İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.961 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 55 / 80

  • CVE-2026-85885
    35İzleyin

    Microsoft 365 Copilot Elevation of Privilege Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · 365 copilot17 Eyl 2026

  • CVE-2026-85889
    39İzleyin

    Azure AI Foundry Elevation of Privilege Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    microsoft · azure ai foundry17 Eyl 2026

  • CVE-2026-85917
    30İzleyin

    Azure AI Foundry Elevation of Privilege Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    microsoft · foundry17 Eyl 2026

  • CVE-2026-87886
    61Bu hafta

    Local privilege escalation due to insecure file permissions.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0

    acronis · acronis backup17 Eyl 2026

  • CVE-2026-93435
    34İzleyin

    redis-parser through 3.0.0 Denial of Service via Unbounded Recursion

    YüksekCVSS 8,7İstismar yokEPSS %0

    noderedis · redis-parser17 Eyl 2026

  • CVE-2026-50125
    30İzleyin

    MKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion

    YüksekCVSS 7,5İstismar yokEPSS %0

    stackloklabs · mkp17 Eyl 2026

  • CVE-2026-54618
    37İzleyin

    Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user

    KritikCVSS 9,4İstismar yokEPSS %0

    jimprosser · obsidian-web-mcp17 Eyl 2026

  • CVE-2026-69843
    40Planlayın

    Microsoft Fabric Elevation of Privilege Vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    microsoft · fabric17 Eyl 2026

  • CVE-2026-85878
    39İzleyin

    Azure Database for PostgreSQL Elevation of Privilege Vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    microsoft · azure horizondb17 Eyl 2026

  • CVE-2026-93450
    34İzleyin

    go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal

    YüksekCVSS 8,7İstismar yokEPSS %0

    go-openapi · swag17 Eyl 2026

  • CVE-2026-93453
    34İzleyin

    SOGo before 5.12.11 Password Reset Token Interception via Origin Header

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    alinto · sogo17 Eyl 2026

  • CVE-2026-79954
    34İzleyin

    NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

    YüksekCVSS 8,7İstismar yokEPSS %0

    nasa · cryptolib17 Eyl 2026

  • CVE-2025-55787
    39İzleyin

    In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.

    KritikCVSS 9,8İstismar yokEPSS %0

    17 Eyl 2026

  • CVE-2026-45143
    36İzleyin

    Chamilo LMS: Student-to-admin stored XSS in private messages via v-html

    KritikCVSS 9,0İstismar yokEPSS %0

    chamilo · chamilo-lms17 Eyl 2026

  • CVE-2026-54460
    39İzleyin

    OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover

    KritikCVSS 9,8İstismar yokEPSS %0

    open-reception · appointment-booking-software17 Eyl 2026

  • CVE-2026-54596
    32İzleyin

    ITFlow: Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltration

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    itflow-org · itflow17 Eyl 2026

  • CVE-2026-93393
    36İzleyin

    Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream

    KritikCVSS 9,2İstismar yokEPSS %0

    mongodb · c driver17 Eyl 2026

  • CVE-2026-93455
    28İzleyin

    django-page-cms through 2.0.13 Unauthorized Content Access via Staff Account

    YüksekCVSS 7,1İstismar yokEPSS %0

    batiste · django-page-cms17 Eyl 2026

  • CVE-2026-93456
    33İzleyin

    django-page-cms through 2.0.13 CSRF via admin mutation views

    YüksekCVSS 8,4İstismar yokEPSS %0

    batiste · django-page-cms17 Eyl 2026

  • CVE-2026-93467
    37İzleyin

    HGiga｜OAKlouds - Insecure Deserialization

    KritikCVSS 9,3İstismar yokEPSS %0

    hgiga · oaklouds-custom_page-2.017 Eyl 2026

  • CVE-2026-93468
    34İzleyin

    HGiga｜OAKlouds - Arbitrary File Read

    YüksekCVSS 8,7İstismar yokEPSS %0

    hgiga · oaklouds-bulletin_v3-2.017 Eyl 2026

  • CVE-2026-69399
    39İzleyin

    Azure Arc Elevation of Privilege Vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    microsoft · azure arc17 Eyl 2026

  • CVE-2026-69865
    40Planlayın

    Microsoft Container Registry Elevation of Privilege Vulnerability

    KritikCVSS 10,0İstismar yokEPSS %0

    microsoft · azure container registry17 Eyl 2026

  • CVE-2026-78501
    34İzleyin

    Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability

    YüksekCVSS 8,6İstismar yokEPSS %0

    microsoft · 365 copilot chat17 Eyl 2026

  • CVE-2026-87701
    38İzleyin

    Azure Cosmos DB Elevation of Privilege Vulnerability

    KritikCVSS 9,6İstismar yokEPSS %0

    microsoft · azure cosmos db17 Eyl 2026

  • CVE-2026-93436
    34İzleyin

    vLLM through 0.29.0 Memory Exhaustion via Rejected Requests

    YüksekCVSS 8,7İstismar yokEPSS %0

    vllm · vllm17 Eyl 2026

  • CVE-2026-62874
    39İzleyin

    Azure Billing Elevation of Privilege Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    microsoft · azure billing18 Eyl 2026

  • CVE-2026-17086
    35İzleyin

    ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Content

    YüksekCVSS 8,8İstismar yokEPSS %1

    shortpixel · shortpixel image optimizer – optimize images, convert webp & avif18 Eyl 2026

  • CVE-2026-85887
    30İzleyin

    M365 Copilot Information Disclosure Vulnerability

    YüksekCVSS 7,7İstismar yokEPSS %0

    microsoft · 365 copilot18 Eyl 2026

  • CVE-2026-93452
    34İzleyin

    snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compress

    YüksekCVSS 8,7İstismar yokEPSS %0

    xerial · snappy-java18 Eyl 2026

  • CVE-2026-18911
    31İzleyin

    ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send req

    YüksekCVSS 7,5İstismar yokEPSS %1

    zohocorp · manageengine datasecurity plus18 Eyl 2026

  • CVE-2026-18912
    31İzleyin

    ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticate

    YüksekCVSS 7,7İstismar yokEPSS %2

    zohocorp · manageengine datasecurity plus18 Eyl 2026

  • CVE-2026-81810
    28İzleyin

    All-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key Disclosure

    YüksekCVSS 7,2İstismar yokEPSS %0

    unknown · all-in-one wp migration and backup18 Eyl 2026

  • CVE-2026-84738
    36İzleyin

    AF Companion < 2.2.0 - Shop Manager+ Arbitrary File Upload to RCE

    KritikCVSS 9,1İstismar yokEPSS %0

    unknown · af companion18 Eyl 2026

  • CVE-2026-85122
    35İzleyin

    Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored XSS via Form Type Confusion

    YüksekCVSS 8,8İstismar yokEPSS %0

    unknown · easy form builder by whitestudio18 Eyl 2026

  • CVE-2026-85127
    35İzleyin

    VikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored XSS via SVG Chat Attachment

    YüksekCVSS 8,8İstismar yokEPSS %0

    unknown · vikbooking hotel booking engine & pms18 Eyl 2026

  • CVE-2026-87767
    34İzleyin

    WP Shortcut Link <= 1.2.0 - Unauthenticated SQL Injection via url

    YüksekCVSS 8,6İstismar yokEPSS %0

    unknown · wp shortcut link and advertisement baner18 Eyl 2026

  • CVE-2026-87770
    34İzleyin

    Price Drop Alert for WooCommerce <= 1.1 - Unauthenticated SQL Injection via product

    YüksekCVSS 8,6İstismar yokEPSS %0

    unknown · price drop alert for woo commerce18 Eyl 2026

  • CVE-2026-87771
    34İzleyin

    Product Question and Answer <= 1.1.0 - Unauthenticated SQL Injection via p_id and read

    YüksekCVSS 8,6İstismar yokEPSS %0

    unknown · product question and answer18 Eyl 2026

  • CVE-2026-87774
    34İzleyin

    Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQL Injection via week

    YüksekCVSS 8,6İstismar yokEPSS %0

    unknown · tz weekly radio schedule18 Eyl 2026

  • CVE-2026-87775
    34İzleyin

    Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQLi via tzwrs_update_cell

    YüksekCVSS 8,6İstismar yokEPSS %0

    unknown · tz weekly radio schedule18 Eyl 2026

  • CVE-2026-88825
    35İzleyin

    iGMS Direct Booking < 2.0 - Unauthenticated Stored XSS via Widget Settings

    YüksekCVSS 8,8İstismar yokEPSS %0

    unknown · igms direct booking18 Eyl 2026

  • CVE-2026-90978
    28İzleyin

    Filter Gallery < 1.1.5 - Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion via Fail-Open Nonce Check

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · filter gallery18 Eyl 2026

  • CVE-2026-89413
    32İzleyin

    Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Deletion via 'ufg_gallery_id' Parameter

    YüksekCVSS 8,1İstismar yokEPSS %0

    farazfrank · filter gallery18 Eyl 2026

  • CVE-2026-92619
    28İzleyin

    Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    wpdevelop · booking calendar18 Eyl 2026

  • CVE-2026-12384
    35İzleyin

    Broken Access Control in TECHIN2B Application

    YüksekCVSS 8,8İstismar yokEPSS %0

    techin2b · techin2b application18 Eyl 2026

  • CVE-2026-12954
    35İzleyin

    Mapster WP Maps <= 1.23.0 - Authenticated (Subscriber+) Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    mapster · mapster wp maps18 Eyl 2026

  • CVE-2026-14323
    30İzleyin

    Printcart Web to Print Product Designer for WooCommerce <= 2.8.5 - Unauthenticated Arbitrary File Read via 'folder' and 'mockups' Parameters

    YüksekCVSS 7,5İstismar yokEPSS %1

    printcart · printcart store – web to print product designer for woocommerce18 Eyl 2026

  • CVE-2026-15275
    30İzleyin

    WP Multi Store Locator Pro <= 4.5.1 - Unauthenticated SQL Injection via 'store_locator_search_radius' Parameter

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpexpertsio · wp multi store locator pro18 Eyl 2026

  • CVE-2026-18442
    30İzleyin

    WCFM Marketplace <= 3.8.2 - Unauthenticated SQL Injection via 'wcfmmp_user_location_lat' / 'wcfmmp_user_location_lng' Parameter

    YüksekCVSS 7,5İstismar yokEPSS %0

    wclovers · wcfm marketplace – multivendor marketplace for woocommerce18 Eyl 2026

  • CVE-2026-75157
    30İzleyin

    Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    apache software foundation · apache airflow18 Eyl 2026

  • CVE-2026-85705
    30İzleyin

    Location Manager <= 2.3.38 - Unauthenticated SQL Injection via 'latitude' and 'longitude' REST API Parameters

    YüksekCVSS 7,5İstismar yokEPSS %0

    ayecode ltd · location manager18 Eyl 2026

  • CVE-2026-93494
    30İzleyin

    Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminated

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat build of apache camel for spring boot 418 Eyl 2026

  • CVE-2026-13635
    21İzleyin

    An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-7280

    OrtaCVSS 5,3İstismar yokEPSS %0

    synology · diskstation manager (dsm)18 Eyl 2026

  • CVE-2026-13639
    39İzleyin

    An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009

    KritikCVSS 9,8İstismar yokEPSS %0

    synology · diskstation manager (dsm)18 Eyl 2026

  • CVE-2026-13673
    35İzleyin

    An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM) before 7.2.1-69057-

    YüksekCVSS 8,8İstismar yokEPSS %0

    synology · diskstation manager (dsm)18 Eyl 2026

  • CVE-2026-13684
    39İzleyin

    An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9,

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    synology · diskstation manager (dsm)18 Eyl 2026

  • CVE-2026-40530
    32İzleyin

    An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in Synology DiskStation Manager (DSM) before 7.2.1

    YüksekCVSS 8,0İstismar yokEPSS %0

    synology · diskstation manager (dsm)18 Eyl 2026

  • CVE-2026-40539
    28İzleyin

    An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and

    YüksekCVSS 7,1İstismar yokEPSS %0

    synology · diskstation manager (dsm)18 Eyl 2026

  • CVE-2026-4036
    26İzleyin

    An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in Synology DiskStation

    OrtaCVSS 6,5İstismar yokEPSS %0

    synology · diskstation manager (dsm)18 Eyl 2026

  • CVE-2026-6205
    32İzleyin

    An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-7280

    YüksekCVSS 8,1İstismar yokEPSS %0

    synology · diskstation manager (dsm)18 Eyl 2026

  • CVE-2026-83561
    28İzleyin

    Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regex

    YüksekCVSS 7,2İstismar yokEPSS %0

    complianz · complianz gdpr/ccpa cookie consent banner18 Eyl 2026

  • CVE-2026-85410
    32İzleyin

    Master Addons for Elementor <= 3.2.2 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification/Deletion via 'popup_id' Parameter

    YüksekCVSS 8,1İstismar yokEPSS %0

    pixarlabs · master addons for elementor – elementor addons, widgets, mega menu builder, popup builder, widget builder & template kits18 Eyl 2026

  • CVE-2026-93485
    28İzleyin

    WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    automattic · wordpress18 Eyl 2026

  • CVE-2026-15579
    35İzleyin

    An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length dur

    YüksekCVSS 8,8İstismar yokEPSS %0

    moxa · tn-4500b series18 Eyl 2026

  • CVE-2026-15797
    25İzleyin

    Popup Maker <= 1.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via post_title

    OrtaCVSS 6,4İstismar yokEPSS %0

    danieliser · popup maker – boost sales, conversions, optins, subscribers with the ultimate wp popup builder18 Eyl 2026

  • CVE-2026-18405
    28İzleyin

    Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content

    YüksekCVSS 7,2İstismar yokEPSS %0

    jegtheme · jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress18 Eyl 2026

  • CVE-2026-87915
    28İzleyin

    Popup Maker <= 1.24.0 - Unauthenticated Stored Cross-Site Scripting via values[Name] Parameter

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    danieliser · popup maker – boost sales, conversions, optins, subscribers with the ultimate wp popup builder18 Eyl 2026

  • CVE-2026-93563
    30İzleyin

    Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dos

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat build of apache camel for spring boot 418 Eyl 2026

  • CVE-2026-93572
    30İzleyin

    Io.netty/netty-codec-redis: netty: redisarrayaggregator nested resp headers multiply patched preallocation limits

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat build of apache camel for spring boot 418 Eyl 2026

  • CVE-2026-93575
    30İzleyin

    Io.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoder

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat amq broker 718 Eyl 2026

  • CVE-2026-67100
    39İzleyin

    HCL BigFix Service Management is affected by multiple security vulnerabilities.

    KritikCVSS 9,8İstismar yokEPSS %0

    hcltech · bigfix service management18 Eyl 2026

  • CVE-2026-67102
    32İzleyin

    HCL BigFix Service Management is affected by multiple security vulnerabilities.

    YüksekCVSS 8,1İstismar yokEPSS %0

    hcltech · bigfix service management18 Eyl 2026

  • CVE-2026-89058
    29İzleyin

    Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config

    YüksekCVSS 7,4İstismar yokEPSS %0

    red hat · resteasy18 Eyl 2026

  • CVE-2026-89059
    30İzleyin

    Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · resteasy18 Eyl 2026

  • CVE-2026-28197
    37İzleyin

    Privilege Escalation via Argument Injection in NetBackup Flex OS Shell

    KritikCVSS 9,4İstismar yokEPSS %0

    cohesity · netbackup flex os18 Eyl 2026

  • CVE-2026-28198
    37İzleyin

    Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell

    KritikCVSS 9,4İstismar yokEPSS %0

    cohesity · netbackup flex os18 Eyl 2026

  • CVE-2026-56590
    39İzleyin

    HCL BigFix Service Management is affected by multiple security vulnerabilities.

    KritikCVSS 9,8İstismar yokEPSS %0

    hcltech · bigfix service management18 Eyl 2026

  • CVE-2026-56592
    39İzleyin

    HCL BigFix Service Management is affected by multiple security vulnerabilities.

    KritikCVSS 9,8İstismar yokEPSS %0

    hcltech · bigfix service management18 Eyl 2026

  • CVE-2026-87743
    30İzleyin

    Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · exploit intelligence18 Eyl 2026

  • CVE-2023-5778
    36İzleyin

    Missing Length Check

    KritikCVSS 9,2İstismar yokEPSS %0

    abb · freelance controller dcp18 Eyl 2026

  • CVE-2026-79294
    24İzleyin

    Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the H

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    18 Eyl 2026

  • CVE-2026-88622
    35İzleyin

    NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.

    YüksekCVSS 8,8İstismar yokEPSS %1

    18 Eyl 2026

  • CVE-2026-88623
    30İzleyin

    NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read.

    YüksekCVSS 7,5İstismar yokEPSS %0

    18 Eyl 2026

  • CVE-2026-93019
    36İzleyin

    Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

    KritikCVSS 9,1İstismar yokEPSS %0

    18 Eyl 2026

  • CVE-2026-93560
    30İzleyin

    Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dos

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat build of apache camel for spring boot 418 Eyl 2026

  • CVE-2026-93591
    28İzleyin

    SiYuan before 3.8.3 SQL Injection via unescaped tag in graph.go

    YüksekCVSS 7,2İstismar yokEPSS %0

    siyuan-note · siyuan18 Eyl 2026

  • CVE-2026-93593
    34İzleyin

    ArcadeDB before 26.9.1 TimeSeries ACL Bypass via Type Permission

    YüksekCVSS 8,6İstismar yokEPSS %0

    arcadedata · arcadedb18 Eyl 2026

  • CVE-2026-93594
    28İzleyin

    ArcadeDB before 26.9.1 ACL Bypass via Index and TimeSeries

    YüksekCVSS 7,1İstismar yokEPSS %0

    arcadedata · arcadedb18 Eyl 2026

  • CVE-2026-93595
    28İzleyin

    ArcadeDB before 26.9.1 ACL Bypass via query_database Tool

    YüksekCVSS 7,1İstismar yokEPSS %0

    arcadedata · arcadedb18 Eyl 2026

  • CVE-2026-93598
    28İzleyin

    ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle

    YüksekCVSS 7,1İstismar yokEPSS %0

    arcadedata · arcadedb18 Eyl 2026

  • CVE-2026-93599
    34İzleyin

    rustls-webpki before 0.103.13 Panic via empty BIT STRING

    YüksekCVSS 8,7İstismar yokEPSS %0

    rustls · webpki18 Eyl 2026

  • CVE-2026-93603
    40Planlayın

    vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Function

    KritikCVSS 10,0İstismar yokEPSS %0

    patriksimek · vm218 Eyl 2026

  • CVE-2026-93605
    40Planlayın

    vm2 NodeVM before 3.12.1 Remote Code Execution via child_process

    KritikCVSS 10,0İstismar yokEPSS %0

    patriksimek · vm218 Eyl 2026

  • CVE-2026-93606
    40Planlayın

    vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species

    KritikCVSS 10,0İstismar yokEPSS %0

    patriksimek · vm218 Eyl 2026

  • CVE-2026-77927
    28İzleyin

    ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpoint

    YüksekCVSS 7,1İstismar yokEPSS %0

    macwarrior · clipbucket-v518 Eyl 2026

  • CVE-2026-77928
    28İzleyin

    ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint

    YüksekCVSS 7,1İstismar yokEPSS %0

    macwarrior · clipbucket-v518 Eyl 2026

  • CVE-2026-77929
    34İzleyin

    ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint

    YüksekCVSS 8,7İstismar yokEPSS %0

    macwarrior · clipbucket-v518 Eyl 2026

  • CVE-2026-81627
    32İzleyin

    Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram

    YüksekCVSS 8,2İstismar yokEPSS %0

    red hat · red hat enterprise linux 1018 Eyl 2026

  • CVE-2026-93576
    30İzleyin

    Io.netty/netty-codec-smtp: netty netty-codec-smtp — smtp command-name field is not crlf-validated (incomplete fix of cve-2025-59419)

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat build of apache camel for spring boot 418 Eyl 2026