Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.960 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 57 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2026-11727İstismar yok | IBM MQ for HPE NonStop is vulnerable to a denial of service issueibm · mq for hpe nonstop · CWE-122 | Yüksek8,1 | — | %0,6 | 18 Eyl 2026 |
31İzleyin | CVE-2026-63419İstismar yok | OpenImageIO: IFF ZBUFFER tile read writes past caller tile bufferopenimageio · openimageio · CWE-787 | Yüksek7,8 | — | %0,2 | 18 Eyl 2026 |
31İzleyin | CVE-2026-63422İstismar yok | OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds writeopenimageio · openimageio · CWE-122 | Yüksek7,8 | — | %0,2 | 18 Eyl 2026 |
33İzleyin | CVE-2026-63638İstismar yok | OpenImageIO: Cineon invalid bit depth heap out-of-bounds writeopenimageio · openimageio · CWE-787 | Yüksek8,3 | — | %0,4 | 18 Eyl 2026 |
30İzleyin | CVE-2026-67549İstismar yok | OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds writeopenimageio · openimageio · CWE-122 | Yüksek7,6 | — | %0,2 | 18 Eyl 2026 |
34İzleyin | CVE-2026-17619İstismar yok | The IBM Platform RTM is affected by an SQL injection vulnerabilityibm · spectrum-lsf : ibm platform rtm · CWE-89 | Yüksek8,6 | — | %0,4 | 18 Eyl 2026 |
34İzleyin | CVE-2026-93687Kavram kanıtı | braces through 3.0.3 Stack Overflow via Deeply Nested Patternsmicromatch · braces · CWE-674 | Yüksek8,7 | — | %0,7 | 18 Eyl 2026 |
39İzleyin | CVE-2026-58264İstismar yok | FluidSynth: Heap-based buffer overrunfluidsynth · fluidsynth · CWE-122 | Kritik9,8 | — | %0,5 | 18 Eyl 2026 |
31İzleyin | CVE-2026-61714İstismar yok | FluidSynth: Heap Buffer Overflow in MIDI Playerfluidsynth · fluidsynth · CWE-122 | Yüksek7,8 | — | %0,1 | 18 Eyl 2026 |
32İzleyin | CVE-2026-61721İstismar yok | FluidSynth: Heap-based buffer overrun for DLS samplesfluidsynth · fluidsynth · CWE-122 | Yüksek8,0 | — | %0,1 | 18 Eyl 2026 |
39İzleyin | CVE-2026-61781İstismar yok | pg_partman has privilege escalation through SQL injection in create_partition_time()pgpartman · pg_partman · CWE-89 | Kritik9,9 | — | %0,8 | 18 Eyl 2026 |
34İzleyin | CVE-2026-61817İstismar yok | pg_partman privilege escalation via SQL injection in several functions via time decoderpgpartman · pg_partman · CWE-89 | Yüksek8,5 | — | %0,7 | 18 Eyl 2026 |
34İzleyin | CVE-2026-61818İstismar yok | pg_partman SQL injection in undo partition time encoderpgpartman · pg_partman · CWE-89 | Yüksek8,5 | — | %0,5 | 18 Eyl 2026 |
34İzleyin | CVE-2026-61819İstismar yok | pg_partman privilege escalation via SQL injection in when using pg_jobmon and encountering exceptionpgpartman · pg_partman · CWE-89 | Yüksek8,5 | — | %0,7 | 18 Eyl 2026 |
34İzleyin | CVE-2026-61820İstismar yok | pg_partman privilege escalation via SQL injection when inheriting template propertiespgpartman · pg_partman · CWE-89 | Yüksek8,5 | — | %0,7 | 18 Eyl 2026 |
34İzleyin | CVE-2026-61821İstismar yok | pg_partman authorization bypass to move child tables between schemas during retentionpgpartman · pg_partman · CWE-862 | Yüksek8,5 | — | %0,3 | 18 Eyl 2026 |
37İzleyin | CVE-2026-63647İstismar yok | CordysCRM SSE Notification Stream Hijack via `/sse/subscribe`1panel-dev · cordyscrm · CWE-306 | Kritik9,3 | — | %0,4 | 18 Eyl 2026 |
36İzleyin | CVE-2026-75878İstismar yok | IBM Sterling File Gateway is Vulnerable to Authentication Bypassibm · sterling file gateway · CWE-287 | Kritik9,1 | — | %0,6 | 18 Eyl 2026 |
30İzleyin | CVE-2026-92708İstismar yok | devalue: Cross-request process memory disclosure in devalue when `stringify` / `uneval` serialize Node Bufferssveltejs · devalue · CWE-200 | Yüksek7,5 | — | %0,7 | 18 Eyl 2026 |
35İzleyin | CVE-2026-93031İstismar yok | WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Importwp cloud plugins/_deleeuw_ · use-your-drive | google drive plugin for wordpress · CWE-434 | Yüksek8,8 | — | %0,5 | 18 Eyl 2026 |
32İzleyin | CVE-2026-93838İstismar yok | SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idxsgl-project · sglang · CWE-770 | Yüksek8,2 | — | %0,6 | 18 Eyl 2026 |
37İzleyin | CVE-2026-93839İstismar yok | LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpointmodeltc · lightllm · CWE-306 | Kritik9,3 | — | %0,7 | 18 Eyl 2026 |
36İzleyin | CVE-2026-93868İstismar yok | Cotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNGcotonti · cotonti · CWE-338 | Kritik9,2 | — | %0,7 | 18 Eyl 2026 |
30İzleyin | CVE-2026-93872İstismar yok | Cotonti 1.0.0 PHP Object Injection via Comments Plugin Edit Action cb Parametercotonti · cotonti · CWE-502 | Yüksek7,7 | — | %0,7 | 18 Eyl 2026 |
30İzleyin | GHSA-39wr-7q6h-cf68İstismar yok | LMDeploy has an SSRF bypassPyPI · lmdeploy · CWE-436 | Yüksek7,5 | — | — | 18 Eyl 2026 |
31İzleyin | CVE-2026-46655İstismar yok | virtio-win: Integer overflow causing a heap overflow in Viosock drivervirtio-win · kvm-guest-drivers-windows · CWE-122 | Yüksek7,8 | — | %0,1 | 18 Eyl 2026 |
32İzleyin | CVE-2026-61833İstismar yok | zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletionproject-zot · zot · CWE-285 | Yüksek8,1 | — | %0,8 | 18 Eyl 2026 |
39İzleyin | CVE-2026-77240İstismar yok | WACRM: Database-layer authorization bypassesarnasdon · wacrm · CWE-639 | Kritik9,9 | — | %0,5 | 18 Eyl 2026 |
30İzleyin | CVE-2026-91149İstismar yok | Cockpit: cockpit: denial of service via unbounded connection thread spawningred hat · red hat enterprise linux 10 · CWE-770 | Yüksek7,5 | — | %0,3 | 18 Eyl 2026 |
34İzleyin | CVE-2026-68928İstismar yok | Acode: Exported TerminalService (bundled terminal plugin) lets any installed app execute arbitrary shell commands as Acodeacode-foundation · acode · CWE-749 | Yüksek8,6 | — | %0,1 | 18 Eyl 2026 |
31İzleyin | CVE-2026-88097İstismar yok | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerabilitymicrosoft · edge chromium · CWE-416 | Yüksek7,8 | — | %0,2 | 18 Eyl 2026 |
34İzleyin | CVE-2026-93738İstismar yok | Totolink A3002MU formSchedule buffer overflowtotolink · a3002mu · CWE-119 | Yüksek8,6 | — | %0,8 | 18 Eyl 2026 |
39İzleyin | CVE-2025-66455İstismar yok | LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.pyinternlm · lmdeploy · CWE-502 | Kritik9,8 | — | %1,2 | 18 Eyl 2026 |
28İzleyin | CVE-2026-62279İstismar yok | LubeLogger: IDOR in DuplicateRecordsToOtherVehicles Allows Copying Records from Any User's Vehicle Without Ownership Checkhargata · lubelog · CWE-639 | Yüksek7,1 | — | %0,4 | 18 Eyl 2026 |
33İzleyin | CVE-2026-63199İstismar yok | Perses: Missing authorization in datasource proxy allows cross-scope secret disclosureperses · perses · CWE-862 | Yüksek8,3 | — | %0,2 | 18 Eyl 2026 |
34İzleyin | CVE-2026-93739İstismar yok | Totolink A3002MU formWlAc buffer overflowtotolink · a3002mu · CWE-119 | Yüksek8,6 | — | %0,8 | 18 Eyl 2026 |
37İzleyin | CVE-2026-93740İstismar yok | Totolink A3002MU formWlEncrypt buffer overflowtotolink · a3002mu · CWE-119 | Kritik9,3 | — | %0,8 | 18 Eyl 2026 |
27İzleyin | CVE-2026-77396Kavram kanıtı | PJSIP: Heap buffer overflow in the AVI parserteluu · pjsip · CWE-122 | Orta6,9 | — | %0,1 | 18 Eyl 2026 |
29İzleyin | CVE-2026-84975İstismar yok | PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)teluu · pjsip · CWE-295 | Yüksek7,4 | — | %0,2 | 18 Eyl 2026 |
36İzleyin | CVE-2026-92701İstismar yok | Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier pathultravioletrs · cocos · CWE-346 | Kritik9,1 | — | %0,2 | 18 Eyl 2026 |
36İzleyin | CVE-2026-92702İstismar yok | Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP pathultravioletrs · cocos · CWE-346 | Kritik9,1 | — | %0,2 | 18 Eyl 2026 |
34İzleyin | CVE-2026-93748İstismar yok | http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stalekornelski · http-cache-semantics · CWE-524 | Yüksek8,7 | — | %0,5 | 18 Eyl 2026 |
34İzleyin | CVE-2026-93922İstismar yok | SiYuan through 3.8.4 Stored XSS via notebook namessiyuan-note · siyuan · CWE-79 | Yüksek8,6 | — | %0,8 | 18 Eyl 2026 |
34İzleyin | CVE-2026-93923İstismar yok | SiYuan through 3.8.4 Stored XSS via Heading Style Attributesiyuan-note · siyuan · CWE-79 | Yüksek8,6 | — | %0,5 | 18 Eyl 2026 |
30İzleyin | CVE-2026-75895İstismar yok | Out of bounds read at smpp34_unpack()osmocom · libsmpp34 · CWE-125 | Yüksek7,5 | — | %0,4 | 18 Eyl 2026 |
39İzleyin | CVE-2026-80441İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-89 | Kritik9,8 | — | %0,5 | 18 Eyl 2026 |
35İzleyin | CVE-2026-80442İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-78 | Yüksek8,8 | — | %0,6 | 18 Eyl 2026 |
35İzleyin | CVE-2026-81623İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-78 | Yüksek8,8 | — | %0,3 | 18 Eyl 2026 |
34İzleyin | CVE-2026-81626İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-89 | Yüksek8,6 | — | %0,3 | 18 Eyl 2026 |
35İzleyin | CVE-2026-81656İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-89 | Yüksek8,8 | — | %0,4 | 18 Eyl 2026 |
39İzleyin | CVE-2026-81657İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-502 | Kritik9,8 | — | %0,8 | 18 Eyl 2026 |
28İzleyin | CVE-2026-81669İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-78 | Yüksek7,2 | — | %1,3 | 18 Eyl 2026 |
35İzleyin | CVE-2026-81933İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-89 | Yüksek8,8 | — | %0,4 | 18 Eyl 2026 |
28İzleyin | CVE-2026-81937İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-78 | Yüksek7,2 | — | %1,4 | 18 Eyl 2026 |
39İzleyin | CVE-2026-82340İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-94 | Kritik9,8 | — | %0,6 | 18 Eyl 2026 |
38İzleyin | CVE-2026-82832İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-79 | Kritik9,6 | — | %0,6 | 18 Eyl 2026 |
35İzleyin | CVE-2026-82885İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-862 | Yüksek8,8 | — | %0,4 | 18 Eyl 2026 |
35İzleyin | CVE-2026-82887İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-78 | Yüksek8,8 | — | %0,7 | 18 Eyl 2026 |
32İzleyin | CVE-2026-82892İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-78 | Yüksek8,1 | — | %0,6 | 18 Eyl 2026 |
31İzleyin | CVE-2026-82893İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-269 | Yüksek7,8 | — | %0,1 | 18 Eyl 2026 |
30İzleyin | CVE-2026-82896İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-22 | Yüksek7,6 | — | %0,5 | 18 Eyl 2026 |
39İzleyin | CVE-2026-82967İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-306 | Kritik9,8 | — | %0,7 | 18 Eyl 2026 |
36İzleyin | CVE-2026-84031İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-79 | Kritik9,0 | — | %0,6 | 18 Eyl 2026 |
35İzleyin | CVE-2026-84034İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-798 | Yüksek8,8 | — | %0,4 | 18 Eyl 2026 |
29İzleyin | CVE-2026-84036İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-285 | Yüksek7,4 | — | %0,3 | 18 Eyl 2026 |
39İzleyin | CVE-2026-84064İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-89 | Kritik9,9 | — | %0,6 | 18 Eyl 2026 |
35İzleyin | CVE-2026-84070İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-79 | Yüksek8,9 | — | %0,5 | 18 Eyl 2026 |
28İzleyin | CVE-2026-84071İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-78 | Yüksek7,2 | — | %1,4 | 18 Eyl 2026 |
36İzleyin | CVE-2026-84073İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-89 | Kritik9,1 | — | %0,4 | 18 Eyl 2026 |
35İzleyin | CVE-2026-84074İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-79 | Yüksek8,9 | — | %0,5 | 18 Eyl 2026 |
39İzleyin | CVE-2026-84075İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-306 | Kritik9,9 | — | %0,5 | 18 Eyl 2026 |
30İzleyin | CVE-2026-84076İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-285 | Yüksek7,6 | — | %0,3 | 18 Eyl 2026 |
32İzleyin | CVE-2026-84077İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-352 | Yüksek8,1 | — | %0,2 | 18 Eyl 2026 |
39İzleyin | CVE-2026-84078İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-306 | Kritik9,9 | — | %0,4 | 18 Eyl 2026 |
32İzleyin | CVE-2026-84081İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-295 | Yüksek8,1 | — | %0,2 | 18 Eyl 2026 |
39İzleyin | CVE-2026-84082İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-89 | Kritik9,8 | — | %0,6 | 18 Eyl 2026 |
31İzleyin | CVE-2026-84083İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-269 | Yüksek7,8 | — | %0,1 | 18 Eyl 2026 |
35İzleyin | CVE-2026-84084İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-352 | Yüksek8,8 | — | %0,2 | 18 Eyl 2026 |
32İzleyin | CVE-2026-84085İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-78 | Yüksek8,1 | — | %0,5 | 18 Eyl 2026 |
28İzleyin | CVE-2026-84086İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-22 | Yüksek7,2 | — | %0,8 | 18 Eyl 2026 |
31İzleyin | CVE-2026-84089İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-269 | Yüksek7,8 | — | %0,1 | 18 Eyl 2026 |
30İzleyin | CVE-2026-84105İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-89 | Yüksek7,7 | — | %0,4 | 18 Eyl 2026 |
35İzleyin | CVE-2026-84106İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-79 | Yüksek8,9 | — | %0,5 | 18 Eyl 2026 |
32İzleyin | CVE-2026-84108İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-79 | Yüksek8,1 | — | %0,6 | 18 Eyl 2026 |
30İzleyin | CVE-2026-84239İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-89 | Yüksek7,6 | — | %0,5 | 18 Eyl 2026 |
32İzleyin | CVE-2026-84241İstismar yok | IBM Guardium Data Protection is affected by multiple vulnerabilities.ibm · guardium data protection · CWE-285 | Yüksek8,1 | — | %0,4 | 18 Eyl 2026 |
28İzleyin | CVE-2026-57223İstismar yok | Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalationoisf · suricata · CWE-428 | Yüksek7,0 | — | %0,1 | 18 Eyl 2026 |
30İzleyin | CVE-2026-57227İstismar yok | Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messagesoisf · suricata · CWE-400 | Yüksek7,5 | — | %0,7 | 18 Eyl 2026 |
36İzleyin | CVE-2026-57228İstismar yok | Suricata smtp/mime: heap out-of-bounds read quoted-printable decoderoisf · suricata · CWE-125 | Kritik9,1 | — | %0,4 | 18 Eyl 2026 |
30İzleyin | CVE-2026-63446İstismar yok | Suricata app-layer: passed flows can retain transactions, causing resource exhaustionoisf · suricata · CWE-401 | Yüksek7,5 | — | %0,6 | 18 Eyl 2026 |
30İzleyin | CVE-2026-63447İstismar yok | Suricata ftp: crafted FTP traffic can cause quadratic CPU consumptionoisf · suricata · CWE-407 | Yüksek7,5 | — | %0,6 | 18 Eyl 2026 |
30İzleyin | CVE-2026-63448İstismar yok | Suricata smb: some SMB flows can cause resource exhaustionoisf · suricata · CWE-400 | Yüksek7,5 | — | %0,4 | 18 Eyl 2026 |
30İzleyin | CVE-2026-63452İstismar yok | Suricata http1: repeated brotli compression bombs can cause excessive CPU consumptionoisf · suricata · CWE-400 | Yüksek7,5 | — | %0,6 | 18 Eyl 2026 |
30İzleyin | CVE-2026-71418İstismar yok | Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumptionoisf · suricata · CWE-407 | Yüksek7,5 | — | %0,6 | 18 Eyl 2026 |
30İzleyin | CVE-2026-71855İstismar yok | Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow stateoisf · suricata · CWE-697 | Yüksek7,5 | — | %0,3 | 18 Eyl 2026 |
37İzleyin | CVE-2026-75885İstismar yok | Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpointred hat · red hat openshift container platform 4 · CWE-918 | Kritik9,3 | — | %0,7 | 18 Eyl 2026 |
28İzleyin | CVE-2026-13354İstismar yok | Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Unauthenticated Stored Cross-Site Scripting via Comment Contentgabelivan · asset cleanup: page speed booster · CWE-79 | Yüksek7,2 | — | %0,4 | 18 Eyl 2026 |
40Planlayın | CVE-2026-84434Kavram kanıtı | Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Fieldgravity forms · gravity forms · CWE-434 | Kritik9,8 | — | %3,9 | 18 Eyl 2026 |
30İzleyin | CVE-2026-87909İstismar yok | WP Photo Album Plus <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injectionopajaap · wp photo album plus · CWE-74 | Yüksek7,5 | — | %0,9 | 18 Eyl 2026 |
36İzleyin | CVE-2026-89274Kavram kanıtı | WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Contentbrechtvds · wp recipe maker · CWE-94 | Kritik9,1 | — | %0,6 | 18 Eyl 2026 |
- CVE-2026-1172732İzleyin
IBM MQ for HPE NonStop is vulnerable to a denial of service issue
YüksekCVSS 8,1İstismar yokEPSS %0ibm · mq for hpe nonstop18 Eyl 2026
- CVE-2026-6341931İzleyin
OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer
YüksekCVSS 7,8İstismar yokEPSS %0openimageio · openimageio18 Eyl 2026
- CVE-2026-6342231İzleyin
OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write
YüksekCVSS 7,8İstismar yokEPSS %0openimageio · openimageio18 Eyl 2026
- CVE-2026-6363833İzleyin
OpenImageIO: Cineon invalid bit depth heap out-of-bounds write
YüksekCVSS 8,3İstismar yokEPSS %0openimageio · openimageio18 Eyl 2026
- CVE-2026-6754930İzleyin
OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write
YüksekCVSS 7,6İstismar yokEPSS %0openimageio · openimageio18 Eyl 2026
- CVE-2026-1761934İzleyin
The IBM Platform RTM is affected by an SQL injection vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0ibm · spectrum-lsf : ibm platform rtm18 Eyl 2026
- CVE-2026-9368734İzleyin
braces through 3.0.3 Stack Overflow via Deeply Nested Patterns
YüksekCVSS 8,7Kavram kanıtıEPSS %0micromatch · braces18 Eyl 2026
- CVE-2026-5826439İzleyin
FluidSynth: Heap-based buffer overrun
KritikCVSS 9,8İstismar yokEPSS %0fluidsynth · fluidsynth18 Eyl 2026
- CVE-2026-6171431İzleyin
FluidSynth: Heap Buffer Overflow in MIDI Player
YüksekCVSS 7,8İstismar yokEPSS %0fluidsynth · fluidsynth18 Eyl 2026
- CVE-2026-6172132İzleyin
FluidSynth: Heap-based buffer overrun for DLS samples
YüksekCVSS 8,0İstismar yokEPSS %0fluidsynth · fluidsynth18 Eyl 2026
- CVE-2026-6178139İzleyin
pg_partman has privilege escalation through SQL injection in create_partition_time()
KritikCVSS 9,9İstismar yokEPSS %0pgpartman · pg_partman18 Eyl 2026
- CVE-2026-6181734İzleyin
pg_partman privilege escalation via SQL injection in several functions via time decoder
YüksekCVSS 8,5İstismar yokEPSS %0pgpartman · pg_partman18 Eyl 2026
- CVE-2026-6181834İzleyin
pg_partman SQL injection in undo partition time encoder
YüksekCVSS 8,5İstismar yokEPSS %0pgpartman · pg_partman18 Eyl 2026
- CVE-2026-6181934İzleyin
pg_partman privilege escalation via SQL injection in when using pg_jobmon and encountering exception
YüksekCVSS 8,5İstismar yokEPSS %0pgpartman · pg_partman18 Eyl 2026
- CVE-2026-6182034İzleyin
pg_partman privilege escalation via SQL injection when inheriting template properties
YüksekCVSS 8,5İstismar yokEPSS %0pgpartman · pg_partman18 Eyl 2026
- CVE-2026-6182134İzleyin
pg_partman authorization bypass to move child tables between schemas during retention
YüksekCVSS 8,5İstismar yokEPSS %0pgpartman · pg_partman18 Eyl 2026
- CVE-2026-6364737İzleyin
CordysCRM SSE Notification Stream Hijack via `/sse/subscribe`
KritikCVSS 9,3İstismar yokEPSS %01panel-dev · cordyscrm18 Eyl 2026
- CVE-2026-7587836İzleyin
IBM Sterling File Gateway is Vulnerable to Authentication Bypass
KritikCVSS 9,1İstismar yokEPSS %0ibm · sterling file gateway18 Eyl 2026
- CVE-2026-9270830İzleyin
devalue: Cross-request process memory disclosure in devalue when `stringify` / `uneval` serialize Node Buffers
YüksekCVSS 7,5İstismar yokEPSS %0sveltejs · devalue18 Eyl 2026
- CVE-2026-9303135İzleyin
WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Import
YüksekCVSS 8,8İstismar yokEPSS %0wp cloud plugins/_deleeuw_ · use-your-drive | google drive plugin for wordpress18 Eyl 2026
- CVE-2026-9383832İzleyin
SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx
YüksekCVSS 8,2İstismar yokEPSS %0sgl-project · sglang18 Eyl 2026
- CVE-2026-9383937İzleyin
LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint
KritikCVSS 9,3İstismar yokEPSS %0modeltc · lightllm18 Eyl 2026
- CVE-2026-9386836İzleyin
Cotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNG
KritikCVSS 9,2İstismar yokEPSS %0cotonti · cotonti18 Eyl 2026
- CVE-2026-9387230İzleyin
Cotonti 1.0.0 PHP Object Injection via Comments Plugin Edit Action cb Parameter
YüksekCVSS 7,7İstismar yokEPSS %0cotonti · cotonti18 Eyl 2026
- GHSA-39wr-7q6h-cf6830İzleyin
LMDeploy has an SSRF bypass
YüksekCVSS 7,5İstismar yokPyPI · lmdeploy18 Eyl 2026
- CVE-2026-4665531İzleyin
virtio-win: Integer overflow causing a heap overflow in Viosock driver
YüksekCVSS 7,8İstismar yokEPSS %0virtio-win · kvm-guest-drivers-windows18 Eyl 2026
- CVE-2026-6183332İzleyin
zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion
YüksekCVSS 8,1İstismar yokEPSS %0project-zot · zot18 Eyl 2026
- CVE-2026-7724039İzleyin
WACRM: Database-layer authorization bypasses
KritikCVSS 9,9İstismar yokEPSS %0arnasdon · wacrm18 Eyl 2026
- CVE-2026-9114930İzleyin
Cockpit: cockpit: denial of service via unbounded connection thread spawning
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat enterprise linux 1018 Eyl 2026
- CVE-2026-6892834İzleyin
Acode: Exported TerminalService (bundled terminal plugin) lets any installed app execute arbitrary shell commands as Acode
YüksekCVSS 8,6İstismar yokEPSS %0acode-foundation · acode18 Eyl 2026
- CVE-2026-8809731İzleyin
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0microsoft · edge chromium18 Eyl 2026
- CVE-2026-9373834İzleyin
Totolink A3002MU formSchedule buffer overflow
YüksekCVSS 8,6İstismar yokEPSS %0totolink · a3002mu18 Eyl 2026
- CVE-2025-6645539İzleyin
LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py
KritikCVSS 9,8İstismar yokEPSS %1internlm · lmdeploy18 Eyl 2026
- CVE-2026-6227928İzleyin
LubeLogger: IDOR in DuplicateRecordsToOtherVehicles Allows Copying Records from Any User's Vehicle Without Ownership Check
YüksekCVSS 7,1İstismar yokEPSS %0hargata · lubelog18 Eyl 2026
- CVE-2026-6319933İzleyin
Perses: Missing authorization in datasource proxy allows cross-scope secret disclosure
YüksekCVSS 8,3İstismar yokEPSS %0perses · perses18 Eyl 2026
- CVE-2026-9373934İzleyin
Totolink A3002MU formWlAc buffer overflow
YüksekCVSS 8,6İstismar yokEPSS %0totolink · a3002mu18 Eyl 2026
- CVE-2026-9374037İzleyin
Totolink A3002MU formWlEncrypt buffer overflow
KritikCVSS 9,3İstismar yokEPSS %0totolink · a3002mu18 Eyl 2026
- CVE-2026-7739627İzleyin
PJSIP: Heap buffer overflow in the AVI parser
OrtaCVSS 6,9Kavram kanıtıEPSS %0teluu · pjsip18 Eyl 2026
- CVE-2026-8497529İzleyin
PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)
YüksekCVSS 7,4İstismar yokEPSS %0teluu · pjsip18 Eyl 2026
- CVE-2026-9270136İzleyin
Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path
KritikCVSS 9,1İstismar yokEPSS %0ultravioletrs · cocos18 Eyl 2026
- CVE-2026-9270236İzleyin
Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path
KritikCVSS 9,1İstismar yokEPSS %0ultravioletrs · cocos18 Eyl 2026
- CVE-2026-9374834İzleyin
http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale
YüksekCVSS 8,7İstismar yokEPSS %0kornelski · http-cache-semantics18 Eyl 2026
- CVE-2026-9392234İzleyin
SiYuan through 3.8.4 Stored XSS via notebook names
YüksekCVSS 8,6İstismar yokEPSS %0siyuan-note · siyuan18 Eyl 2026
- CVE-2026-9392334İzleyin
SiYuan through 3.8.4 Stored XSS via Heading Style Attribute
YüksekCVSS 8,6İstismar yokEPSS %0siyuan-note · siyuan18 Eyl 2026
- CVE-2026-7589530İzleyin
Out of bounds read at smpp34_unpack()
YüksekCVSS 7,5İstismar yokEPSS %0osmocom · libsmpp3418 Eyl 2026
- CVE-2026-8044139İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
KritikCVSS 9,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8044235İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8162335İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8162634İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,6İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8165635İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8165739İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
KritikCVSS 9,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8166928İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,2İstismar yokEPSS %1ibm · guardium data protection18 Eyl 2026
- CVE-2026-8193335İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8193728İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,2İstismar yokEPSS %1ibm · guardium data protection18 Eyl 2026
- CVE-2026-8234039İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
KritikCVSS 9,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8283238İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
KritikCVSS 9,6İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8288535İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8288735İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8289232İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,1İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8289331İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8289630İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,6İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8296739İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
KritikCVSS 9,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8403136İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
KritikCVSS 9,0İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8403435İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8403629İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,4İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8406439İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
KritikCVSS 9,9İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8407035İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,9İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8407128İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,2İstismar yokEPSS %1ibm · guardium data protection18 Eyl 2026
- CVE-2026-8407336İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
KritikCVSS 9,1İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8407435İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,9İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8407539İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
KritikCVSS 9,9İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8407630İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,6İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8407732İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,1İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8407839İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
KritikCVSS 9,9İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8408132İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,1İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8408239İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
KritikCVSS 9,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8408331İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8408435İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8408532İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,1İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8408628İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,2İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8408931İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,8İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8410530İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,7İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8410635İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,9İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8410832İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,1İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8423930İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 7,6İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-8424132İzleyin
IBM Guardium Data Protection is affected by multiple vulnerabilities.
YüksekCVSS 8,1İstismar yokEPSS %0ibm · guardium data protection18 Eyl 2026
- CVE-2026-5722328İzleyin
Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation
YüksekCVSS 7,0İstismar yokEPSS %0oisf · suricata18 Eyl 2026
- CVE-2026-5722730İzleyin
Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata18 Eyl 2026
- CVE-2026-5722836İzleyin
Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder
KritikCVSS 9,1İstismar yokEPSS %0oisf · suricata18 Eyl 2026
- CVE-2026-6344630İzleyin
Suricata app-layer: passed flows can retain transactions, causing resource exhaustion
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata18 Eyl 2026
- CVE-2026-6344730İzleyin
Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata18 Eyl 2026
- CVE-2026-6344830İzleyin
Suricata smb: some SMB flows can cause resource exhaustion
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata18 Eyl 2026
- CVE-2026-6345230İzleyin
Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata18 Eyl 2026
- CVE-2026-7141830İzleyin
Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata18 Eyl 2026
- CVE-2026-7185530İzleyin
Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow state
YüksekCVSS 7,5İstismar yokEPSS %0oisf · suricata18 Eyl 2026
- CVE-2026-7588537İzleyin
Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
KritikCVSS 9,3İstismar yokEPSS %0red hat · red hat openshift container platform 418 Eyl 2026
- CVE-2026-1335428İzleyin
Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content
YüksekCVSS 7,2İstismar yokEPSS %0gabelivan · asset cleanup: page speed booster18 Eyl 2026
- CVE-2026-8443440Planlayın
Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field
KritikCVSS 9,8Kavram kanıtıEPSS %3gravity forms · gravity forms18 Eyl 2026
- CVE-2026-8790930İzleyin
WP Photo Album Plus <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection
YüksekCVSS 7,5İstismar yokEPSS %0opajaap · wp photo album plus18 Eyl 2026
- CVE-2026-8927436İzleyin
WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content
KritikCVSS 9,1Kavram kanıtıEPSS %0brechtvds · wp recipe maker18 Eyl 2026