek7,1 | — | %0,3 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92759İstismar yok | SecObserve before 1.59.1 Information Disclosure via API Configurationsecobserve · secobserve · CWE-522 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92760İstismar yok | Shlink through 5.1.6 Mercure Token Authorization Bypassshlinkio · shlink · CWE-863 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92761İstismar yok | WebVirtCloud Missing Authorization on Instance Control Actionsretspen · webvirtcloud · CWE-862 | Yüksek8,7 | — | %0,6 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92762İstismar yok | Pelican Panel before 1.0.0-beta35 Authorization Bypass via Startuppelican · panel · CWE-862 | Yüksek8,7 | — | %0,6 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92763İstismar yok | Rundeck through 6.2.1 Authorization Bypass via Project Importrundeck · rundeck · CWE-862 | Yüksek8,6 | — | %0,6 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92765İstismar yok | ArcherySec through 2.0.6 Information Disclosure via WebScanVulnListarcherysec · archerysec · CWE-639 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92770İstismar yok | Harbor through 2.15.2 Scanner Credential Disclosure via Query Parametergoharbor · harbor · CWE-200 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92771İstismar yok | Twenty before 2.35.0 Permission Bypass via groupBy-with-records Querytwentyhq · twenty · CWE-863 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92772İstismar yok | Leantime before 3.9.6 Unauthorized Plugin Installation via HTMXleantime · leantime · CWE-862 | Yüksek7,1 | — | %0,5 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92773İstismar yok | Trigger.dev before 4.6.0 GitHub App Installation Takeovertriggerdotdev · trigger.dev · CWE-639 | Yüksek7,1 | — | %0,3 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92775İstismar yok | Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetchrequarks · wiki.js · CWE-918 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92776İstismar yok | Wiki.js through 2.5.314 Path Prefix Matching Authorization Bypassrequarks · wiki.js · CWE-863 | Yüksek8,6 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92779İstismar yok | Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via Bindingsbuilderio · @builder.io/sdk-react · CWE-1321 | Yüksek7,2 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92780İstismar yok | KnowStreaming through 3.4.1 Missing Authorization on the REST APIdidi · knowstreaming · CWE-862 | Yüksek8,7 | — | %0,5 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92782İstismar yok | Chroma through 1.5.9 Authorization Bypass via Collection Identifierchroma-core · chroma · CWE-863 | Yüksek8,6 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92783İstismar yok | Yeti through 2.11.0 Missing Authorization on RBAC Relationship Deletionyeti-platform · yeti · CWE-862 | Yüksek7,2 | — | %0,5 | 16 Eyl 2026 |
30İzleyin | CVE-2026-92784İstismar yok | @refinedev/inferencer through 7.0.0 Code Injection via API Field Namesrefinedev · @refinedev/inferencer · CWE-94 | Yüksek7,7 | — | %0,4 | 16 Eyl 2026 |
36İzleyin | CVE-2026-92785İstismar yok | Angel through 3.3.0 Unauthenticated Kryo Deserialization of Arbitrary Classesangel-ml · angel · CWE-502 | Kritik9,2 | — | %0,6 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92786İstismar yok | LightGBM through 4.7.0 Out-of-Bounds Write via Crafted Modellightgbm-org · lightgbm · CWE-787 | Yüksek8,5 | — | %0,1 | 16 Eyl 2026 |
37İzleyin | CVE-2026-92787İstismar yok | Feast through 0.66.0 Authentication Bypass via Unverified Tokenfeast-dev · feast · CWE-798 | Kritik9,3 | — | %0,7 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92788İstismar yok | Coze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Nodecoze-dev · coze-studio · CWE-863 | Yüksek8,7 | — | %0,5 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92789İstismar yok | Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirectgraylog2 · graylog2-server · CWE-918 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92791İstismar yok | Uber Kraken through 0.1.29 Path Traversal via tag parameteruber · kraken · CWE-22 | Yüksek8,7 | — | %0,6 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92792İstismar yok | OpenNHP through 1.0.2 Authentication Bypass via Fallback Verifieropennhp · opennhp · CWE-287 | Yüksek8,7 | — | %0,6 | 16 Eyl 2026 |
31İzleyin | CVE-2026-59974İstismar yok | Stanza: Zip Slip Path Traversal in Model/Resource Extractionstanfordnlp · stanza · CWE-22 | Yüksek7,8 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92793İstismar yok | GoAdmin through 1.2.26 Authorization Bypass via Query Parametergoadmingroup · go-admin · CWE-863 | Yüksek8,6 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92794İstismar yok | OpenSign through 2.41.3 Information Disclosure via getDocumentopensignlabs · opensign · CWE-862 | Yüksek8,7 | — | %0,5 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92795İstismar yok | Coze Studio through 0.5.1 Server-Side Request Forgery via Plugincoze-dev · coze-studio · CWE-918 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92796İstismar yok | Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypassmanticoresoftware · manticore search · CWE-863 | Yüksek8,7 | — | %0,5 | 16 Eyl 2026 |
30İzleyin | CVE-2026-92800İstismar yok | Docs before 5.4.1 Stale Collaboration Session After Access Revocationsuitenumerique · docs · CWE-613 | Yüksek7,6 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92801İstismar yok | cc-connect through 1.5.0 User Allowlist Bypass via Feishu Card Actionschenhg5 · cc-connect · CWE-863 | Yüksek8,7 | — | %0,5 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92804İstismar yok | Nango through 0.70.4 Server-Side Request Forgery via Configurationnangohq · nango · CWE-918 | Yüksek7,1 | — | %0,3 | 16 Eyl 2026 |
37İzleyin | CVE-2026-92805İstismar yok | UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizarduvdesk · community-skeleton · CWE-306 | Kritik9,3 | — | %0,6 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92806İstismar yok | phpList before 3.6.17 Cross-Site Request Forgery via massremove.phpphplist · phplist · CWE-352 | Yüksek7,2 | — | %0,2 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92811İstismar yok | browserless 1.44.0 through 2.56.7 File Protocol Restriction Bypassbrowserless · browserless · CWE-200 | Yüksek7,1 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92815İstismar yok | changedetection.io through 0.60.6 SSRF via browser-step Goto URLdgtlmoon · changedetection.io · CWE-918 | Yüksek8,7 | — | %0,5 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92816İstismar yok | ComfyUI before 0.30.0 Path Traversal via dataset save nodescomfy-org · comfyui · CWE-22 | Yüksek8,5 | — | %0,2 | 16 Eyl 2026 |
28İzleyin | CVE-2026-68904İstismar yok | node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustionnode-opcua · node-opcua · CWE-400 | Yüksek7,0 | — | %0,4 | 16 Eyl 2026 |
30İzleyin | CVE-2026-85756İstismar yok | SSH.NET: ScpClient allows server-side RCE via default SCP path handlingsshnet · ssh.net · CWE-78 | Yüksek7,5 | — | %0,6 | 16 Eyl 2026 |
32İzleyin | CVE-2026-85469İstismar yok | Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scopered hat · red hat quay 3 · CWE-1357 | Yüksek8,0 | — | %0,5 | 16 Eyl 2026 |
28İzleyin | CVE-2026-89034İstismar yok | TCH QRing R20_B006 Unauthenticated BLE Accesstch · qring · CWE-306 | Yüksek7,1 | — | %0,3 | 16 Eyl 2026 |
36İzleyin | CVE-2026-92576İstismar yok | HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchToolhkuds · nanobot · CWE-918 | Kritik9,2 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92577İstismar yok | AVideo through 29.0 API get_api_video Broken Access Control via clean_titlewwbn · avideo · CWE-639 | Yüksek8,7 | — | %0,4 | 16 Eyl 2026 |
36İzleyin | CVE-2026-92578İstismar yok | WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hashwwbn · avideo · CWE-287 | Kritik9,2 | — | %0,6 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92580İstismar yok | AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRFwwbn · avideo · CWE-78 | Yüksek8,7 | — | %1,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-92582İstismar yok | AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF Bypasswwbn · avideo · CWE-352 | Yüksek7,1 | — | %0,1 | 16 Eyl 2026 |
32İzleyin | CVE-2026-92591İstismar yok | Craft CMS 5.0.0 before 5.10.13 Environment Secret Exposure via Installercraftcms · cms · CWE-636 | Yüksek8,2 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92592Kavram kanıtı | Craft CMS before 4.18.6 Remote Code Execution via signed cookiecraftcms · cms · CWE-1336 | Yüksek8,7 | — | %0,6 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92593İstismar yok | Craft CMS 5.10.0 before 5.10.13 Authenticated Remote Code Executioncraftcms · cms · CWE-94 | Yüksek8,7 | — | %0,5 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92594İstismar yok | Craft CMS before 5.11.0 Unauthenticated PII Disclosure via GraphQLcraftcms · cms · CWE-200 | Yüksek8,7 | — | %0,4 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92596İstismar yok | Nodemailer before 9.1.0 Denial of Service via addressparsernodemailer · nodemailer · CWE-400 | Yüksek8,7 | — | %0,8 | 16 Eyl 2026 |
33İzleyin | CVE-2026-92597İstismar yok | Nodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 Commentnodemailer · nodemailer · CWE-436 | Yüksek8,3 | — | %0,3 | 16 Eyl 2026 |
33İzleyin | CVE-2026-92598İstismar yok | Nodemailer before 9.1.0 IDN/Punycode Domain Allow-list Bypassnodemailer · nodemailer · CWE-436 | Yüksek8,3 | — | %0,3 | 16 Eyl 2026 |
34İzleyin | CVE-2026-92599İstismar yok | Joi before 17.13.7 and 18.2.6 ReDoS via isoDatehapijs · joi · CWE-1333 | Yüksek8,7 | — | %0,5 | 16 Eyl 2026 |
30İzleyin | CVE-2026-65388İstismar yok | A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and dapple · containerization · CWE-601 | Yüksek7,5 | — | %0,4 | 16 Eyl 2026 |
30İzleyin | CVE-2026-46352İstismar yok | Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlockoisf · suricata · CWE-833 | Yüksek7,5 | — | %0,4 | 16 Eyl 2026 |
30İzleyin | CVE-2026-63126İstismar yok | Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)square · wire · CWE-190 | Yüksek7,5 | — | %0,8 | 16 Eyl 2026 |
30İzleyin | CVE-2026-81875İstismar yok | HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of servicehapifhir · org.hl7.fhir.core · CWE-20 | Yüksek7,5 | — | %0,6 | 16 Eyl 2026 |
30İzleyin | CVE-2026-81876İstismar yok | HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of servicehapifhir · org.hl7.fhir.core · CWE-20 | Yüksek7,5 | — | %0,6 | 16 Eyl 2026 |
8İzleyin | CVE-2026-81870İstismar yok | OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logsopen-telemetry · opentelemetry-go · CWE-200 | Düşük2,0 | — | %0,2 | 16 Eyl 2026 |
34İzleyin | CVE-2026-86831İstismar yok | Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKSaws · aws-network-policy-agent · CWE-1289 | Yüksek8,7 | — | %0,6 | 16 Eyl 2026 |
39İzleyin | CVE-2025-56563İstismar yok | A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0.CWE-918 | Kritik9,8 | — | %0,5 | 16 Eyl 2026 |
30İzleyin | CVE-2025-56565İstismar yok | DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within noCWE-312 | Yüksek7,6 | — | %0,1 | 16 Eyl 2026 |
30İzleyin | CVE-2026-62997İstismar yok | Kedro-Datasets: Remote code execution in experimental `PyTorchDataset` via unsafe `torch.load`kedro-org · kedro-plugins · CWE-502 | Yüksek7,7 | — | %0,6 | 16 Eyl 2026 |
35İzleyin | CVE-2026-63506İstismar yok | Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted sitetinacms · tinacms · CWE-639 | Yüksek8,8 | — | %0,5 | 16 Eyl 2026 |
93Hemen | CVE-2026-76460Silahlaştırılmış | Cisco Identity Services Engine Authentication Bypass Vulnerabilitycisco · identity services engine · CWE-648 | Kritik10,0 | KEV | %75,5 | 16 Eyl 2026 |
25İzleyin | CVE-2026-81871İstismar yok | OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinningopen-telemetry · opentelemetry-go · CWE-295 | Orta6,3 | — | %0,1 | 16 Eyl 2026 |
37İzleyin | CVE-2026-92812İstismar yok | Decap CMS < 3.11.0 Path Traversal via Sibling Directory Prefix Matchingdecaporg · decap-server · CWE-22 | Kritik9,3 | — | %0,4 | 16 Eyl 2026 |
30İzleyin | CVE-2026-81546İstismar yok | The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity documcanva · affinity · CWE-121 | Yüksek7,7 | — | %0,1 | 16 Eyl 2026 |
31İzleyin | CVE-2026-92838İstismar yok | GeoVision GV-Remote E-Map dll hijacking vulnerabilitygeovision inc. · gv-remote e-map · CWE-427 | Yüksek7,8 | — | %0,1 | 16 Eyl 2026 |
32İzleyin | CVE-2026-61591İstismar yok | djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)djust-org · djust · CWE-345 | Yüksek8,1 | — | %0,2 | 16 Eyl 2026 |
29İzleyin | CVE-2026-61592İstismar yok | djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)djust-org · djust · CWE-384 | Yüksek7,4 | — | %0,3 | 16 Eyl 2026 |
36İzleyin | CVE-2026-61594İstismar yok | djust has an authorization bypass on the WebSocket/SSE mount pathdjust-org · djust · CWE-306 | Kritik9,1 | — | %0,4 | 16 Eyl 2026 |
28İzleyin | CVE-2026-61596İstismar yok | djust has broken object-level access control (IDOR)djust-org · djust · CWE-639 | Yüksek7,1 | — | %0,3 | 16 Eyl 2026 |
35İzleyin | CVE-2026-61599İstismar yok | djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount pathdjust-org · djust · CWE-470 | Yüksek8,8 | — | %0,6 | 16 Eyl 2026 |
31İzleyin | CVE-2026-24073İstismar yok | Out-of-bounds Write in Videoqualcomm · cologne firmware · CWE-787 | Yüksek7,8 | — | %0,1 | 17 Eyl 2026 |
31İzleyin | CVE-2026-24074İstismar yok | Out-of-bounds Write in Videoqualcomm · iqx5121 firmware · CWE-787 | Yüksek7,8 | — | %0,1 | 17 Eyl 2026 |
28İzleyin | CVE-2026-24075İstismar yok | Buffer Over-read in Qualcomm IPCqualcomm · wsa8845h firmware · CWE-126 | Yüksek7,0 | — | %0,0 | 17 Eyl 2026 |
29İzleyin | CVE-2026-24081İstismar yok | Buffer Over-read in BT Controllerqualcomm · ar8035 firmware · CWE-126 | Yüksek7,4 | — | %0,1 | 17 Eyl 2026 |
31İzleyin | CVE-2026-25261İstismar yok | Untrusted Pointer Dereference in Cameraqualcomm · cologne firmware · CWE-822 | Yüksek7,8 | — | %0,1 | 17 Eyl 2026 |
- CVE-2026-2033635İzleyin
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Re
YüksekCVSS 8,8İstismar yokEPSS %0cisco · cisco secure firewall adaptive security appliance (asa) software16 Eyl 2026
- CVE-2026-2034035İzleyin
Cisco Secure Firewall Management Center Software Deserialization Arbitrary Root Command Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0cisco · cisco secure firewall management center (fmc)16 Eyl 2026
- CVE-2026-2034230İzleyin
Cisco Secure Firewall Management Center Software Low Privileged Arbitrary File Download Vulnerability
YüksekCVSS 7,7İstismar yokEPSS %0cisco · cisco secure firewall management center (fmc)16 Eyl 2026
- CVE-2026-2034330İzleyin
Cisco Secure Firewall Management Center Software Information Disclosure and Disk Denial of Service Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0cisco · cisco secure firewall management center (fmc)16 Eyl 2026
- CVE-2026-2034435İzleyin
Cisco Secure Firewall Management Center Software SQL Injection Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0cisco · cisco secure firewall management center (fmc)16 Eyl 2026
- CVE-2026-2035234İzleyin
Cisco Identity Services Engine RADIUS Denial of Service Vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0cisco · cisco identity services engine software16 Eyl 2026
- CVE-2026-2036035İzleyin
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Information Exposure & Insecure Handling
YüksekCVSS 8,8İstismar yokEPSS %0cisco · cisco nexus dashboard16 Eyl 2026
- CVE-2026-7551336İzleyin
Marten: SQL injection in Marten's LINQ provider via unescaped string literals
KritikCVSS 9,1İstismar yokEPSS %0jasperfx · marten16 Eyl 2026
- CVE-2026-7640935İzleyin
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Limitation of a Pathname
YüksekCVSS 8,8İstismar yokEPSS %0cisco · cisco nexus dashboard16 Eyl 2026
- CVE-2026-7641234İzleyin
Cisco Secure Firewall Management Center Software Authenticated Privilege Escalation to Root Vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0cisco · cisco secure firewall management center (fmc)16 Eyl 2026
- CVE-2026-7641332İzleyin
Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account Vulnerability
YüksekCVSS 8,2İstismar yokEPSS %0cisco · cisco secure firewall management center (fmc)16 Eyl 2026
- CVE-2026-7642428İzleyin
Cisco ISE Arbitrary File Access Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0cisco · identity services engine16 Eyl 2026
- CVE-2026-7642530İzleyin
Cisco ISE SQL Injection Vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0cisco · identity services engine16 Eyl 2026
- CVE-2026-4278429İzleyin
Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
YüksekCVSS 7,4İstismar yokEPSS %0red hat · red hat hardened images16 Eyl 2026
- CVE-2026-9274834İzleyin
BC Security Empire before 6.7.1 Path Traversal File Upload RCE
YüksekCVSS 8,7İstismar yokEPSS %0bc-security · empire16 Eyl 2026
- CVE-2026-9274936İzleyin
SafeLine through 9.4.1 Authentication Bypass via Weak Session Secret
KritikCVSS 9,2İstismar yokEPSS %0chaitin · safeline16 Eyl 2026
- CVE-2026-9275028İzleyin
Harness through 3.3.0 Missing Access Control via infraproviders endpoint
YüksekCVSS 7,1İstismar yokEPSS %0harness · harness16 Eyl 2026
- CVE-2026-9275128İzleyin
CMAK through 3.0.0.6 Cross-Site Request Forgery via Missing CSRF Filter
YüksekCVSS 7,2İstismar yokEPSS %0yahoo · cmak16 Eyl 2026
- CVE-2026-9275234İzleyin
metasfresh Unauthorized Access via Document Attachments and Comments Endpoints
YüksekCVSS 8,7İstismar yokEPSS %0metasfresh · metasfresh16 Eyl 2026
- CVE-2026-9275328İzleyin
PatrowlManager through 1.8.4 Authorization Bypass via Events API
YüksekCVSS 7,1İstismar yokEPSS %0patrowl · patrowlmanager16 Eyl 2026
- CVE-2026-9275928İzleyin
SecObserve before 1.59.1 Information Disclosure via API Configuration
YüksekCVSS 7,1İstismar yokEPSS %0secobserve · secobserve16 Eyl 2026
- CVE-2026-9276028İzleyin
Shlink through 5.1.6 Mercure Token Authorization Bypass
YüksekCVSS 7,1İstismar yokEPSS %0shlinkio · shlink16 Eyl 2026
- CVE-2026-9276134İzleyin
WebVirtCloud Missing Authorization on Instance Control Actions
YüksekCVSS 8,7İstismar yokEPSS %0retspen · webvirtcloud16 Eyl 2026
- CVE-2026-9276234İzleyin
Pelican Panel before 1.0.0-beta35 Authorization Bypass via Startup
YüksekCVSS 8,7İstismar yokEPSS %0pelican · panel16 Eyl 2026
- CVE-2026-9276334İzleyin
Rundeck through 6.2.1 Authorization Bypass via Project Import
YüksekCVSS 8,6İstismar yokEPSS %0rundeck · rundeck16 Eyl 2026
- CVE-2026-9276528İzleyin
ArcherySec through 2.0.6 Information Disclosure via WebScanVulnList
YüksekCVSS 7,1İstismar yokEPSS %0archerysec · archerysec16 Eyl 2026
- CVE-2026-9277028İzleyin
Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter
YüksekCVSS 7,1İstismar yokEPSS %0goharbor · harbor16 Eyl 2026
- CVE-2026-9277128İzleyin
Twenty before 2.35.0 Permission Bypass via groupBy-with-records Query
YüksekCVSS 7,1İstismar yokEPSS %0twentyhq · twenty16 Eyl 2026
- CVE-2026-9277228İzleyin
Leantime before 3.9.6 Unauthorized Plugin Installation via HTMX
YüksekCVSS 7,1İstismar yokEPSS %0leantime · leantime16 Eyl 2026
- CVE-2026-9277328İzleyin
Trigger.dev before 4.6.0 GitHub App Installation Takeover
YüksekCVSS 7,1İstismar yokEPSS %0triggerdotdev · trigger.dev16 Eyl 2026
- CVE-2026-9277528İzleyin
Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch
YüksekCVSS 7,1İstismar yokEPSS %0requarks · wiki.js16 Eyl 2026
- CVE-2026-9277634İzleyin
Wiki.js through 2.5.314 Path Prefix Matching Authorization Bypass
YüksekCVSS 8,6İstismar yokEPSS %0requarks · wiki.js16 Eyl 2026
- CVE-2026-9277928İzleyin
Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via Bindings
YüksekCVSS 7,2İstismar yokEPSS %0builderio · @builder.io/sdk-react16 Eyl 2026
- CVE-2026-9278034İzleyin
KnowStreaming through 3.4.1 Missing Authorization on the REST API
YüksekCVSS 8,7İstismar yokEPSS %0didi · knowstreaming16 Eyl 2026
- CVE-2026-9278234İzleyin
Chroma through 1.5.9 Authorization Bypass via Collection Identifier
YüksekCVSS 8,6İstismar yokEPSS %0chroma-core · chroma16 Eyl 2026
- CVE-2026-9278328İzleyin
Yeti through 2.11.0 Missing Authorization on RBAC Relationship Deletion
YüksekCVSS 7,2İstismar yokEPSS %0yeti-platform · yeti16 Eyl 2026
- CVE-2026-9278430İzleyin
@refinedev/inferencer through 7.0.0 Code Injection via API Field Names
YüksekCVSS 7,7İstismar yokEPSS %0refinedev · @refinedev/inferencer16 Eyl 2026
- CVE-2026-9278536İzleyin
Angel through 3.3.0 Unauthenticated Kryo Deserialization of Arbitrary Classes
KritikCVSS 9,2İstismar yokEPSS %0angel-ml · angel16 Eyl 2026
- CVE-2026-9278634İzleyin
LightGBM through 4.7.0 Out-of-Bounds Write via Crafted Model
YüksekCVSS 8,5İstismar yokEPSS %0lightgbm-org · lightgbm16 Eyl 2026
- CVE-2026-9278737İzleyin
Feast through 0.66.0 Authentication Bypass via Unverified Token
KritikCVSS 9,3İstismar yokEPSS %0feast-dev · feast16 Eyl 2026
- CVE-2026-9278834İzleyin
Coze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Node
YüksekCVSS 8,7İstismar yokEPSS %0coze-dev · coze-studio16 Eyl 2026
- CVE-2026-9278928İzleyin
Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect
YüksekCVSS 7,1İstismar yokEPSS %0graylog2 · graylog2-server16 Eyl 2026
- CVE-2026-9279134İzleyin
Uber Kraken through 0.1.29 Path Traversal via tag parameter
YüksekCVSS 8,7İstismar yokEPSS %0uber · kraken16 Eyl 2026
- CVE-2026-9279234İzleyin
OpenNHP through 1.0.2 Authentication Bypass via Fallback Verifier
YüksekCVSS 8,7İstismar yokEPSS %0opennhp · opennhp16 Eyl 2026
- CVE-2026-5997431İzleyin
Stanza: Zip Slip Path Traversal in Model/Resource Extraction
YüksekCVSS 7,8İstismar yokEPSS %0stanfordnlp · stanza16 Eyl 2026
- CVE-2026-9279334İzleyin
GoAdmin through 1.2.26 Authorization Bypass via Query Parameter
YüksekCVSS 8,6İstismar yokEPSS %0goadmingroup · go-admin16 Eyl 2026
- CVE-2026-9279434İzleyin
OpenSign through 2.41.3 Information Disclosure via getDocument
YüksekCVSS 8,7İstismar yokEPSS %0opensignlabs · opensign16 Eyl 2026
- CVE-2026-9279528İzleyin
Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin
YüksekCVSS 7,1İstismar yokEPSS %0coze-dev · coze-studio16 Eyl 2026
- CVE-2026-9279634İzleyin
Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypass
YüksekCVSS 8,7İstismar yokEPSS %0manticoresoftware · manticore search16 Eyl 2026
- CVE-2026-9280030İzleyin
Docs before 5.4.1 Stale Collaboration Session After Access Revocation
YüksekCVSS 7,6İstismar yokEPSS %0suitenumerique · docs16 Eyl 2026
- CVE-2026-9280134İzleyin
cc-connect through 1.5.0 User Allowlist Bypass via Feishu Card Actions
YüksekCVSS 8,7İstismar yokEPSS %0chenhg5 · cc-connect16 Eyl 2026
- CVE-2026-9280428İzleyin
Nango through 0.70.4 Server-Side Request Forgery via Configuration
YüksekCVSS 7,1İstismar yokEPSS %0nangohq · nango16 Eyl 2026
- CVE-2026-9280537İzleyin
UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard
KritikCVSS 9,3İstismar yokEPSS %0uvdesk · community-skeleton16 Eyl 2026
- CVE-2026-9280628İzleyin
phpList before 3.6.17 Cross-Site Request Forgery via massremove.php
YüksekCVSS 7,2İstismar yokEPSS %0phplist · phplist16 Eyl 2026
- CVE-2026-9281128İzleyin
browserless 1.44.0 through 2.56.7 File Protocol Restriction Bypass
YüksekCVSS 7,1İstismar yokEPSS %0browserless · browserless16 Eyl 2026
- CVE-2026-9281534İzleyin
changedetection.io through 0.60.6 SSRF via browser-step Goto URL
YüksekCVSS 8,7İstismar yokEPSS %0dgtlmoon · changedetection.io16 Eyl 2026
- CVE-2026-9281634İzleyin
ComfyUI before 0.30.0 Path Traversal via dataset save nodes
YüksekCVSS 8,5İstismar yokEPSS %0comfy-org · comfyui16 Eyl 2026
- CVE-2026-6890428İzleyin
node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion
YüksekCVSS 7,0İstismar yokEPSS %0node-opcua · node-opcua16 Eyl 2026
- CVE-2026-8575630İzleyin
SSH.NET: ScpClient allows server-side RCE via default SCP path handling
YüksekCVSS 7,5İstismar yokEPSS %0sshnet · ssh.net16 Eyl 2026
- CVE-2026-8546932İzleyin
Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scope
YüksekCVSS 8,0İstismar yokEPSS %0red hat · red hat quay 316 Eyl 2026
- CVE-2026-8903428İzleyin
TCH QRing R20_B006 Unauthenticated BLE Access
YüksekCVSS 7,1İstismar yokEPSS %0tch · qring16 Eyl 2026
- CVE-2026-9257636İzleyin
HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool
KritikCVSS 9,2İstismar yokEPSS %0hkuds · nanobot16 Eyl 2026
- CVE-2026-9257734İzleyin
AVideo through 29.0 API get_api_video Broken Access Control via clean_title
YüksekCVSS 8,7İstismar yokEPSS %0wwbn · avideo16 Eyl 2026
- CVE-2026-9257836İzleyin
WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash
KritikCVSS 9,2İstismar yokEPSS %0wwbn · avideo16 Eyl 2026
- CVE-2026-9258034İzleyin
AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRF
YüksekCVSS 8,7İstismar yokEPSS %1wwbn · avideo16 Eyl 2026
- CVE-2026-9258228İzleyin
AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF Bypass
YüksekCVSS 7,1İstismar yokEPSS %0wwbn · avideo16 Eyl 2026
- CVE-2026-9259132İzleyin
Craft CMS 5.0.0 before 5.10.13 Environment Secret Exposure via Installer
YüksekCVSS 8,2İstismar yokEPSS %0craftcms · cms16 Eyl 2026
- CVE-2026-9259234İzleyin
Craft CMS before 4.18.6 Remote Code Execution via signed cookie
YüksekCVSS 8,7Kavram kanıtıEPSS %0craftcms · cms16 Eyl 2026
- CVE-2026-9259334İzleyin
Craft CMS 5.10.0 before 5.10.13 Authenticated Remote Code Execution
YüksekCVSS 8,7İstismar yokEPSS %0craftcms · cms16 Eyl 2026
- CVE-2026-9259434İzleyin
Craft CMS before 5.11.0 Unauthenticated PII Disclosure via GraphQL
YüksekCVSS 8,7İstismar yokEPSS %0craftcms · cms16 Eyl 2026
- CVE-2026-9259634İzleyin
Nodemailer before 9.1.0 Denial of Service via addressparser
YüksekCVSS 8,7İstismar yokEPSS %0nodemailer · nodemailer16 Eyl 2026
- CVE-2026-9259733İzleyin
Nodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 Comment
YüksekCVSS 8,3İstismar yokEPSS %0nodemailer · nodemailer16 Eyl 2026
- CVE-2026-9259833İzleyin
Nodemailer before 9.1.0 IDN/Punycode Domain Allow-list Bypass
YüksekCVSS 8,3İstismar yokEPSS %0nodemailer · nodemailer16 Eyl 2026
- CVE-2026-9259934İzleyin
Joi before 17.13.7 and 18.2.6 ReDoS via isoDate
YüksekCVSS 8,7İstismar yokEPSS %0hapijs · joi16 Eyl 2026
- CVE-2026-6538830İzleyin
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and d
YüksekCVSS 7,5İstismar yokEPSS %0apple · containerization16 Eyl 2026
- CVE-2026-4635230İzleyin
Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata16 Eyl 2026
- CVE-2026-6312630İzleyin
Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)
YüksekCVSS 7,5İstismar yokEPSS %0square · wire16 Eyl 2026
- CVE-2026-8187530İzleyin
HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of service
YüksekCVSS 7,5İstismar yokEPSS %0hapifhir · org.hl7.fhir.core16 Eyl 2026
- CVE-2026-8187630İzleyin
HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service
YüksekCVSS 7,5İstismar yokEPSS %0hapifhir · org.hl7.fhir.core16 Eyl 2026
- CVE-2026-818708İzleyin
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
DüşükCVSS 2,0İstismar yokEPSS %0open-telemetry · opentelemetry-go16 Eyl 2026
- CVE-2026-8683134İzleyin
Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS
YüksekCVSS 8,7İstismar yokEPSS %0aws · aws-network-policy-agent16 Eyl 2026
- CVE-2025-5656339İzleyin
A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0.
KritikCVSS 9,8İstismar yokEPSS %016 Eyl 2026
- CVE-2025-5656530İzleyin
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within no
YüksekCVSS 7,6İstismar yokEPSS %016 Eyl 2026
- CVE-2026-6299730İzleyin
Kedro-Datasets: Remote code execution in experimental `PyTorchDataset` via unsafe `torch.load`
YüksekCVSS 7,7İstismar yokEPSS %0kedro-org · kedro-plugins16 Eyl 2026
- CVE-2026-6350635İzleyin
Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site
YüksekCVSS 8,8İstismar yokEPSS %0tinacms · tinacms16 Eyl 2026
- CVE-2026-7646093Hemen
Cisco Identity Services Engine Authentication Bypass Vulnerability
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %75cisco · identity services engine16 Eyl 2026
- CVE-2026-8187125İzleyin
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning
OrtaCVSS 6,3İstismar yokEPSS %0open-telemetry · opentelemetry-go16 Eyl 2026
- CVE-2026-9281237İzleyin
Decap CMS < 3.11.0 Path Traversal via Sibling Directory Prefix Matching
KritikCVSS 9,3İstismar yokEPSS %0decaporg · decap-server16 Eyl 2026
- CVE-2026-8154630İzleyin
The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity docum
YüksekCVSS 7,7İstismar yokEPSS %0canva · affinity16 Eyl 2026
- CVE-2026-9283831İzleyin
GeoVision GV-Remote E-Map dll hijacking vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0geovision inc. · gv-remote e-map16 Eyl 2026
- CVE-2026-6159132İzleyin
djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)
YüksekCVSS 8,1İstismar yokEPSS %0djust-org · djust16 Eyl 2026
- CVE-2026-6159229İzleyin
djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)
YüksekCVSS 7,4İstismar yokEPSS %0djust-org · djust16 Eyl 2026
- CVE-2026-6159436İzleyin
djust has an authorization bypass on the WebSocket/SSE mount path
KritikCVSS 9,1İstismar yokEPSS %0djust-org · djust16 Eyl 2026
- CVE-2026-6159628İzleyin
djust has broken object-level access control (IDOR)
YüksekCVSS 7,1İstismar yokEPSS %0djust-org · djust16 Eyl 2026
- CVE-2026-6159935İzleyin
djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path
YüksekCVSS 8,8İstismar yokEPSS %0djust-org · djust16 Eyl 2026
- CVE-2026-2407331İzleyin
Out-of-bounds Write in Video
YüksekCVSS 7,8İstismar yokEPSS %0qualcomm · cologne firmware17 Eyl 2026
- CVE-2026-2407431İzleyin
Out-of-bounds Write in Video
YüksekCVSS 7,8İstismar yokEPSS %0qualcomm · iqx5121 firmware17 Eyl 2026
- CVE-2026-2407528İzleyin
Buffer Over-read in Qualcomm IPC
YüksekCVSS 7,0İstismar yokEPSS %0qualcomm · wsa8845h firmware17 Eyl 2026
- CVE-2026-2408129İzleyin
Buffer Over-read in BT Controller
YüksekCVSS 7,4İstismar yokEPSS %0qualcomm · ar8035 firmware17 Eyl 2026
- CVE-2026-2526131İzleyin
Untrusted Pointer Dereference in Camera
YüksekCVSS 7,8İstismar yokEPSS %0qualcomm · cologne firmware17 Eyl 2026