İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.962 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 61 / 80

  • CVE-2026-77261
    34İzleyin

    MCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branches

    YüksekCVSS 8,5İstismar yokEPSS %0

    mcp-atlassian · mcp atlassian22 Eyl 2026

  • CVE-2026-77271
    33İzleyin

    MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of CVE-2026-27825)

    YüksekCVSS 8,3İstismar yokEPSS %0

    mcp-atlassian · mcp atlassian22 Eyl 2026

  • CVE-2026-77274
    35İzleyin

    MCP Atlassian: SSRF Protection Bypass

    YüksekCVSS 8,8İstismar yokEPSS %0

    mcp-atlassian · mcp atlassian22 Eyl 2026

  • CVE-2026-7866
    40Planlayın

    Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.

    KritikCVSS 10,0İstismar yokEPSS %0

    rti · connext professional22 Eyl 2026

  • CVE-2026-82003
    34İzleyin

    Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)

    YüksekCVSS 8,5İstismar yokEPSS %0

    adobe · campaign22 Eyl 2026

  • CVE-2026-82008
    39İzleyin

    Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)

    KritikCVSS 9,9İstismar yokEPSS %0

    adobe · campaign22 Eyl 2026

  • CVE-2026-82009
    36İzleyin

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    KritikCVSS 9,1İstismar yokEPSS %0

    adobe · campaign22 Eyl 2026

  • CVE-2026-82010
    39İzleyin

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    KritikCVSS 9,9İstismar yokEPSS %0

    adobe · campaign22 Eyl 2026

  • CVE-2026-82011
    36İzleyin

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    KritikCVSS 9,1İstismar yokEPSS %0

    adobe · campaign22 Eyl 2026

  • CVE-2026-82013
    39İzleyin

    Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

    KritikCVSS 9,9İstismar yokEPSS %0

    adobe · campaign22 Eyl 2026

  • CVE-2026-82443
    39İzleyin

    Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

    KritikCVSS 9,9İstismar yokEPSS %0

    adobe · campaign22 Eyl 2026

  • CVE-2026-83597
    28İzleyin

    Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution

    YüksekCVSS 7,0İstismar yokEPSS %0

    netdata · netdata22 Eyl 2026

  • CVE-2026-83660
    40Planlayın

    Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

    KritikCVSS 10,0İstismar yokEPSS %0

    adobe · campaign22 Eyl 2026

  • CVE-2026-84412
    40Planlayın

    Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

    KritikCVSS 10,0İstismar yokEPSS %1

    adobe · campaign22 Eyl 2026

  • CVE-2026-85279
    34İzleyin

    Notepad++: Stack Buffer Overflow in Plugin Lexer Loading via Unchecked GetLexerCount() Return Value

    YüksekCVSS 8,6İstismar yokEPSS %0

    notepad-plus-plus · notepad-plus-plus22 Eyl 2026

  • CVE-2026-85995
    29İzleyin

    Notepad++: Authenticode verification bypass allows modified updater execution

    YüksekCVSS 7,3İstismar yokEPSS %0

    notepad-plus-plus · notepad-plus-plus22 Eyl 2026

  • CVE-2026-89275
    40Planlayın

    Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

    KritikCVSS 10,0İstismar yokEPSS %1

    adobe · campaign22 Eyl 2026

  • CVE-2026-89276
    39İzleyin

    Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

    KritikCVSS 9,9İstismar yokEPSS %0

    adobe · campaign22 Eyl 2026

  • CVE-2026-8849
    30İzleyin

    Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.

    YüksekCVSS 7,7İstismar yokEPSS %0

    rti · connext professional22 Eyl 2026

  • CVE-2026-93345
    34İzleyin

    MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI

    YüksekCVSS 8,7İstismar yokEPSS %0

    mikrotik · routeros22 Eyl 2026

  • CVE-2026-34689
    34İzleyin

    Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    YüksekCVSS 8,6İstismar yokEPSS %1

    adobe · connect22 Eyl 2026

  • CVE-2026-57149
    39İzleyin

    plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection

    KritikCVSS 9,9İstismar yokEPSS %0

    plone · plone.app.portlets22 Eyl 2026

  • CVE-2026-75649
    31İzleyin

    Bridge | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · bridge22 Eyl 2026

  • CVE-2026-75655
    31İzleyin

    Bridge | Uncontrolled Recursion (CWE-674)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · bridge22 Eyl 2026

  • CVE-2026-75658
    31İzleyin

    Bridge | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · bridge22 Eyl 2026

  • CVE-2026-75663
    31İzleyin

    Bridge | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · bridge22 Eyl 2026

  • CVE-2026-75665
    31İzleyin

    Bridge | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · bridge22 Eyl 2026

  • CVE-2026-75676
    31İzleyin

    Bridge | Stack-based Buffer Overflow (CWE-121)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · bridge22 Eyl 2026

  • CVE-2026-75682
    39İzleyin

    Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

    KritikCVSS 9,9İstismar yokEPSS %0

    adobe · connect22 Eyl 2026

  • CVE-2026-75684
    37İzleyin

    Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

    KritikCVSS 9,3İstismar yokEPSS %0

    adobe · connect22 Eyl 2026

  • CVE-2026-75686
    37İzleyin

    Adobe Connect | Improper Input Validation (CWE-20)

    KritikCVSS 9,3İstismar yokEPSS %0

    adobe · connect22 Eyl 2026

  • CVE-2026-75689
    37İzleyin

    Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

    KritikCVSS 9,3İstismar yokEPSS %0

    adobe · connect22 Eyl 2026

  • CVE-2026-75697
    37İzleyin

    Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

    KritikCVSS 9,3İstismar yokEPSS %0

    adobe · connect22 Eyl 2026

  • CVE-2026-75698
    37İzleyin

    Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

    KritikCVSS 9,3İstismar yokEPSS %0

    adobe · connect22 Eyl 2026

  • CVE-2026-75743
    28İzleyin

    Adobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352)

    YüksekCVSS 7,1İstismar yokEPSS %1

    adobe · aem 6.5 forms jee22 Eyl 2026

  • CVE-2026-75744
    32İzleyin

    Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)

    YüksekCVSS 8,1İstismar yokEPSS %1

    adobe · aem 6.5 forms jee22 Eyl 2026

  • CVE-2026-75745
    40Planlayın

    Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)

    KritikCVSS 10,0İstismar yokEPSS %1

    adobe · aem 6.5 forms jee22 Eyl 2026

  • CVE-2026-77246
    34İzleyin

    MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

    YüksekCVSS 8,6İstismar yokEPSS %0

    mcp-atlassian · mcp atlassian22 Eyl 2026

  • CVE-2026-77247
    33İzleyin

    MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters

    YüksekCVSS 8,3İstismar yokEPSS %0

    mcp-atlassian · mcp atlassian22 Eyl 2026

  • CVE-2026-77248
    34İzleyin

    MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport

    YüksekCVSS 8,6İstismar yokEPSS %0

    mcp-atlassian · mcp atlassian22 Eyl 2026

  • CVE-2026-77253
    28İzleyin

    MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files

    YüksekCVSS 7,1İstismar yokEPSS %0

    mcp-atlassian · mcp atlassian22 Eyl 2026

  • CVE-2026-77254
    36İzleyin

    MCP Atlassian: Unauthenticated HTTP MCP requests can use globally configured Jira and Confluence credentials

    KritikCVSS 9,1İstismar yokEPSS %0

    mcp-atlassian · mcp atlassian22 Eyl 2026

  • CVE-2026-77256
    33İzleyin

    MCP Atlassian: OAuth refresh-token backup file is world-readable under default Unix umask

    YüksekCVSS 8,3İstismar yokEPSS %0

    mcp-atlassian · mcp atlassian22 Eyl 2026

  • CVE-2026-77544
    30İzleyin

    A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to ex

    YüksekCVSS 7,5İstismar yokEPSS %0

    ubiquiti inc · dream machines22 Eyl 2026

  • CVE-2026-77555
    30İzleyin

    A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to ex

    YüksekCVSS 7,5İstismar yokEPSS %0

    ubiquiti inc · dream machines22 Eyl 2026

  • CVE-2026-77556
    30İzleyin

    A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to exe

    YüksekCVSS 7,5İstismar yokEPSS %0

    ubiquiti inc · dream machines22 Eyl 2026

  • CVE-2026-77558
    30İzleyin

    A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to exe

    YüksekCVSS 7,5İstismar yokEPSS %0

    ubiquiti inc · dream machines22 Eyl 2026

  • CVE-2026-79906
    31İzleyin

    Substance3D - Modeler | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d modeler22 Eyl 2026

  • CVE-2026-81995
    36İzleyin

    Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)

    KritikCVSS 9,1İstismar yokEPSS %1

    adobe · aem 6.5 forms jee22 Eyl 2026

  • CVE-2026-81998
    31İzleyin

    Substance3D - Modeler | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d modeler22 Eyl 2026

  • CVE-2026-81999
    34İzleyin

    Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

    YüksekCVSS 8,7İstismar yokEPSS %0

    adobe · aem 6.5 forms jee22 Eyl 2026

  • CVE-2026-82000
    38İzleyin

    Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

    KritikCVSS 9,6İstismar yokEPSS %0

    adobe · aem 6.5 forms jee22 Eyl 2026

  • CVE-2026-83962
    31İzleyin

    Substance3D - Modeler | Stack-based Buffer Overflow (CWE-121)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d modeler22 Eyl 2026

  • CVE-2026-83963
    31İzleyin

    Substance3D - Modeler | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · substance 3d modeler22 Eyl 2026

  • CVE-2026-83964
    30İzleyin

    Adobe Connect | Improper Certificate Validation (CWE-295)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · connect22 Eyl 2026

  • CVE-2026-84395
    28İzleyin

    Premiere Pro | Server-Side Request Forgery (SSRF) (CWE-918)

    YüksekCVSS 7,1İstismar yokEPSS %0

    adobe · premiere22 Eyl 2026

  • CVE-2026-88414
    39İzleyin

    MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).

    KritikCVSS 9,8İstismar yokEPSS %0

    22 Eyl 2026

  • CVE-2026-88415
    34İzleyin

    MCMS 6.1.1 through 6.2.1 is vulnerable to stored Cross-Site Scripting (XSS).

    YüksekCVSS 8,7İstismar yokEPSS %0

    22 Eyl 2026

  • CVE-2026-91130
    37İzleyin

    Home Assistant: XSS in Statistics Graph Card

    KritikCVSS 9,3İstismar yokEPSS %0

    home-assistant · core22 Eyl 2026

  • CVE-2026-94462
    28İzleyin

    Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR)

    YüksekCVSS 7,1İstismar yokEPSS %0

    spree · spree22 Eyl 2026

  • CVE-2026-95831
    31İzleyin

    Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL

    YüksekCVSS 7,8İstismar yokEPSS %0

    22 Eyl 2026

  • CVE-2026-95861
    30İzleyin

    A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to

    YüksekCVSS 7,5İstismar yokEPSS %0

    ubiquiti inc · dream machines22 Eyl 2026

  • CVE-2026-95862
    30İzleyin

    A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to ex

    YüksekCVSS 7,5İstismar yokEPSS %0

    ubiquiti inc · dream machines22 Eyl 2026

  • CVE-2026-19915
    29İzleyin

    HP Support Assistant - Local Escalation of Privilege

    YüksekCVSS 7,3İstismar yokEPSS %0

    hp inc · hp support assistant22 Eyl 2026

  • CVE-2026-65113
    39İzleyin

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials.

    KritikCVSS 9,8İstismar yokEPSS %0

    nvidia · infra controller22 Eyl 2026

  • CVE-2026-65114
    39İzleyin

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical func

    KritikCVSS 9,8İstismar yokEPSS %0

    nvidia · infra controller22 Eyl 2026

  • CVE-2026-65117
    35İzleyin

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password.

    YüksekCVSS 8,8İstismar yokEPSS %0

    nvidia · infra controller22 Eyl 2026

  • CVE-2026-65118
    39İzleyin

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation.

    KritikCVSS 9,8İstismar yokEPSS %0

    nvidia · infra controller22 Eyl 2026

  • CVE-2026-65121
    39İzleyin

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue.

    KritikCVSS 9,8İstismar yokEPSS %0

    nvidia · infra controller22 Eyl 2026

  • CVE-2026-65124
    32İzleyin

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection.

    YüksekCVSS 8,1İstismar yokEPSS %0

    nvidia · infra controller22 Eyl 2026

  • CVE-2026-65125
    35İzleyin

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause external control of a file name or path.

    YüksekCVSS 8,8İstismar yokEPSS %0

    nvidia · infra controller22 Eyl 2026

  • CVE-2026-65126
    35İzleyin

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workf

    YüksekCVSS 8,8İstismar yokEPSS %0

    nvidia · infra controller22 Eyl 2026

  • CVE-2026-65128
    35İzleyin

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection.

    YüksekCVSS 8,8İstismar yokEPSS %0

    nvidia · infra controller22 Eyl 2026

  • CVE-2026-65129
    33İzleyin

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation.

    YüksekCVSS 8,3İstismar yokEPSS %0

    nvidia · infra controller22 Eyl 2026

  • CVE-2026-65130
    39İzleyin

    NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection.

    KritikCVSS 9,8İstismar yokEPSS %1

    nvidia · infra controller22 Eyl 2026

  • CVE-2026-65178
    31İzleyin

    NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a maliciously crafted model_config.yaml can inject unsafe paramet

    YüksekCVSS 7,8İstismar yokEPSS %0

    nvidia · nemo speech22 Eyl 2026

  • CVE-2026-65179
    35İzleyin

    NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pic

    YüksekCVSS 8,8İstismar yokEPSS %0

    nvidia · nemo speech22 Eyl 2026

  • CVE-2026-84388
    38İzleyin

    A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions may allow attack

    KritikCVSS 9,6İstismar yokEPSS %0

    fortinet · fortipam chrome extension22 Eyl 2026

  • CVE-2026-28324
    39İzleyin

    SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    solarwinds · observability self-hosted22 Eyl 2026

  • CVE-2026-28325
    35İzleyin

    SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    solarwinds · observability self-hosted22 Eyl 2026

  • CVE-2026-47116
    36İzleyin

    LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH

    KritikCVSS 9,2İstismar yokEPSS %0

    ltsecurity · ltk3500sf22 Eyl 2026

  • CVE-2026-58268
    30İzleyin

    SIPGO: DoS via unvalidated Content-Length in the stream parser

    YüksekCVSS 7,5İstismar yokEPSS %0

    emiago · sipgo22 Eyl 2026

  • CVE-2026-59991
    30İzleyin

    psd-tools: Uncontrolled memory allocation in psd-tools composite/numpy via crafted PSD geometry

    YüksekCVSS 7,5İstismar yokEPSS %0

    psd-tools · psd-tools22 Eyl 2026

  • CVE-2026-61570
    30İzleyin

    MPXJ: XXE Vulnerability in MerlinReader

    YüksekCVSS 7,5İstismar yokEPSS %0

    joniles · mpxj22 Eyl 2026

  • CVE-2026-62985
    30İzleyin

    request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process

    YüksekCVSS 7,5İstismar yokEPSS %0

    azu · request-filtering-agent22 Eyl 2026

  • CVE-2026-63104
    28İzleyin

    Kaneo 2.3.12 < 2.12.2 Missing Authorization via Bulk Task Endpoint

    YüksekCVSS 7,2İstismar yokEPSS %0

    usekaneo · kaneo22 Eyl 2026

  • CVE-2026-76708
    39İzleyin

    Unauthenticated Remote Unauthorized Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)

    KritikCVSS 9,8İstismar yokEPSS %0

    arubanetworks · analytics and location engine22 Eyl 2026

  • CVE-2026-76709
    39İzleyin

    Unauthenticated Remote Arbitrary File Write Vulnerability in HPE Networking Analytics and Location Engine (ALE)

    KritikCVSS 9,8İstismar yokEPSS %0

    arubanetworks · analytics and location engine22 Eyl 2026

  • CVE-2026-76710
    30İzleyin

    Unauthenticated Remote Sensitive Information Disclosure Vulnerability in HPE Networking Analytics and Location Engine (ALE)

    YüksekCVSS 7,5İstismar yokEPSS %0

    arubanetworks · analytics and location engine22 Eyl 2026

  • CVE-2026-76711
    30İzleyin

    Unauthenticated Remote Data Injection Vulnerability in HPE Networking Analytics and Location Engine (ALE)

    YüksekCVSS 7,5İstismar yokEPSS %0

    arubanetworks · analytics and location engine22 Eyl 2026

  • CVE-2026-76712
    29İzleyin

    Unauthenticated Remote Unauthorized Access, Information Disclosure, and Denial of Service Vulnerabilities in HPE Networking Analytics and Location Engine (ALE)

    YüksekCVSS 7,3İstismar yokEPSS %0

    arubanetworks · analytics and location engine22 Eyl 2026

  • CVE-2026-76713
    28İzleyin

    Authenticated Remote File System Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)

    YüksekCVSS 7,2İstismar yokEPSS %0

    arubanetworks · analytics and location engine22 Eyl 2026

  • CVE-2026-76714
    28İzleyin

    Authenticated Remote Code Execution with Elevated Privileges Vulnerability in HPE Networking Analytics and Location Engine (ALE)

    YüksekCVSS 7,2İstismar yokEPSS %0

    arubanetworks · analytics and location engine22 Eyl 2026

  • CVE-2026-76715
    28İzleyin

    Unauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and Location Engine (ALE)

    YüksekCVSS 7,1İstismar yokEPSS %0

    arubanetworks · analytics and location engine22 Eyl 2026

  • CVE-2026-77322
    30İzleyin

    SIPGO: DoS via unvalidated WebSocket frame length

    YüksekCVSS 7,5İstismar yokEPSS %0

    emiago · sipgo22 Eyl 2026

  • CVE-2026-87121
    37İzleyin

    Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application

    KritikCVSS 9,3İstismar yokEPSS %0

    lwip · tcp/ip stack mqtt22 Eyl 2026

  • CVE-2026-88340
    30İzleyin

    An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files.

    YüksekCVSS 7,6İstismar yokEPSS %0

    22 Eyl 2026

  • CVE-2026-88344
    30İzleyin

    An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e.

    YüksekCVSS 7,5İstismar yokEPSS %0

    22 Eyl 2026

  • CVE-2026-88345
    30İzleyin

    An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e.

    YüksekCVSS 7,5İstismar yokEPSS %0

    22 Eyl 2026

  • CVE-2026-88418
    35İzleyin

    CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection() into a no-op on every state-changing admin reques

    YüksekCVSS 8,8İstismar yokEPSS %0

    22 Eyl 2026