İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.957 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 53 / 80

  • CVE-2026-90153
    32İzleyin

    ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90161
    28İzleyin

    erofs: fix interlaced ztailpacking pclusters

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90162
    35İzleyin

    ksmbd: defer publishing granted locks to prevent UAF/double-free race

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2021-3030
    24İzleyin

    Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colo

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    17 Eyl 2026

  • CVE-2026-90172
    30İzleyin

    smb: smbdirect: destroy QP before mem pools on accept failure

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90173
    39İzleyin

    smb: smbdirect: free completion queues with ib_free_cq()

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90174
    28İzleyin

    ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-15815
    35İzleyin

    CVE-2026-15815 CVE Record

    YüksekCVSS 8,8İstismar yokEPSS %0

    grafana · grafana oss17 Eyl 2026

  • CVE-2026-90176
    32İzleyin

    ksmbd: Do not skip lock checks for single-byte ranges

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90177
    31İzleyin

    bpf: Check pointer type for all atomic RMW paths

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-45140
    39İzleyin

    Chamilo LMS CStudio upload flow allows unauthenticated remote code execution

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    chamilo · chamilo-lms17 Eyl 2026

  • CVE-2026-48977
    30İzleyin

    OpenSlide: Arbitrary memory write with crafted Ventana BIF file

    YüksekCVSS 7,7İstismar yokEPSS %0

    openslide · openslide17 Eyl 2026

  • CVE-2026-90191
    33İzleyin

    mailbox: riscv-sbi-mpxy: validate RPMI notification lengths

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-50275
    30İzleyin

    Datadog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoS

    YüksekCVSS 7,5İstismar yokEPSS %0

    datadog · dd-trace-php17 Eyl 2026

  • CVE-2026-50277
    30İzleyin

    dd-trace-cpp: Improper parsing of W3C baggage headers may lead to DoS

    YüksekCVSS 7,5İstismar yokEPSS %0

    datadog · dd-trace-cpp17 Eyl 2026

  • CVE-2026-90199
    31İzleyin

    fs/ntfs3: reject out-of-range evcn in mi_enum_attr()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-52483
    35İzleyin

    The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BR_g8.10_1.11(WVK.0)b46 allow auth

    YüksekCVSS 8,8İstismar yokEPSS %0

    17 Eyl 2026

  • CVE-2026-54237
    37İzleyin

    Wavelog: Unauthenticated Remote Code Execution

    KritikCVSS 9,3İstismar yokEPSS %0

    wavelog · wavelog17 Eyl 2026

  • CVE-2026-54339
    30İzleyin

    Glean: Server-Side Request Forgery (SSRF) with Full Response Disclosure via Malicious RSS Feed in /api/feeds/discover

    YüksekCVSS 7,7İstismar yokEPSS %0

    leslieleung · glean17 Eyl 2026

  • CVE-2026-54354
    32İzleyin

    MapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query Translation

    YüksekCVSS 8,2İstismar yokEPSS %0

    mapserver · mapserver17 Eyl 2026

  • CVE-2026-90203
    28İzleyin

    Squashfs: check block offset is not negative

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90204
    31İzleyin

    ocfs2: validate DIO orphan slot during inode read

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90205
    31İzleyin

    ocfs2: validate orphan slot during inode read

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-54501
    37İzleyin

    Browsertrix: Arbitrary Command Injection due to Improper Command Sanitization in Git URLs specified as Custom Behaviors

    KritikCVSS 9,4İstismar yokEPSS %1

    webrecorder · browsertrix17 Eyl 2026

  • CVE-2026-90207
    31İzleyin

    ALSA: seq: midi: Serialize input teardown with event_input

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90210
    31İzleyin

    bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-54510
    28İzleyin

    Speakr: CSRF bypass via unauthenticated API token parameter in csrf_exempt_for_api_tokens hook

    YüksekCVSS 7,1İstismar yokEPSS %0

    murtaza-nasir · speakr17 Eyl 2026

  • CVE-2026-54597
    33İzleyin

    ITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires Parameter

    YüksekCVSS 8,3Kavram kanıtıEPSS %0

    itflow-org · itflow17 Eyl 2026

  • CVE-2026-90217
    31İzleyin

    bpf: Compare iterator types during state pruning

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-54916
    35İzleyin

    NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud

    YüksekCVSS 8,8İstismar yokEPSS %0

    netbox-community · devicetype-library17 Eyl 2026

  • CVE-2026-90223
    28İzleyin

    nfc: llcp: bound SNL TLV parsing to the skb and add length checks

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90224
    30İzleyin

    nfc: nci: fix double completion race in nci_data_exchange_complete

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90225
    31İzleyin

    nfc: llcp: read llcp_sock->local under the socket lock in getsockopt

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90227
    31İzleyin

    nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90228
    30İzleyin

    nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90229
    29İzleyin

    nvme-apple: Destroy the admin queue on removal

    YüksekCVSS 7,4İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90230
    36İzleyin

    nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90231
    33İzleyin

    apparmor: fix unconfined user namespace restriction forced stack

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-68523
    30İzleyin

    Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

    YüksekCVSS 7,5İstismar yokEPSS %0

    fulgur-rs · fulgur17 Eyl 2026

  • CVE-2026-90234
    30İzleyin

    NFS: Return a delegation the client fails to record

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90235
    39İzleyin

    sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90237
    31İzleyin

    netfilter: nft_ct: move custom expectation support to helper

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-68537
    30İzleyin

    Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

    YüksekCVSS 7,5İstismar yokEPSS %0

    fulgur-rs · fulgur17 Eyl 2026

  • CVE-2026-90240
    35İzleyin

    iommu/vt-d: Flush context cache with correct SID when tearing down aliases

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90241
    32İzleyin

    iommu/vt-d: Tear down scalable-mode context on probe failure

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90243
    32İzleyin

    iommu/vt-d: Clear Present bit before tearing down copied context entry

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90244
    31İzleyin

    iommu/dma: Restore locking around msi_page_list

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90246
    28İzleyin

    apparmor: fix integer overflow in verify_tags() bounds check

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90255
    35İzleyin

    Bluetooth: hci_conn: fix the SCO setup context lifetime

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90256
    35İzleyin

    Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90260
    28İzleyin

    btrfs: zoned: don't clobber the extent buffer when zeroing it out

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90268
    32İzleyin

    scsi: sd: Fix error handling in sd_probe() after large pool creation failure

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90286
    35İzleyin

    drm/amdgpu/gfx6: Use PFP on the compute queues too

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90288
    29İzleyin

    phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure

    YüksekCVSS 7,4İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90289
    31İzleyin

    drm/amd/display: Resize MST HDCP per-connector arrays to 32

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90291
    31İzleyin

    module/dups: Fix use-after-free in kmod_dup_req lifetime handling

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90292
    31İzleyin

    RDMA/siw: Fix use-after-free in siw_accept()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90293
    30İzleyin

    IB/isert: post the full-feature receive buffers after session registration

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90294
    30İzleyin

    IB/isert: delay the final Login Response until the session is registered

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90301
    32İzleyin

    ocfs2: o2hb: quiesce negotiate handlers and timeout work

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90308
    31İzleyin

    RDMA/erdma: Hold QP references for AE and CM processing

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90309
    31İzleyin

    RDMA/erdma: Hold CQ references when processing EQ events

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90312
    31İzleyin

    bpf: Check load-acquire src ptr type before the load

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90316
    31İzleyin

    drm/omap: dsi: Do not copy isr table

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90317
    31İzleyin

    bpf: Invalidate RCU pointers after final spin unlock

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90320
    31İzleyin

    ocfs2: validate external xattr entries when reading metadata

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90321
    31İzleyin

    ocfs2: validate inline xattrs during inode block validation

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90324
    31İzleyin

    ublk: check import_ubuf() return value

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90325
    31İzleyin

    blk-cgroup: skip dying blkg in blkcg_activate_policy()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90326
    31İzleyin

    blk-cgroup: fix race between policy activation and blkg destruction

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90329
    35İzleyin

    HID: synchronize input before cleaning up a failed probe

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90332
    32İzleyin

    PCI: dwc: ep: Flush cached MSI write before unmapping the iATU

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90341
    30İzleyin

    firmware: coreboot: Validate table bounds

    YüksekCVSS 7,7İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90343
    31İzleyin

    wifi: cfg80211: stop PMSR before P2P and NAN teardown

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90347
    33İzleyin

    arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90353
    28İzleyin

    wifi: mt76: mt7915: fix ext PHY use-after-free on register error path

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90357
    35İzleyin

    wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90358
    31İzleyin

    bpf, x86: Fix trampoline stack size for 128-bit arguments

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90367
    35İzleyin

    wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90371
    35İzleyin

    wifi: mt76: fix RXDMAD_C buffer recycling race

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90372
    28İzleyin

    wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90379
    35İzleyin

    wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90380
    35İzleyin

    wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90381
    35İzleyin

    wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90383
    31İzleyin

    misc: sgi-gru: remove interrupt-context page-table walks

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-76154
    29İzleyin

    CVE-2026-76154 CVE Record

    YüksekCVSS 7,3İstismar yokEPSS %0

    grafana · grafana oss17 Eyl 2026

  • CVE-2026-90387
    31İzleyin

    swiotlb: Preserve allocation virtual address for dynamic pools

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90388
    31İzleyin

    iommu/dma: Check atomic pool allocation result directly

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-77615
    34İzleyin

    Paella Player: Stored XSS via caption cue text

    YüksekCVSS 8,7İstismar yokEPSS %0

    opencast · opencast17 Eyl 2026

  • CVE-2026-90392
    31İzleyin

    bpf: Fix potential UAF when reading bpf link info

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90398
    33İzleyin

    wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90399
    33İzleyin

    wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90401
    28İzleyin

    md: remove REQ_NOWAIT support from raid1/10/456

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90402
    28İzleyin

    bus: mhi: host: Fix controller cleanup on EDL sysfs failure

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90403
    28İzleyin

    wifi: rtlwifi: pci: fix error path in rtl_pci_probe()

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90407
    30İzleyin

    wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()

    YüksekCVSS 7,7İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90408
    30İzleyin

    wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()

    YüksekCVSS 7,7İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90413
    36İzleyin

    IB/isert: reject login PDUs declaring more data than was received

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90414
    36İzleyin

    IB/isert: reject PDUs declaring more data than was received

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026

  • CVE-2026-90419
    28İzleyin

    nilfs2: prevent out-of-bounds read in super root block parsing

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux17 Eyl 2026