Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.960 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 62 / 80

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2026-88418İstismar yok	CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection() into a no-op on every state-changing admin requesCWE-352 Girişsiz RCE CSRF	Yüksek8,8	—	%0,2	22 Eyl 2026
35İzleyin	CVE-2026-88419İstismar yok	An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=thumbUpload) of WuzhCWE-434 RCE Dosya yükleme	Yüksek8,8	—	%0,4	22 Eyl 2026
36İzleyin	CVE-2026-88624İstismar yok	Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deleCWE-22 Girişsiz RCE Yol geçişi	Kritik9,1	—	%0,5	22 Eyl 2026
33İzleyin	CVE-2026-89281İstismar yok	The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf apache http server project · apache lounge windows · CWE-732	Yüksek8,4	—	%0,1	22 Eyl 2026
36İzleyin	CVE-2026-89282Kavram kanıtı	The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability thrapache http server project · apache lounge windows · CWE-732 Kimlik doğrulamasız	Kritik9,1	—	%0,4	22 Eyl 2026
31İzleyin	CVE-2026-94574İstismar yok	A local cross-user code execution vulnerability exists in GNU wget (Windows builds from eternallybored.org) due to a hardcoded configurationgnu wget (windows builds) · wget · CWE-427 RCE Yerel yetki yükseltme	Yüksek7,8	—	%0,1	22 Eyl 2026
29İzleyin	CVE-2026-56681Kavram kanıtı	9Router: Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Headerdecolua · 9router · CWE-807 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,3	—	%1,1	22 Eyl 2026
37İzleyin	CVE-2026-63374İstismar yok	AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofingagronholm · anyio · CWE-295 Kimlik doğrulamasız Zayıf kripto	Kritik9,3	—	%0,2	22 Eyl 2026
30İzleyin	CVE-2026-75608İstismar yok	Frigate: Viewer-Role User Can Access go2rtc Internal API to obtain sensitive informationblakeblackshear · frigate · CWE-863 Erişim denetimi (IDOR)	Yüksek7,7	—	%0,3	22 Eyl 2026
30İzleyin	CVE-2026-94640İstismar yok	Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of servicered hat · red hat enterprise linux 10 · CWE-400 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,4	22 Eyl 2026
34İzleyin	CVE-2026-95655İstismar yok	Aureus ERP before 1.5.0 Unscoped Message Access via ChatterPanelwebkul · aureus erp · CWE-639 Erişim denetimi (IDOR)	Yüksek8,6	—	%0,4	22 Eyl 2026
28İzleyin	CVE-2026-85740İstismar yok	LightRAG: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guardhkuds · lightrag · CWE-918 SSRF	Yüksek7,1	—	%0,2	22 Eyl 2026
28İzleyin	CVE-2026-77426İstismar yok	Unleash: Missing await on permission check + cross-project IDOR in admin APIunleash · unleash · CWE-639 Erişim denetimi (IDOR)	Yüksek7,1	—	%0,4	22 Eyl 2026
34İzleyin	CVE-2026-91018İstismar yok	Double Free in lwIP (lightweight IP)lwip · lwip api · CWE-415 Kimlik doğrulamasız Bellek hatası	Yüksek8,7	—	%0,3	22 Eyl 2026
34İzleyin	CVE-2026-95814İstismar yok	Vaultwarden through 1.37.3 Authorization Bypass via Missing Status Checkdani-garcia · vaultwarden · CWE-863 Erişim denetimi (IDOR)	Yüksek8,6	—	%0,4	22 Eyl 2026
28İzleyin	CVE-2026-95815İstismar yok	OpenClaw iOS before 2026.8.11 Credential Exposure via Deep-Link URL Loggingopenclaw · openclaw ios · CWE-532 Bilgi sızıntısı	Yüksek7,2	—	%0,1	22 Eyl 2026
30İzleyin	CVE-2026-96269İstismar yok	GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affectgnu · emacs · CWE-829 RCE	Yüksek7,5	—	%0,1	22 Eyl 2026
36İzleyin	CVE-2026-16468İstismar yok	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%1,7	22 Eyl 2026
35İzleyin	CVE-2026-16469İstismar yok	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%0,9	22 Eyl 2026
35İzleyin	CVE-2026-16672İstismar yok	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%0,8	22 Eyl 2026
35İzleyin	CVE-2026-17102İstismar yok	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%0,7	22 Eyl 2026
38İzleyin	CVE-2026-17472İstismar yok	Multiple Vulnerabilities in IBM Concert Softwareibm · concert · CWE-269	Kritik9,6	—	%0,4	22 Eyl 2026
36İzleyin	CVE-2026-19202İstismar yok	Token Cache Reuse in mcp-toolbox-sdk-pythongoogle · mcp-toolbox-sdk-python · CWE-524 Kimlik doğrulamasız	Kritik9,1	—	%0,2	22 Eyl 2026
30İzleyin	CVE-2026-77242İstismar yok	MCP Atlassian: Incomplete fix for CVE-2026-27826: DNS rebinding bypasses SSRF validation (validated IP not pinned)mcp-atlassian · mcp atlassian · CWE-367 Kimlik doğrulamasız Kimlik doğrulama atlatma SSRF	Yüksek7,5	—	%0,3	22 Eyl 2026
35İzleyin	CVE-2026-77243İstismar yok	MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypassmcp-atlassian · mcp atlassian · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,5	22 Eyl 2026
40Planlayın	CVE-2026-77244İstismar yok	[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty tokenmcp-atlassian · mcp atlassian · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik10,0	—	%0,3	22 Eyl 2026
33İzleyin	CVE-2026-77251İstismar yok	MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)mcp-atlassian · mcp atlassian · CWE-1276	Yüksek8,3	—	%0,2	22 Eyl 2026
30İzleyin	CVE-2026-77258İstismar yok	MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()mcp-atlassian · mcp atlassian · CWE-22 Yol geçişi	Yüksek7,7	—	%0,3	22 Eyl 2026
33İzleyin	CVE-2026-77260İstismar yok	MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)mcp-atlassian · mcp atlassian · CWE-22 Yol geçişi	Yüksek8,3	—	%0,3	22 Eyl 2026
30İzleyin	CVE-2026-77265İstismar yok	MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flowmcp-atlassian · mcp atlassian · CWE-918 Kimlik doğrulamasız SSRF	Yüksek7,5	—	%0,2	22 Eyl 2026
33İzleyin	CVE-2026-77267İstismar yok	mcp-atlassian has an incomplete SSRF remediationmcp-atlassian · mcp atlassian · CWE-918 SSRF	Yüksek8,3	—	%0,3	22 Eyl 2026
31İzleyin	CVE-2026-77605İstismar yok	Notepad++ “Run by system” executes .txt.cmd when user selected .txt (target confusion → command execution)notepad-plus-plus · notepad-plus-plus · CWE-20 RCE	Yüksek7,8	—	%0,2	22 Eyl 2026
31İzleyin	CVE-2026-86054İstismar yok	Notepad++: Stack Buffer Overflow in `NppParameters::writeSession` via overlong session pathnotepad-plus-plus · notepad-plus-plus · CWE-121 Bellek hatası	Yüksek7,8	—	%0,2	22 Eyl 2026
30İzleyin	CVE-2026-19480İstismar yok	CAI Content Credentials \| Improper Input Validation (CWE-20)adobe · c2pa · CWE-20 Kimlik doğrulamasız	Yüksek7,5	—	%0,7	22 Eyl 2026
30İzleyin	CVE-2026-75632İstismar yok	CAI Content Credentials \| Uncontrolled Resource Consumption (CWE-400)adobe · c2pa · CWE-400 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,9	22 Eyl 2026
34İzleyin	CVE-2026-77255İstismar yok	MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issuemcp-atlassian · mcp atlassian · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek8,6	—	%0,4	22 Eyl 2026
33İzleyin	CVE-2026-77257İstismar yok	MCP Atlassian: HTTP upload tools accept arbitrary server-local file pathsmcp-atlassian · mcp atlassian · CWE-22 Yol geçişi	Yüksek8,3	—	%0,3	22 Eyl 2026
30İzleyin	CVE-2026-77259İstismar yok	MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentialsmcp-atlassian · mcp atlassian · CWE-22 Yol geçişi	Yüksek7,7	—	%0,4	22 Eyl 2026
34İzleyin	CVE-2026-77262Kavram kanıtı	MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of CVE-2026-27825)mcp-atlassian · mcp atlassian · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek8,6	—	%0,5	22 Eyl 2026
30İzleyin	CVE-2026-61685İstismar yok	ReactPress has SQL injection via dynamic column names in TypeORM query buildersfecommunity · reactpress · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%0,5	22 Eyl 2026
28İzleyin	CVE-2026-94367İstismar yok	OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup.openeye · apex network video recorder (nvr) · CWE-78 RCE Komut enjeksiyonu	Yüksek7,2	—	%1,0	22 Eyl 2026
39İzleyin	CVE-2026-88416İstismar yok	MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,3	22 Eyl 2026
28İzleyin	CVE-2026-96271İstismar yok	Photoview through 2.4.0 Authorization Bypass via shareAlbumphotoview · photoview · CWE-639 Erişim denetimi (IDOR)	Yüksek7,1	—	%0,3	22 Eyl 2026
34İzleyin	CVE-2026-96272İstismar yok	ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.phpmacwarrior · clipbucket-v5 · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek8,7	—	%0,4	22 Eyl 2026
34İzleyin	CVE-2026-67615İstismar yok	openEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invokerapereo foundation · openequella · CWE-184 RCE Deserializasyon	Yüksek8,7	—	%0,5	22 Eyl 2026
29İzleyin	CVE-2026-77912İstismar yok	Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipelinegithub · enterprise server · CWE-79 XSS CSRF	Yüksek7,4	—	%0,2	22 Eyl 2026
37İzleyin	CVE-2026-77987İstismar yok	GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgerygithub · enterprise server · CWE-208 Girişsiz RCE SSRF	Kritik9,3	—	%0,8	22 Eyl 2026
35İzleyin	CVE-2026-94450İstismar yok	Potential denial of service when configured to send Retry packets in s2n-quicaws · s2n-quic · CWE-617 Kimlik doğrulamasız	Yüksek8,7	—	%1,9	22 Eyl 2026
39İzleyin	CVE-2026-16346İstismar yok	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-285 RCE Erişim denetimi (IDOR)	Kritik9,9	—	%0,6	22 Eyl 2026
39İzleyin	CVE-2026-17618İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,8	—	%0,2	22 Eyl 2026
30İzleyin	CVE-2026-17620İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-523 Kimlik doğrulamasız	Yüksek7,5	—	%0,2	22 Eyl 2026
36İzleyin	CVE-2026-17635İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,1	—	%0,4	22 Eyl 2026
35İzleyin	CVE-2026-17636İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-787 RCE Bellek hatası	Yüksek8,8	—	%0,7	22 Eyl 2026
35İzleyin	CVE-2026-17637İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-502 Girişsiz RCE Deserializasyon	Yüksek8,8	—	%0,7	22 Eyl 2026
28İzleyin	CVE-2026-17643İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-522 Bilgi sızıntısı	Yüksek7,1	—	%0,1	22 Eyl 2026
28İzleyin	CVE-2026-17644İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-798 Gömülü kimlik bilgisi	Yüksek7,1	—	%0,1	22 Eyl 2026
35İzleyin	CVE-2026-17645İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-269	Yüksek8,8	—	%0,3	22 Eyl 2026
35İzleyin	CVE-2026-17647İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-829 RCE	Yüksek8,8	—	%0,1	22 Eyl 2026
28İzleyin	CVE-2026-18066İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-918 SSRF	Yüksek7,1	—	%0,0	22 Eyl 2026
30İzleyin	CVE-2026-18074İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%0,3	22 Eyl 2026
35İzleyin	CVE-2026-18095İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-787 RCE Bellek hatası	Yüksek8,8	—	%0,4	22 Eyl 2026
30İzleyin	CVE-2026-18114İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%0,4	22 Eyl 2026
30İzleyin	CVE-2026-18123İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-470 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,2	22 Eyl 2026
30İzleyin	CVE-2026-18134İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-319 Kimlik doğrulamasız Zayıf kripto	Yüksek7,5	—	%0,3	22 Eyl 2026
32İzleyin	CVE-2026-18137İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-89 Girişsiz RCE SQL enjeksiyonu	Yüksek8,1	—	%0,5	22 Eyl 2026
30İzleyin	CVE-2026-18152İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-347 Kimlik doğrulamasız Zayıf kripto	Yüksek7,5	—	%0,1	22 Eyl 2026
28İzleyin	CVE-2026-18153İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-327 Zayıf kripto	Yüksek7,1	—	%0,1	22 Eyl 2026
30İzleyin	CVE-2026-18154İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-321 Kimlik doğrulamasız Gömülü kimlik bilgisi	Yüksek7,5	—	%0,2	22 Eyl 2026
30İzleyin	CVE-2026-89425İstismar yok	jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growthfasterxml · jackson-core · CWE-400 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,5	22 Eyl 2026
30İzleyin	CVE-2026-91776İstismar yok	jackson-databind: unbounded growth of the type id cache in TypeDeserializerBase retains every unknown raw type IDfasterxml · jackson-databind · CWE-400 Kimlik doğrulamasız Deserializasyon Hizmet dışı bırakma	Yüksek7,5	—	%0,4	22 Eyl 2026
30İzleyin	CVE-2026-91777İstismar yok	jackson-databind: quadratic forward-reference completion in Collection and Map deserializersfasterxml · jackson-databind · CWE-400 Kimlik doğrulamasız Deserializasyon Hizmet dışı bırakma	Yüksek7,5	—	%0,4	22 Eyl 2026
37İzleyin	CVE-2026-96257İstismar yok	Fast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflowfast · fac1203r gigabit edition · CWE-119 Kimlik doğrulamasız Bellek hatası	Kritik9,3	—	%1,0	22 Eyl 2026
39İzleyin	CVE-2026-18162İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-94 Girişsiz RCE	Kritik9,8	—	%0,8	22 Eyl 2026
39İzleyin	CVE-2026-18163İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-502 Girişsiz RCE Deserializasyon	Kritik9,8	—	%0,8	22 Eyl 2026
39İzleyin	CVE-2026-18169İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-22 Yol geçişi	Kritik9,9	—	%0,7	22 Eyl 2026
29İzleyin	CVE-2026-18172İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-611 Kimlik doğrulamasız XXE	Yüksek7,4	—	%0,3	22 Eyl 2026
29İzleyin	CVE-2026-18176İstismar yok	IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-319 Kimlik doğrulamasız Zayıf kripto	Yüksek7,4	—	%0,2	22 Eyl 2026
34İzleyin	CVE-2022-4997İstismar yok	JetFormBuilder Stripe Gateway < 1.1.0 - Unauthenticated Blind SQLi via Payment Tokenunknown · jet-form-builder-stripe-gateway · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek8,6	—	%0,2	23 Eyl 2026
32İzleyin	CVE-2026-14321İstismar yok	Divi Dash < 1.0.7 - Unauthenticated Denial of Service via IP Address Spoofingunknown · divi-dash · CWE-400 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,2	—	%0,4	23 Eyl 2026
32İzleyin	CVE-2026-19438İstismar yok	Mint Workbench I Path traversal Vulnerabilityabb · mint workbench i · CWE-22 Yol geçişi	Yüksek8,2	—	%0,4	23 Eyl 2026
36İzleyin	CVE-2026-75799İstismar yok	YAHMAN Add-ons < 0.9.31 - Unauthenticated Arbitrary File Upload via Blog Card Cacheunknown · yahman add-ons · CWE-94 Girişsiz RCE Dosya yükleme	Kritik9,0	—	%0,2	23 Eyl 2026
36İzleyin	CVE-2026-82843İstismar yok	WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token Substitutionunknown · wp oauth server ( login with wordpress ) · CWE-287 Kimlik doğrulama atlatma	Kritik9,0	—	%0,1	23 Eyl 2026
32İzleyin	CVE-2026-86608İstismar yok	WP Recipe Maker 9.8.0 - 10.8.1 - Unauthenticated DoS via Unbounded User Meta Insertionunknown · wp recipe maker · CWE-400 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,2	—	%0,2	23 Eyl 2026
27İzleyin	CVE-2026-88997Kavram kanıtı	JSM Show Post Metadata < 4.9.1 - Contributor+ Stored XSS via Custom Field Meta Keyunknown · jsm show post metadata · CWE-79 XSS	Orta6,8	—	%0,4	23 Eyl 2026
32İzleyin	CVE-2026-93508İstismar yok	WC Fields Factory < 4.1.11 - Subscriber+ Arbitrary Post Meta Manipulation via AJAXunknown · wc fields factory · CWE-862 Erişim denetimi (IDOR)	Yüksek8,1	—	%0,2	23 Eyl 2026
14İzleyin	CVE-2026-93528Kavram kanıtı	NP Quote Request for WooCommerce < 2.4.16 - Unauthenticated Order Data Disclosure via Quote Request Pageunknown · np quote request for woocommerce · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Düşük3,7	—	%0,2	23 Eyl 2026
39İzleyin	CVE-2026-82331İstismar yok	Apache BuildStream: tar source extraction escapeapache software foundation · apache buildstream · CWE-59 Kimlik doğrulamasız	Kritik9,8	—	%0,4	23 Eyl 2026
35İzleyin	CVE-2026-15027İstismar yok	Changing｜CGServiSign - OS Command Injectionchanging · cgservisign · CWE-78 Girişsiz RCE Komut enjeksiyonu	Yüksek8,6	—	%3,1	23 Eyl 2026
30İzleyin	CVE-2026-31377İstismar yok	Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Serviceapache software foundation · apache doris · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%0,6	23 Eyl 2026
29İzleyin	CVE-2026-42801İstismar yok	Deference after null check in as_rrcasr · crane，falcon · CWE-476 Bellek hatası	Yüksek7,4	—	%0,2	23 Eyl 2026
30İzleyin	CVE-2026-93368İstismar yok	Rename wp-login.php to anything you want <= 2.0.1 - Unauthenticated SQL Injection via 'log' (Username) Parametertravispluse · rename wp-login.php to anything you want · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%0,5	23 Eyl 2026
33İzleyin	CVE-2026-95626İstismar yok	Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chainstauri · tauri · CWE-79 Girişsiz RCE XSS	Yüksek8,3	—	%0,4	23 Eyl 2026
30İzleyin	CVE-2026-95627İstismar yok	Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursiontauri · tauri-plugin-dialog · CWE-732 XSS	Yüksek7,7	—	%0,3	23 Eyl 2026
32İzleyin	CVE-2026-96454İstismar yok	Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applicationstw93 · pake · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,2	—	%0,4	23 Eyl 2026
33İzleyin	CVE-2026-5695İstismar yok	Multiple vulnerabilities in the Microweber administration panelmicroweber · administration panel · CWE-434 Dosya yükleme	Yüksek8,4	—	%0,4	23 Eyl 2026
19İzleyin	CVE-2026-86604İstismar yok	GTranslate < 5.0.1 - Unauthenticated Arbitrary Shortcode Execution via Email Translationunknown · gtranslate · CWE-74 Kimlik doğrulamasız	Orta4,8	—	%0,2	23 Eyl 2026
35İzleyin	CVE-2026-96455İstismar yok	Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpointpollen robotics · reachy mini · CWE-306 Girişsiz RCE Kimlik doğrulama atlatma	Yüksek8,8	—	%0,2	23 Eyl 2026
30İzleyin	CVE-2026-12370İstismar yok	Remote Code Execution Vulnerabilityzohocorp · manageengine opmanager · CWE-1336 RCE SSTI	Yüksek7,6	—	%1,5	23 Eyl 2026
36İzleyin	CVE-2026-14913İstismar yok	SQL Injection vulnerabilityzohocorp · manageengine opmanager · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%2,4	23 Eyl 2026
30İzleyin	CVE-2026-15358İstismar yok	Path Traversal Vulnerabilityzohocorp · manageengine opmanager · CWE-428 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%1,0	23 Eyl 2026

CVE-2026-88418
35İzleyin
CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection() into a no-op on every state-changing admin reques
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- CSRF
22 Eyl 2026
CVE-2026-88419
35İzleyin
An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=thumbUpload) of Wuzh
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Dosya yükleme
22 Eyl 2026
CVE-2026-88624
36İzleyin
Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory dele
KritikCVSS 9,1İstismar yokEPSS %0
- Girişsiz RCE
- Yol geçişi
22 Eyl 2026
CVE-2026-89281
33İzleyin
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf
YüksekCVSS 8,4İstismar yokEPSS %0
apache http server project · apache lounge windows22 Eyl 2026
CVE-2026-89282
36İzleyin
The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability thr
KritikCVSS 9,1Kavram kanıtıEPSS %0
- Kimlik doğrulamasız
apache http server project · apache lounge windows22 Eyl 2026
CVE-2026-94574
31İzleyin
A local cross-user code execution vulnerability exists in GNU wget (Windows builds from eternallybored.org) due to a hardcoded configuration
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
gnu wget (windows builds) · wget22 Eyl 2026
CVE-2026-56681
29İzleyin
9Router: Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header
YüksekCVSS 7,3Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
decolua · 9router22 Eyl 2026
CVE-2026-63374
37İzleyin
AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
KritikCVSS 9,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
agronholm · anyio22 Eyl 2026
CVE-2026-75608
30İzleyin
Frigate: Viewer-Role User Can Access go2rtc Internal API to obtain sensitive information
YüksekCVSS 7,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
blakeblackshear · frigate22 Eyl 2026
CVE-2026-94640
30İzleyin
Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
red hat · red hat enterprise linux 1022 Eyl 2026
CVE-2026-95655
34İzleyin
Aureus ERP before 1.5.0 Unscoped Message Access via ChatterPanel
YüksekCVSS 8,6İstismar yokEPSS %0
- Erişim denetimi (IDOR)
webkul · aureus erp22 Eyl 2026
CVE-2026-85740
28İzleyin
LightRAG: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard
YüksekCVSS 7,1İstismar yokEPSS %0
- SSRF
hkuds · lightrag22 Eyl 2026
CVE-2026-77426
28İzleyin
Unleash: Missing await on permission check + cross-project IDOR in admin API
YüksekCVSS 7,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
unleash · unleash22 Eyl 2026
CVE-2026-91018
34İzleyin
Double Free in lwIP (lightweight IP)
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
lwip · lwip api22 Eyl 2026
CVE-2026-95814
34İzleyin
Vaultwarden through 1.37.3 Authorization Bypass via Missing Status Check
YüksekCVSS 8,6İstismar yokEPSS %0
- Erişim denetimi (IDOR)
dani-garcia · vaultwarden22 Eyl 2026
CVE-2026-95815
28İzleyin
OpenClaw iOS before 2026.8.11 Credential Exposure via Deep-Link URL Logging
YüksekCVSS 7,2İstismar yokEPSS %0
- Bilgi sızıntısı
openclaw · openclaw ios22 Eyl 2026
CVE-2026-96269
30İzleyin
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affect
YüksekCVSS 7,5İstismar yokEPSS %0
- RCE
gnu · emacs22 Eyl 2026
CVE-2026-16468
36İzleyin
DataStage on Cloud Pak for Data has several vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
ibm · datastage on cloud pak for data22 Eyl 2026
CVE-2026-16469
35İzleyin
DataStage on Cloud Pak for Data has several vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
ibm · datastage on cloud pak for data22 Eyl 2026
CVE-2026-16672
35İzleyin
DataStage on Cloud Pak for Data has several vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
ibm · datastage on cloud pak for data22 Eyl 2026
CVE-2026-17102
35İzleyin
DataStage on Cloud Pak for Data has several vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
ibm · datastage on cloud pak for data22 Eyl 2026
CVE-2026-17472
38İzleyin
Multiple Vulnerabilities in IBM Concert Software
KritikCVSS 9,6İstismar yokEPSS %0
ibm · concert22 Eyl 2026
CVE-2026-19202
36İzleyin
Token Cache Reuse in mcp-toolbox-sdk-python
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
google · mcp-toolbox-sdk-python22 Eyl 2026
CVE-2026-77242
30İzleyin
MCP Atlassian: Incomplete fix for CVE-2026-27826: DNS rebinding bypasses SSRF validation (validated IP not pinned)
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- SSRF
mcp-atlassian · mcp atlassian22 Eyl 2026
CVE-2026-77243
35İzleyin
MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
mcp-atlassian · mcp atlassian22 Eyl 2026
CVE-2026-77244
40Planlayın
[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token
KritikCVSS 10,0İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
mcp-atlassian · mcp atlassian22 Eyl 2026
CVE-2026-77251
33İzleyin
MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)
YüksekCVSS 8,3İstismar yokEPSS %0
mcp-atlassian · mcp atlassian22 Eyl 2026
CVE-2026-77258
30İzleyin
MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()
YüksekCVSS 7,7İstismar yokEPSS %0
- Yol geçişi
mcp-atlassian · mcp atlassian22 Eyl 2026
CVE-2026-77260
33İzleyin
MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)
YüksekCVSS 8,3İstismar yokEPSS %0
- Yol geçişi
mcp-atlassian · mcp atlassian22 Eyl 2026
CVE-2026-77265
30İzleyin
MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
mcp-atlassian · mcp atlassian22 Eyl 2026
CVE-2026-77267
33İzleyin
mcp-atlassian has an incomplete SSRF remediation
YüksekCVSS 8,3İstismar yokEPSS %0
- SSRF
mcp-atlassian · mcp atlassian22 Eyl 2026
CVE-2026-77605
31İzleyin
Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution)
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
notepad-plus-plus · notepad-plus-plus22 Eyl 2026
CVE-2026-86054
31İzleyin
Notepad++: Stack Buffer Overflow in `NppParameters::writeSession` via overlong session path
YüksekCVSS 7,8İstismar yokEPSS %0
- Bellek hatası
notepad-plus-plus · notepad-plus-plus22 Eyl 2026
CVE-2026-19480
30İzleyin
CAI Content Credentials | Improper Input Validation (CWE-20)
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
adobe · c2pa22 Eyl 2026
CVE-2026-75632
30İzleyin
CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
adobe · c2pa22 Eyl 2026
CVE-2026-77255
34İzleyin
MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
mcp-atlassian · mcp atlassian22 Eyl 2026
CVE-2026-77257
33İzleyin
MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths
YüksekCVSS 8,3İstismar yokEPSS %0
- Yol geçişi
mcp-atlassian · mcp atlassian22 Eyl 2026
CVE-2026-77259
30İzleyin
MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials
YüksekCVSS 7,7İstismar yokEPSS %0
- Yol geçişi
mcp-atlassian · mcp atlassian22 Eyl 2026
CVE-2026-77262
34İzleyin
MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of CVE-2026-27825)
YüksekCVSS 8,6Kavram kanıtıEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
mcp-atlassian · mcp atlassian22 Eyl 2026
CVE-2026-61685
30İzleyin
ReactPress has SQL injection via dynamic column names in TypeORM query builders
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
fecommunity · reactpress22 Eyl 2026
CVE-2026-94367
28İzleyin
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup.
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
openeye · apex network video recorder (nvr)22 Eyl 2026
CVE-2026-88416
39İzleyin
MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
22 Eyl 2026
CVE-2026-96271
28İzleyin
Photoview through 2.4.0 Authorization Bypass via shareAlbum
YüksekCVSS 7,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
photoview · photoview22 Eyl 2026
CVE-2026-96272
34İzleyin
ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
macwarrior · clipbucket-v522 Eyl 2026
CVE-2026-67615
34İzleyin
openEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invoker
YüksekCVSS 8,7İstismar yokEPSS %0
- RCE
- Deserializasyon
apereo foundation · openequella22 Eyl 2026
CVE-2026-77912
29İzleyin
Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipeline
YüksekCVSS 7,4İstismar yokEPSS %0
- XSS
- CSRF
github · enterprise server22 Eyl 2026
CVE-2026-77987
37İzleyin
GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery
KritikCVSS 9,3İstismar yokEPSS %0
- Girişsiz RCE
- SSRF
github · enterprise server22 Eyl 2026
CVE-2026-94450
35İzleyin
Potential denial of service when configured to send Retry packets in s2n-quic
YüksekCVSS 8,7İstismar yokEPSS %1
- Kimlik doğrulamasız
aws · s2n-quic22 Eyl 2026
CVE-2026-16346
39İzleyin
DataStage on Cloud Pak for Data has several vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %0
- RCE
- Erişim denetimi (IDOR)
ibm · datastage on cloud pak for data22 Eyl 2026
CVE-2026-17618
39İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
ibm · financial transaction manager22 Eyl 2026
CVE-2026-17620
30İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
ibm · financial transaction manager22 Eyl 2026
CVE-2026-17635
36İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
ibm · financial transaction manager22 Eyl 2026
CVE-2026-17636
35İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Bellek hatası
ibm · financial transaction manager22 Eyl 2026
CVE-2026-17637
35İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Deserializasyon
ibm · financial transaction manager22 Eyl 2026
CVE-2026-17643
28İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,1İstismar yokEPSS %0
- Bilgi sızıntısı
ibm · financial transaction manager22 Eyl 2026
CVE-2026-17644
28İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,1İstismar yokEPSS %0
- Gömülü kimlik bilgisi
ibm · financial transaction manager22 Eyl 2026
CVE-2026-17645
35İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
ibm · financial transaction manager22 Eyl 2026
CVE-2026-17647
35İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18066
28İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,1İstismar yokEPSS %0
- SSRF
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18074
30İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18095
35İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Bellek hatası
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18114
30İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18123
30İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18134
30İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18137
32İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 8,1İstismar yokEPSS %0
- Girişsiz RCE
- SQL enjeksiyonu
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18152
30İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18153
28İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,1İstismar yokEPSS %0
- Zayıf kripto
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18154
30İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
ibm · financial transaction manager22 Eyl 2026
CVE-2026-89425
30İzleyin
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
fasterxml · jackson-core22 Eyl 2026
CVE-2026-91776
30İzleyin
jackson-databind: unbounded growth of the type id cache in TypeDeserializerBase retains every unknown raw type ID
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Deserializasyon
- Hizmet dışı bırakma
fasterxml · jackson-databind22 Eyl 2026
CVE-2026-91777
30İzleyin
jackson-databind: quadratic forward-reference completion in Collection and Map deserializers
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Deserializasyon
- Hizmet dışı bırakma
fasterxml · jackson-databind22 Eyl 2026
CVE-2026-96257
37İzleyin
Fast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflow
KritikCVSS 9,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bellek hatası
fast · fac1203r gigabit edition22 Eyl 2026
CVE-2026-18162
39İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18163
39İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
- Deserializasyon
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18169
39İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %0
- Yol geçişi
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18172
29İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- XXE
ibm · financial transaction manager22 Eyl 2026
CVE-2026-18176
29İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
ibm · financial transaction manager22 Eyl 2026
CVE-2022-4997
34İzleyin
JetFormBuilder Stripe Gateway < 1.1.0 - Unauthenticated Blind SQLi via Payment Token
YüksekCVSS 8,6İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
unknown · jet-form-builder-stripe-gateway23 Eyl 2026
CVE-2026-14321
32İzleyin
Divi Dash < 1.0.7 - Unauthenticated Denial of Service via IP Address Spoofing
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
unknown · divi-dash23 Eyl 2026
CVE-2026-19438
32İzleyin
Mint Workbench I Path traversal Vulnerability
YüksekCVSS 8,2İstismar yokEPSS %0
- Yol geçişi
abb · mint workbench i23 Eyl 2026
CVE-2026-75799
36İzleyin
YAHMAN Add-ons < 0.9.31 - Unauthenticated Arbitrary File Upload via Blog Card Cache
KritikCVSS 9,0İstismar yokEPSS %0
- Girişsiz RCE
- Dosya yükleme
unknown · yahman add-ons23 Eyl 2026
CVE-2026-82843
36İzleyin
WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token Substitution
KritikCVSS 9,0İstismar yokEPSS %0
- Kimlik doğrulama atlatma
unknown · wp oauth server ( login with wordpress )23 Eyl 2026
CVE-2026-86608
32İzleyin
WP Recipe Maker 9.8.0 - 10.8.1 - Unauthenticated DoS via Unbounded User Meta Insertion
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
unknown · wp recipe maker23 Eyl 2026
CVE-2026-88997
27İzleyin
JSM Show Post Metadata < 4.9.1 - Contributor+ Stored XSS via Custom Field Meta Key
OrtaCVSS 6,8Kavram kanıtıEPSS %0
- XSS
unknown · jsm show post metadata23 Eyl 2026
CVE-2026-93508
32İzleyin
WC Fields Factory < 4.1.11 - Subscriber+ Arbitrary Post Meta Manipulation via AJAX
YüksekCVSS 8,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
unknown · wc fields factory23 Eyl 2026
CVE-2026-93528
14İzleyin
NP Quote Request for WooCommerce < 2.4.16 - Unauthenticated Order Data Disclosure via Quote Request Page
DüşükCVSS 3,7Kavram kanıtıEPSS %0
- Kimlik doğrulamasız
- Bilgi sızıntısı
unknown · np quote request for woocommerce23 Eyl 2026
CVE-2026-82331
39İzleyin
Apache BuildStream: tar source extraction escape
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
apache software foundation · apache buildstream23 Eyl 2026
CVE-2026-15027
35İzleyin
Changing｜CGServiSign - OS Command Injection
YüksekCVSS 8,6İstismar yokEPSS %3
- Girişsiz RCE
- Komut enjeksiyonu
changing · cgservisign23 Eyl 2026
CVE-2026-31377
30İzleyin
Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
apache software foundation · apache doris23 Eyl 2026
CVE-2026-42801
29İzleyin
Deference after null check in as_rrc
YüksekCVSS 7,4İstismar yokEPSS %0
- Bellek hatası
asr · crane，falcon23 Eyl 2026
CVE-2026-93368
30İzleyin
Rename wp-login.php to anything you want <= 2.0.1 - Unauthenticated SQL Injection via 'log' (Username) Parameter
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
travispluse · rename wp-login.php to anything you want23 Eyl 2026
CVE-2026-95626
33İzleyin
Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains
YüksekCVSS 8,3İstismar yokEPSS %0
- Girişsiz RCE
- XSS
tauri · tauri23 Eyl 2026
CVE-2026-95627
30İzleyin
Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion
YüksekCVSS 7,7İstismar yokEPSS %0
- XSS
tauri · tauri-plugin-dialog23 Eyl 2026
CVE-2026-96454
32İzleyin
Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
tw93 · pake23 Eyl 2026
CVE-2026-5695
33İzleyin
Multiple vulnerabilities in the Microweber administration panel
YüksekCVSS 8,4İstismar yokEPSS %0
- Dosya yükleme
microweber · administration panel23 Eyl 2026
CVE-2026-86604
19İzleyin
GTranslate < 5.0.1 - Unauthenticated Arbitrary Shortcode Execution via Email Translation
OrtaCVSS 4,8İstismar yokEPSS %0
- Kimlik doğrulamasız
unknown · gtranslate23 Eyl 2026
CVE-2026-96455
35İzleyin
Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- Kimlik doğrulama atlatma
pollen robotics · reachy mini23 Eyl 2026
CVE-2026-12370
30İzleyin
Remote Code Execution Vulnerability
YüksekCVSS 7,6İstismar yokEPSS %1
- RCE
- SSTI
zohocorp · manageengine opmanager23 Eyl 2026
CVE-2026-14913
36İzleyin
SQL Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2
- SQL enjeksiyonu
zohocorp · manageengine opmanager23 Eyl 2026
CVE-2026-15358
30İzleyin
Path Traversal Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
zohocorp · manageengine opmanager23 Eyl 2026