İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.957 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 6 / 80

  • CVE-2026-85216
    38İzleyin

    MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials

    KritikCVSS 9,5İstismar yokEPSS %0

    misp-project · misp3 Eyl 2026

  • CVE-2026-85221
    30İzleyin

    MISP CurlClient TLS Peer Verification Disabled by Default Enables Man-in-the-Middle Attacks

    YüksekCVSS 7,6İstismar yokEPSS %0

    misp-project · misp3 Eyl 2026

  • CVE-2026-48486
    30İzleyin

    Signum Node: Integer overflow in SMART_FEES fee distribution allows arbitrary miner reward inflation

    YüksekCVSS 7,5İstismar yokEPSS %0

    signum-network · signum-node3 Eyl 2026

  • CVE-2026-53924
    34İzleyin

    Gardens v2: Permissionless syncOutflow bypasses streaming proposal disputes

    YüksekCVSS 8,7İstismar yokEPSS %0

    1hive · gardens-v23 Eyl 2026

  • CVE-2026-55658
    30İzleyin

    Gardens v2: StreamingEscrow buffer drains to the proposal beneficiary on cancel via the permissionless claim()

    YüksekCVSS 7,7İstismar yokEPSS %0

    1hive · gardens-v23 Eyl 2026

  • CVE-2026-57445
    34İzleyin

    Gardens v2: Approve-side dispute resolution drains active streaming escrow reserve

    YüksekCVSS 8,7İstismar yokEPSS %0

    1hive · gardens-v23 Eyl 2026

  • CVE-2026-71963
    34İzleyin

    Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    nousresearch · hermes-agent3 Eyl 2026

  • CVE-2026-75034
    29İzleyin

    Rancher: SAML Assertion Replay

    YüksekCVSS 7,4İstismar yokEPSS %0

    suse · rancher3 Eyl 2026

  • CVE-2026-75035
    28İzleyin

    Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass

    YüksekCVSS 7,1İstismar yokEPSS %0

    suse · rancher3 Eyl 2026

  • CVE-2026-83961
    28İzleyin

    ColdFusion | Improper Authentication (CWE-287)

    YüksekCVSS 7,1İstismar yokEPSS %0

    adobe · coldfusion3 Eyl 2026

  • CVE-2026-84964
    32İzleyin

    Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client

    YüksekCVSS 8,2İstismar yokEPSS %0

    mongodb · c driver3 Eyl 2026

  • CVE-2026-85236
    35İzleyin

    MISP cullEmptyEvents CSRF Allows Irreversible Deletion of Events via GET Request

    YüksekCVSS 8,8İstismar yokEPSS %0

    misp-project · misp3 Eyl 2026

  • CVE-2026-85237
    34İzleyin

    Missing Rate Limiting in Email OTP Verification Allows Brute-Force Authentication Bypass

    YüksekCVSS 8,6İstismar yokEPSS %0

    misp-project · misp3 Eyl 2026

  • CVE-2026-85238
    30İzleyin

    Session Fixation in MISP CustomAuth Authentication Allows Session Hijacking

    YüksekCVSS 7,6İstismar yokEPSS %0

    misp-project · misp3 Eyl 2026

  • CVE-2026-85239
    28İzleyin

    MISP Event Template Definition Validation Bypass Allows Persistent Denial of Service

    YüksekCVSS 7,1İstismar yokEPSS %0

    misp-project · misp3 Eyl 2026

  • CVE-2026-73600
    31İzleyin

    Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent.

    YüksekCVSS 7,8İstismar yokEPSS %0

    dell · powerprotect data manager3 Eyl 2026

  • CVE-2026-80731
    31İzleyin

    net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80734
    35İzleyin

    btrfs: initialize inode mapping flags for cached inodes

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80737
    31İzleyin

    serial: amba-pl011: synchronize DMA teardown

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80738
    29İzleyin

    bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80747
    32İzleyin

    drm/amdkfd: Add bounds check for CRAT subtype length

    YüksekCVSS 8,0İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-80754
    31İzleyin

    Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux3 Eyl 2026

  • CVE-2026-81292
    28İzleyin

    WordPress Simple Payment plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    ido kobelkowsky · simple payment3 Eyl 2026

  • CVE-2026-81295
    28İzleyin

    WordPress Under Construction plugin <= 5.82 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    underconstructionpage · under construction3 Eyl 2026

  • CVE-2026-81300
    28İzleyin

    WordPress Calculation For Contact Form 7 plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    silverplugins217 · calculation for contact form 73 Eyl 2026

  • CVE-2026-81773
    28İzleyin

    WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    saturday drive · ninja forms file uploads extension3 Eyl 2026

  • CVE-2026-81776
    28İzleyin

    WordPress WP QuickLaTeX plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    advanpix · wp quicklatex3 Eyl 2026

  • CVE-2026-84238
    39İzleyin

    WordPress YITH Request a Quote for WooCommerce Premium plugin < 4.46.0 - Broken Access Control vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    yith · yith request a quote for woocommerce premium3 Eyl 2026

  • CVE-2026-84736
    33İzleyin

    In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disables

    YüksekCVSS 8,3İstismar yokEPSS %0

    eclipse foundation · eclipse aerios3 Eyl 2026

  • CVE-2026-84752
    35İzleyin

    WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    rometheme · rtmkit3 Eyl 2026

  • CVE-2026-84753
    39İzleyin

    WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    wpfunnels · mail mint3 Eyl 2026

  • CVE-2026-84756
    28İzleyin

    WordPress WCFM Membership plugin <= 2.11.11 - Privilege Escalation vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    wc lovers · wcfm membership3 Eyl 2026

  • CVE-2026-84757
    32İzleyin

    WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability

    YüksekCVSS 8,2İstismar yokEPSS %0

    aresit · wp compress3 Eyl 2026

  • CVE-2026-84761
    28İzleyin

    WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    litespeed technologies · litespeed cache3 Eyl 2026

  • CVE-2026-84763
    28İzleyin

    WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    rometheme · rtmkit3 Eyl 2026

  • CVE-2026-84765
    28İzleyin

    WordPress Breadcrumb NavXT plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    john havlik · breadcrumb navxt3 Eyl 2026

  • CVE-2026-84768
    37İzleyin

    WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    e4jvikwp · vikappointments services booking calendar3 Eyl 2026

  • CVE-2026-84773
    28İzleyin

    WordPress EWWW Image Optimizer plugin <= 8.7.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    作者: shane bishop · ewww image optimizer3 Eyl 2026

  • CVE-2026-84776
    30İzleyin

    WordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    malcare · malcare security3 Eyl 2026

  • CVE-2026-84777
    29İzleyin

    WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

    YüksekCVSS 7,4İstismar yokEPSS %0

    really simple plugins · really simple ssl3 Eyl 2026

  • CVE-2026-84778
    30İzleyin

    WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    migrateguru · migrate guru – site migration &amp; cloning3 Eyl 2026

  • CVE-2026-84779
    32İzleyin

    WordPress Agentimus – AI SEO, llms.txt & MCP for AI Agents plugin <= 1.51.0 - Broken Access Control vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    sheikh heera · agentimus – ai seo, llms.txt &amp; mcp for ai agents3 Eyl 2026

  • CVE-2026-84812
    28İzleyin

    WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    wordplus · bp better messages3 Eyl 2026

  • CVE-2026-84813
    37İzleyin

    WordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    paolo · geodirectory3 Eyl 2026

  • CVE-2026-84814
    39İzleyin

    WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    bricksforge. · bricksforge3 Eyl 2026

  • CVE-2026-84834
    39İzleyin

    WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    eyecix · jobsearch3 Eyl 2026

  • CVE-2026-84836
    28İzleyin

    WordPress WC Ukraine Shipping plugin <= 1.22.3 - Insecure Direct Object References (IDOR) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    kirillbdev · wc ukraine shipping3 Eyl 2026

  • CVE-2026-84847
    30İzleyin

    WordPress Quick Event Manager plugin <= 9.17 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    brightvesseldev · quick event manager3 Eyl 2026

  • CVE-2026-84848
    28İzleyin

    WordPress Quick Event Manager plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    brightvesseldev · quick event manager3 Eyl 2026

  • CVE-2025-12737
    33İzleyin

    Arbitrary Code Execution via Administrative Operations in Multiple WSO2 Products Allows Remote Code Execution

    YüksekCVSS 8,4İstismar yokEPSS %0

    wso2 · api control plane3 Eyl 2026

  • CVE-2026-58400
    36İzleyin

    GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter

    KritikCVSS 9,1İstismar yokEPSS %1

    geonetwork · core-geonetwork3 Eyl 2026

  • CVE-2026-63219
    34İzleyin

    Unauthenticated file upload via missing authorization on formatter upload endpoint

    YüksekCVSS 8,6İstismar yokEPSS %0

    geonetwork · core-geonetwork3 Eyl 2026

  • CVE-2026-83959
    31İzleyin

    Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d sampler3 Eyl 2026

  • CVE-2026-85012
    35İzleyin

    OS command injection in the Amazon CodeCatalyst blueprints SDK

    YüksekCVSS 8,5İstismar yokEPSS %2

    aws · @amazon-codecatalyst/blueprints.blueprint3 Eyl 2026

  • CVE-2026-15431
    29İzleyin

    HP Support Assistant – Potential Escalation of Privilege

    YüksekCVSS 7,3İstismar yokEPSS %0

    hp inc. · hp support assistant3 Eyl 2026

  • CVE-2026-33630
    30İzleyin

    c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP

    YüksekCVSS 7,5İstismar yokEPSS %0

    c-ares · c-ares3 Eyl 2026

  • CVE-2026-78583
    32İzleyin

    Incorrect Authorization in Kibana Leading to Privilege Escalation

    YüksekCVSS 8,1İstismar yokEPSS %0

    elastic · kibana3 Eyl 2026

  • CVE-2026-82302
    32İzleyin

    Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification

    YüksekCVSS 8,1İstismar yokEPSS %0

    elastic · kibana3 Eyl 2026

  • CVE-2026-82526
    37İzleyin

    R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint

    KritikCVSS 9,3İstismar yokEPSS %0

    sciphi-ai · r2r3 Eyl 2026

  • CVE-2026-85028
    29İzleyin

    Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

    YüksekCVSS 7,3İstismar yokEPSS %0

    aws · aws-fpga3 Eyl 2026

  • CVE-2026-85388
    34İzleyin

    Worklenz through 3.0.0 SQL Injection via the sort-field Query Parameter

    YüksekCVSS 8,6İstismar yokEPSS %0

    worklenz · worklenz3 Eyl 2026

  • CVE-2026-85389
    28İzleyin

    Worklenz before 3.0.0 Authorization Bypass on Task-Scoped Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    worklenz · worklenz3 Eyl 2026

  • CVE-2026-85390
    28İzleyin

    Checkmate through 3.11.0 Missing Authorization on Maintenance Window, Notification, and Check Deletion Routes

    YüksekCVSS 7,1İstismar yokEPSS %0

    bluewave-labs · checkmate3 Eyl 2026

  • CVE-2026-85391
    37İzleyin

    Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml

    KritikCVSS 9,3İstismar yokEPSS %0

    peppermint-lab · peppermint3 Eyl 2026

  • CVE-2026-85393
    34İzleyin

    node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding

    YüksekCVSS 8,7İstismar yokEPSS %0

    digitalbazaar · forge3 Eyl 2026

  • CVE-2026-85394
    37İzleyin

    python-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC Secret

    KritikCVSS 9,3İstismar yokEPSS %0

    mpdavis · python-jose3 Eyl 2026

  • CVE-2026-85395
    28İzleyin

    UnoPim before 2.1.3 Missing Authorization on Integration Management Routes

    YüksekCVSS 7,1İstismar yokEPSS %0

    unopim · unopim3 Eyl 2026

  • CVE-2026-85396
    34İzleyin

    rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix

    YüksekCVSS 8,7İstismar yokEPSS %0

    rubyzip · rubyzip3 Eyl 2026

  • CVE-2026-44506
    32İzleyin

    Medplum - Exposure of OAuth client secret via dynamic registration endpoint in self-hosted configurations

    YüksekCVSS 8,2İstismar yokEPSS %0

    medplum · medplum3 Eyl 2026

  • CVE-2026-53728
    28İzleyin

    Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage

    YüksekCVSS 7,1İstismar yokEPSS %0

    medplum · medplum3 Eyl 2026

  • CVE-2026-82527
    34İzleyin

    R2R 3.6.6 SQL Injection via Retrieval Search Filter Key

    YüksekCVSS 8,7İstismar yokEPSS %0

    sciphi-ai · r2r3 Eyl 2026

  • CVE-2026-85042
    38İzleyin

    Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox v

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome3 Eyl 2026

  • CVE-2026-85043
    36İzleyin

    Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via cra

    KritikCVSS 9,1İstismar yokEPSS %0

    google · chrome3 Eyl 2026

  • CVE-2026-85045
    30İzleyin

    Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    google · chrome3 Eyl 2026

  • CVE-2026-85046
    80Hemen

    Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %48

    google · chrome3 Eyl 2026

  • CVE-2026-85047
    38İzleyin

    Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentiall

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome3 Eyl 2026

  • CVE-2026-85048
    33İzleyin

    Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to

    YüksekCVSS 8,3Kavram kanıtıEPSS %0

    google · chrome3 Eyl 2026

  • CVE-2026-85049
    35İzleyin

    Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome3 Eyl 2026

  • CVE-2026-85050
    38İzleyin

    Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outsi

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome3 Eyl 2026

  • CVE-2026-85051
    35İzleyin

    Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome3 Eyl 2026

  • CVE-2026-85053
    35İzleyin

    Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code insid

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome3 Eyl 2026

  • CVE-2026-63376
    32İzleyin

    toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization

    YüksekCVSS 8,2İstismar yokEPSS %0

    binarymuse · toml-node3 Eyl 2026

  • CVE-2026-77465
    30İzleyin

    toml-node: Uncontrolled Recursion

    YüksekCVSS 7,5İstismar yokEPSS %0

    binarymuse · toml-node3 Eyl 2026

  • CVE-2026-82520
    34İzleyin

    parsedmarc < 11.0.1 Zip Bomb DoS via Compressed Email Attachments

    YüksekCVSS 8,7İstismar yokEPSS %0

    domainaware · parsedmarc3 Eyl 2026

  • CVE-2026-85061
    40Planlayın

    MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip

    KritikCVSS 10,0İstismar yokEPSS %0

    maplibre · maplibre-gl-js3 Eyl 2026

  • CVE-2026-85222
    35İzleyin

    D-Link DNS-340L Add-On Center addon_center.cgi os command injection

    YüksekCVSS 8,5İstismar yokEPSS %3

    d-link · dns-340l3 Eyl 2026

  • CVE-2026-8862
    30İzleyin

    Vulnerabilities exists in IBM Netezza Software

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · netezza performance server3 Eyl 2026

  • CVE-2026-64195
    34İzleyin

    Out Of Bounds Write parsing a .DSB file in DASYLab due to lack of proper validation of user-supplied data

    YüksekCVSS 8,5İstismar yokEPSS %0

    ni · dasylab3 Eyl 2026

  • CVE-2026-64196
    34İzleyin

    Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap

    YüksekCVSS 8,5İstismar yokEPSS %0

    ni · dasylab3 Eyl 2026

  • CVE-2026-64197
    34İzleyin

    Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data

    YüksekCVSS 8,5İstismar yokEPSS %0

    ni · dasylab3 Eyl 2026

  • CVE-2026-64198
    34İzleyin

    Out Of Bounds Read in file handling when parsing a .DSB file in DASYLab

    YüksekCVSS 8,5İstismar yokEPSS %0

    ni · dasylab3 Eyl 2026

  • CVE-2026-64199
    34İzleyin

    Out Of Bounds Read outside the bounds of an allocated data structure when parsing a .DSB file in DASYLab

    YüksekCVSS 8,6İstismar yokEPSS %0

    ni · dasylab3 Eyl 2026

  • CVE-2026-64200
    34İzleyin

    Out Of Bounds Read in during string conversionwhen parsing a .DSB file in DASYLab

    YüksekCVSS 8,5İstismar yokEPSS %0

    ni · dasylab3 Eyl 2026

  • CVE-2026-85223
    35İzleyin

    D-Link DNS-340L CGI dropbox.cgi os command injection

    YüksekCVSS 8,6İstismar yokEPSS %3

    d-link · dns-340l3 Eyl 2026

  • CVE-2026-85224
    35İzleyin

    D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection

    YüksekCVSS 8,5İstismar yokEPSS %3

    d-link · dns-320 sharecenter3 Eyl 2026

  • CVE-2026-18167
    30İzleyin

    Stack-based buffer overflow in TP-Link Archer AX55 v4

    YüksekCVSS 7,7İstismar yokEPSS %0

    tp-link systems inc. · archer ax55 v43 Eyl 2026

  • CVE-2026-62916
    39İzleyin

    Microsoft Entra ID Elevation of Privilege Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    microsoft · entra id3 Eyl 2026

  • CVE-2026-65818
    39İzleyin

    Power Automate Elevation of Privilege Vulnerability

    KritikCVSS 9,9İstismar yokEPSS %0

    microsoft · power platform3 Eyl 2026

  • CVE-2026-69857
    35İzleyin

    Azure Cosmos DB Spoofing Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · azure cosmos db3 Eyl 2026

  • CVE-2026-70178
    35İzleyin

    Microsoft Fabric Elevation of Privilege Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · fabric3 Eyl 2026