Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.957 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 63 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
19İzleyin | CVE-2026-86604İstismar yok | GTranslate < 5.0.1 - Unauthenticated Arbitrary Shortcode Execution via Email Translationunknown · gtranslate · CWE-74 | Orta4,8 | — | %0,2 | 23 Eyl 2026 |
35İzleyin | CVE-2026-96455İstismar yok | Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpointpollen robotics · reachy mini · CWE-306 | Yüksek8,8 | — | %0,2 | 23 Eyl 2026 |
30İzleyin | CVE-2026-12370İstismar yok | Remote Code Execution Vulnerabilityzohocorp · manageengine opmanager · CWE-1336 | Yüksek7,6 | — | %1,5 | 23 Eyl 2026 |
36İzleyin | CVE-2026-14913İstismar yok | SQL Injection vulnerabilityzohocorp · manageengine opmanager · CWE-89 | Yüksek8,8 | — | %2,4 | 23 Eyl 2026 |
30İzleyin | CVE-2026-15358İstismar yok | Path Traversal Vulnerabilityzohocorp · manageengine opmanager · CWE-428 | Yüksek7,5 | — | %1,0 | 23 Eyl 2026 |
29İzleyin | CVE-2026-75973İstismar yok | Apache Tomcat: Cross-context authentication mix-up with Jakarta Authentication configuredapache software foundation · apache tomcat · CWE-287 | Yüksek7,3 | — | %0,5 | 23 Eyl 2026 |
30İzleyin | CVE-2026-77791İstismar yok | Apache Tomcat: DoS via busy wait during WebSocket closeapache software foundation · apache tomcat · CWE-400 | Yüksek7,5 | — | %0,6 | 23 Eyl 2026 |
30İzleyin | CVE-2026-78383İstismar yok | Apache Tomcat: AJP DoS via missing request bodyapache software foundation · apache tomcat · CWE-770 | Yüksek7,5 | — | %0,5 | 23 Eyl 2026 |
29İzleyin | CVE-2026-78437İstismar yok | Apache Tomcat: HTTP/2 DoS via malformed requestapache software foundation · apache tomcat · CWE-459 | Yüksek7,3 | — | %0,5 | 23 Eyl 2026 |
30İzleyin | CVE-2026-79677İstismar yok | Apache Tomcat: WebSocket DoS due to lost asynchronous write timeoutapache software foundation · apache tomcat · CWE-772 | Yüksek7,5 | — | %0,4 | 23 Eyl 2026 |
21İzleyin | CVE-2026-80444Kavram kanıtı | Unauthenticated Open Redirect Vulnerability in Abis Technology's AVESİSabis technology ltd. co. · avesi̇s · CWE-601 | Orta5,4 | — | %0,2 | 23 Eyl 2026 |
33İzleyin | CVE-2026-84787İstismar yok | Privilege Escalation vulnerabilityzohocorp · manageengine opmanager · CWE-250 | Yüksek8,1 | — | %2,1 | 23 Eyl 2026 |
28İzleyin | CVE-2026-84789İstismar yok | Broken Access Control vulnerabilityzohocorp · manageengine opmanager · CWE-639 | Yüksek7,1 | — | %1,4 | 23 Eyl 2026 |
28İzleyin | CVE-2026-84791İstismar yok | Broken Access Control vulnerabilityzohocorp · manageengine opmanager · CWE-639 | Yüksek7,1 | — | %1,4 | 23 Eyl 2026 |
39İzleyin | CVE-2026-86248İstismar yok | Apache Tomcat: Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabledapache software foundation · apache tomcat · CWE-287 | Kritik9,8 | — | %0,4 | 23 Eyl 2026 |
36İzleyin | CVE-2026-86350Kavram kanıtı | Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-upapache software foundation · apache tomcat · CWE-444 | Kritik9,1 | — | %0,4 | 23 Eyl 2026 |
30İzleyin | CVE-2026-87022İstismar yok | Apache Tomcat: WebSocket message smuggling with per-message-deflateapache software foundation · apache tomcat · CWE-130 | Yüksek7,5 | — | %0,5 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91789İstismar yok | Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerabilityfoxit · pdf editor · CWE-787 | Yüksek7,8 | — | %0,2 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91790İstismar yok | Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerabilityfoxit · pdf editor · CWE-416 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91791İstismar yok | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerabilityfoxit · pdf editor · CWE-416 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91792İstismar yok | Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerabilityfoxit · pdf editor · CWE-416 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91793İstismar yok | Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerabilityfoxit · pdf editor · CWE-416 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91795İstismar yok | Foxit PDF Editor/Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerabilityfoxit · pdf editor · CWE-822 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91797İstismar yok | Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerabilityfoxit · pdf editor · CWE-73 | Yüksek7,8 | — | %0,3 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91799İstismar yok | Foxit Editor/Reader Array resetForm Use-After-Free Vulnerabilityfoxit · pdf editor · CWE-416 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
35İzleyin | CVE-2026-91800İstismar yok | Foxit PDF Editor installer local privilege escalationfoxit · pdf editor · CWE-732 | Yüksek8,8 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91801İstismar yok | Foxit PDF Editor/Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerabilityfoxit · pdf editor · CWE-22 | Yüksek7,8 | — | %0,2 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91803İstismar yok | Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijackingfoxit · pdf editor · CWE-427 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91804İstismar yok | Foxit PDF Editor/Reader Out-of-bounds Write Vulnerability While Renderingfoxit · pdf editor · CWE-787 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91805İstismar yok | Use-after-free Vulnerability in Foxit PDF Editor/Reader Page-tree Handlingfoxit · pdf editor · CWE-416 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91806İstismar yok | Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerabilityfoxit · pdf editor · CWE-416 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91809İstismar yok | Foxit PDF Editor/Reader Annotation Use-After-Free Information Disclosure Vulnerabilityfoxit · pdf editor · CWE-416 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91811İstismar yok | Foxit PDF Editor/Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilityfoxit · pdf editor · CWE-787 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
32İzleyin | CVE-2026-91812İstismar yok | Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerabilityfoxit · pdf editor · CWE-295 | Yüksek8,1 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91813İstismar yok | Foxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerabilityfoxit · pdf editor · CWE-367 | Yüksek7,8 | — | %0,0 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91815İstismar yok | Foxit PDF Editor/Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerabilityfoxit · pdf editor · CWE-787 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-91816İstismar yok | Foxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution Vulnerabilityfoxit · pdf editor · CWE-416 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
41Planlayın | CVE-2026-19599İstismar yok | Remote Code Execution vulnerabilityzohocorp · manageengine opmanager · CWE-78 | Kritik9,9 | — | %5,0 | 23 Eyl 2026 |
36İzleyin | CVE-2026-75825İstismar yok | Authentication Bypass vulnerabilityzohocorp · manageengine opmanager · CWE-306 | Yüksek8,8 | — | %2,1 | 23 Eyl 2026 |
37İzleyin | CVE-2026-76978İstismar yok | Command Injection vulnerabilityzohocorp · manageengine opmanager · CWE-78 | Yüksek8,8 | — | %8,1 | 23 Eyl 2026 |
31İzleyin | CVE-2026-76979İstismar yok | XML Injection vulnerabilityzohocorp · manageengine opmanager · CWE-91 | Yüksek7,7 | — | %2,0 | 23 Eyl 2026 |
29İzleyin | CVE-2026-76980İstismar yok | Data Exposure vulnerabilityzohocorp · manageengine opmanager · CWE-20 | Yüksek7,4 | — | %0,8 | 23 Eyl 2026 |
31İzleyin | CVE-2026-12974İstismar yok | Security Policy Bypass in Forcepoint Security Engine (NGFW)forcepoint · forcepoint security engine (ngfw) · CWE-183 | Yüksek7,9 | — | %0,4 | 23 Eyl 2026 |
40Planlayın | CVE-2026-59167İstismar yok | SunEditor: Critical XSS vulnerability - sanitizer bypassjihong88 · suneditor · CWE-79 | Kritik10,0 | — | %0,4 | 23 Eyl 2026 |
29İzleyin | CVE-2026-94243İstismar yok | Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidenceapache · sling security · CWE-346 | Yüksek7,3 | — | %0,3 | 23 Eyl 2026 |
37İzleyin | CVE-2026-86677İstismar yok | Broken Authentication vulnerabilityzohocorp · manageengine applications manager · CWE-89 | Yüksek8,8 | — | %5,0 | 23 Eyl 2026 |
36İzleyin | CVE-2026-86678İstismar yok | Broken Authentication vulnerabilityzohocorp · manageengine applications manager · CWE-639 | Yüksek8,8 | — | %1,7 | 23 Eyl 2026 |
29İzleyin | CVE-2026-86679İstismar yok | Broken Access Control vulnerabilityzohocorp · manageengine applications manager · CWE-20 | Yüksek7,1 | — | %1,8 | 23 Eyl 2026 |
30İzleyin | CVE-2026-86681İstismar yok | Broken Access Control vulnerabilityzohocorp · manageengine applications manager · CWE-306 | Yüksek7,6 | — | %1,1 | 23 Eyl 2026 |
33İzleyin | CVE-2026-86683İstismar yok | Broken Authentication Vulnerabilityzohocorp · manageengine applications manager · CWE-20 | Yüksek8,1 | — | %1,6 | 23 Eyl 2026 |
41Planlayın | CVE-2026-86708İstismar yok | Sensitive data exposurezohocorp · manageengine applications manager · CWE-321 | Kritik10,0 | — | %2,7 | 23 Eyl 2026 |
37İzleyin | CVE-2026-96560İstismar yok | LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channelmodeltc · lightllm · CWE-502 | Kritik9,3 | — | %1,1 | 23 Eyl 2026 |
34İzleyin | CVE-2026-55610İstismar yok | InvoiceShelf has cross-company user read/update IDOR that enables cross-tenant account takeoverinvoiceshelf · invoiceshelf · CWE-639 | Yüksek8,7 | — | %0,4 | 23 Eyl 2026 |
29İzleyin | CVE-2026-73588İstismar yok | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulndell · policy manager for secure connect gateway · CWE-306 | Yüksek7,4 | — | %0,3 | 23 Eyl 2026 |
30İzleyin | CVE-2026-73591İstismar yok | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Coddell · policy manager for secure connect gateway · CWE-540 | Yüksek7,5 | — | %0,4 | 23 Eyl 2026 |
31İzleyin | CVE-2026-96442İstismar yok | Emacs: emacs: arbitrary code execution in flymake modegnu emacs · gnu emacs · CWE-94 | Yüksek7,8 | — | %0,2 | 23 Eyl 2026 |
32İzleyin | CVE-2026-96599İstismar yok | Isotope eCommerce through 2.9.10 Weak Order Identifier Generationisotope · isotope-core · CWE-330 | Yüksek8,2 | — | %0,4 | 23 Eyl 2026 |
28İzleyin | CVE-2026-96600İstismar yok | Isotope eCommerce through 2.9.10 SQL Injection via Backend Callbacksisotope · isotope-core · CWE-89 | Yüksek7,0 | — | %0,4 | 23 Eyl 2026 |
28İzleyin | CVE-2026-96609İstismar yok | Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognizerobur · albatross · CWE-770 | Yüksek7,1 | — | %0,3 | 23 Eyl 2026 |
28İzleyin | RUSTSEC-2026-0307İstismar yok | `uncbv`: archive extraction is vulnerable to path traversal (zip-slip)crates.io · uncbv | Yüksek7,1 | — | — | 23 Eyl 2026 |
34İzleyin | CVE-2026-79310İstismar yok | webpy web.py 0.76 is vulnerable to server-side template injection (SSTI).CWE-94 | Yüksek8,5 | — | %0,6 | 23 Eyl 2026 |
28İzleyin | CVE-2026-93769İstismar yok | HumHub 1.18.5 - Stored XSS in Profile Field Category title via HForm#renderForm leading to System Administrator account takeoverhumhub · humhub · CWE-79 | Yüksek7,2 | — | %0,4 | 23 Eyl 2026 |
34İzleyin | CVE-2026-96673İstismar yok | Photoview through 2.4.0 SQL Injection via album download routephotoview · photoview · CWE-89 | Yüksek8,7 | — | %0,5 | 23 Eyl 2026 |
39İzleyin | CVE-2026-76183Kavram kanıtı | Apache Tomcat: Bypass of security constraints for WebSocket endpointsapache software foundation · apache tomcat · CWE-289 | Kritik9,8 | — | %0,5 | 23 Eyl 2026 |
32İzleyin | CVE-2026-77762İstismar yok | Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled Requestapache software foundation · apache tomcat · CWE-362 | Yüksek8,1 | — | %0,4 | 23 Eyl 2026 |
30İzleyin | CVE-2026-19888İstismar yok | NULL pointer dereference in SCRAM client-final-message parsing in PgBouncerCWE-476 | Yüksek7,5 | — | %0,3 | 23 Eyl 2026 |
30İzleyin | CVE-2026-6668İstismar yok | Integer overflow causes an infinite loop in packet buffer growth in PgBouncerCWE-190 | Yüksek7,5 | — | %0,5 | 23 Eyl 2026 |
38İzleyin | CVE-2026-85724İstismar yok | Moquette pattern ACL wildcard injection allows cross-tenant authorization bypassmoquette · moquette · CWE-155 | Kritik9,6 | — | %0,3 | 23 Eyl 2026 |
30İzleyin | CVE-2026-88830İstismar yok | Busybox: busybox: tls montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflowred hat · red hat hardened images · CWE-131 | Yüksek7,5 | — | %0,3 | 23 Eyl 2026 |
29İzleyin | CVE-2026-88832İstismar yok | Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflowred hat · red hat hardened images · CWE-787 | Yüksek7,3 | — | %0,1 | 23 Eyl 2026 |
35İzleyin | CVE-2026-93349Kavram kanıtı | Frictionless OS Command Injection via explore Console Commandfrictionlessdata · frictionless-py · CWE-78 | Yüksek8,6 | — | %2,1 | 23 Eyl 2026 |
34İzleyin | CVE-2026-95842İstismar yok | Moquette uncaught MQTT command exceptions can terminate shared session event loopsmoquette · moquette · CWE-248 | Yüksek8,7 | — | %0,4 | 23 Eyl 2026 |
34İzleyin | CVE-2026-95843İstismar yok | Moquette malformed shared subscriptions can crash command processingmoquette · moquette · CWE-20 | Yüksek8,7 | — | %0,4 | 23 Eyl 2026 |
34İzleyin | CVE-2026-95845İstismar yok | Moquette unbounded per-session message queues allow memory exhaustionmoquette · moquette · CWE-770 | Yüksek8,7 | — | %0,4 | 23 Eyl 2026 |
34İzleyin | CVE-2026-95846İstismar yok | Moquette publishes Last-Will messages without enforcing write authorizationmoquette · moquette · CWE-862 | Yüksek8,7 | — | %0,3 | 23 Eyl 2026 |
35İzleyin | CVE-2026-95847İstismar yok | Moquette client IDs can cause cross-session H2 durable-queue corruptionmoquette · moquette · CWE-99 | Yüksek8,8 | — | %0,3 | 23 Eyl 2026 |
37İzleyin | CVE-2026-95848İstismar yok | Moquette fails open when configured authentication or authorization classes cannot loadmoquette · moquette · CWE-636 | Kritik9,3 | — | %0,4 | 23 Eyl 2026 |
37İzleyin | CVE-2026-96755İstismar yok | orval @orval/effect 8.14.0 through 8.28.1 Code Injectionorval-labs · orval · CWE-94 | Kritik9,3 | — | %0,7 | 23 Eyl 2026 |
36İzleyin | CVE-2026-96756İstismar yok | orval before 8.30.0 Code Injection via Factory Generationorval-labs · orval · CWE-94 | Kritik9,2 | — | %0,8 | 23 Eyl 2026 |
37İzleyin | CVE-2026-96757İstismar yok | orval before 8.29.0 Code Injection via unescaped OpenAPI media-typeorval-labs · orval · CWE-94 | Kritik9,3 | — | %0,8 | 23 Eyl 2026 |
37İzleyin | CVE-2026-96758İstismar yok | orval @orval/core before 8.28.0 Code Injection via Form-Dataorval-labs · orval · CWE-94 | Kritik9,3 | — | %0,7 | 23 Eyl 2026 |
35İzleyin | CVE-2026-96775İstismar yok | MLflow dspy bypasses pickle deserialization controlmlflow · mlflow · CWE-502 | Yüksek8,8 | — | %0,6 | 23 Eyl 2026 |
35İzleyin | CVE-2026-96804İstismar yok | MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _loadmlflow · mlflow · CWE-502 | Yüksek8,8 | — | %0,7 | 23 Eyl 2026 |
29İzleyin | CVE-2026-96808İstismar yok | In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validflatpak · flatpak · CWE-61 | Yüksek7,4 | — | %0,1 | 23 Eyl 2026 |
30İzleyin | CVE-2026-86243İstismar yok | Apache Tomcat Native: DoS via TLS handshakeapache · tomcat native · CWE-126 | Yüksek7,5 | — | %0,5 | 23 Eyl 2026 |
36İzleyin | CVE-2026-86246İstismar yok | Apache Tomcat Native: Insecure OpenSSL options enabledapache · tomcat native · CWE-1188 | Kritik9,1 | — | %0,3 | 23 Eyl 2026 |
29İzleyin | CVE-2026-86247İstismar yok | Apache Tomcat Native: Client certificate requirements can be down-gradedapache · tomcat native · CWE-366 | Yüksek7,4 | — | %0,2 | 23 Eyl 2026 |
29İzleyin | CVE-2026-95676İstismar yok | AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypasswatchguard · authentication gateway · CWE-287 | Yüksek7,4 | — | %0,3 | 23 Eyl 2026 |
28İzleyin | CVE-2026-18177İstismar yok | IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilitiesibm · financial transaction manager · CWE-862 | Yüksek7,1 | — | %0,2 | 23 Eyl 2026 |
21İzleyin | CVE-2026-88831İstismar yok | Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengthsred hat · red hat hardened images · CWE-636 | Orta5,3 | — | %0,2 | 23 Eyl 2026 |
31İzleyin | CVE-2026-96512Kavram kanıtı | Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationred hat · red hat hardened images · CWE-863 | Yüksek7,8 | — | %0,3 | 23 Eyl 2026 |
35İzleyin | CVE-2026-96275İstismar yok | Flatpak: flatpak: arbitrary write access as root via extra-data extractionred hat · red hat enterprise linux 10 · CWE-22 | Yüksek8,8 | — | %0,3 | 23 Eyl 2026 |
31İzleyin | CVE-2026-96611İstismar yok | FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c.ffmpeg · ffmpeg · CWE-190 | Yüksek7,8 | — | %0,1 | 23 Eyl 2026 |
34İzleyin | CVE-2026-75131İstismar yok | NetworkManager-l2tp Privilege Escalation via pppd Username Injectionnm-l2tp · networkmanager-l2tp · CWE-88 | Yüksek8,5 | — | %0,1 | 23 Eyl 2026 |
30İzleyin | CVE-2026-77394İstismar yok | OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widgetopenc3 · cosmos · CWE-79 | Yüksek7,6 | — | %0,4 | 23 Eyl 2026 |
35İzleyin | CVE-2026-77601İstismar yok | OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` settingopenc3 · cosmos · CWE-78 | Yüksek8,8 | — | %0,6 | 23 Eyl 2026 |
30İzleyin | CVE-2026-82356İstismar yok | Imprivata EAM: Unrotatable X.509 RSA Key Pair in Productionimprivata · imprivata enterprise access management · CWE-326 | Yüksek7,5 | — | %0,1 | 23 Eyl 2026 |
39İzleyin | CVE-2026-84474İstismar yok | Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure andred hat · red hat ansible automation platform 2.4 for rhel 8 · CWE-807 | Kritik9,9 | — | %0,8 | 23 Eyl 2026 |
32İzleyin | CVE-2026-84486İstismar yok | Automation-controller: automation-controller-container: automation-controller: unauthenticated debug scheduler-trigger endpoints (allowany, routed without debugred hat · red hat ansible automation platform 2.6 for rhel 9 · CWE-489 | Yüksek8,2 | — | %0,5 | 23 Eyl 2026 |
30İzleyin | CVE-2026-84499İstismar yok | Automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via schedule/workflowjobtemplatred hat · red hat ansible automation platform 2.5 for rhel 8 · CWE-209 | Yüksek7,7 | — | %0,3 | 23 Eyl 2026 |
- CVE-2026-8660419İzleyin
GTranslate < 5.0.1 - Unauthenticated Arbitrary Shortcode Execution via Email Translation
OrtaCVSS 4,8İstismar yokEPSS %0unknown · gtranslate23 Eyl 2026
- CVE-2026-9645535İzleyin
Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint
YüksekCVSS 8,8İstismar yokEPSS %0pollen robotics · reachy mini23 Eyl 2026
- CVE-2026-1237030İzleyin
Remote Code Execution Vulnerability
YüksekCVSS 7,6İstismar yokEPSS %1zohocorp · manageengine opmanager23 Eyl 2026
- CVE-2026-1491336İzleyin
SQL Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2zohocorp · manageengine opmanager23 Eyl 2026
- CVE-2026-1535830İzleyin
Path Traversal Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1zohocorp · manageengine opmanager23 Eyl 2026
- CVE-2026-7597329İzleyin
Apache Tomcat: Cross-context authentication mix-up with Jakarta Authentication configured
YüksekCVSS 7,3İstismar yokEPSS %0apache software foundation · apache tomcat23 Eyl 2026
- CVE-2026-7779130İzleyin
Apache Tomcat: DoS via busy wait during WebSocket close
YüksekCVSS 7,5İstismar yokEPSS %0apache software foundation · apache tomcat23 Eyl 2026
- CVE-2026-7838330İzleyin
Apache Tomcat: AJP DoS via missing request body
YüksekCVSS 7,5İstismar yokEPSS %0apache software foundation · apache tomcat23 Eyl 2026
- CVE-2026-7843729İzleyin
Apache Tomcat: HTTP/2 DoS via malformed request
YüksekCVSS 7,3İstismar yokEPSS %0apache software foundation · apache tomcat23 Eyl 2026
- CVE-2026-7967730İzleyin
Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout
YüksekCVSS 7,5İstismar yokEPSS %0apache software foundation · apache tomcat23 Eyl 2026
- CVE-2026-8044421İzleyin
Unauthenticated Open Redirect Vulnerability in Abis Technology's AVESİS
OrtaCVSS 5,4Kavram kanıtıEPSS %0abis technology ltd. co. · avesi̇s23 Eyl 2026
- CVE-2026-8478733İzleyin
Privilege Escalation vulnerability
YüksekCVSS 8,1İstismar yokEPSS %2zohocorp · manageengine opmanager23 Eyl 2026
- CVE-2026-8478928İzleyin
Broken Access Control vulnerability
YüksekCVSS 7,1İstismar yokEPSS %1zohocorp · manageengine opmanager23 Eyl 2026
- CVE-2026-8479128İzleyin
Broken Access Control vulnerability
YüksekCVSS 7,1İstismar yokEPSS %1zohocorp · manageengine opmanager23 Eyl 2026
- CVE-2026-8624839İzleyin
Apache Tomcat: Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled
KritikCVSS 9,8İstismar yokEPSS %0apache software foundation · apache tomcat23 Eyl 2026
- CVE-2026-8635036İzleyin
Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up
KritikCVSS 9,1Kavram kanıtıEPSS %0apache software foundation · apache tomcat23 Eyl 2026
- CVE-2026-8702230İzleyin
Apache Tomcat: WebSocket message smuggling with per-message-deflate
YüksekCVSS 7,5İstismar yokEPSS %0apache software foundation · apache tomcat23 Eyl 2026
- CVE-2026-9178931İzleyin
Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9179031İzleyin
Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9179131İzleyin
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9179231İzleyin
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9179331İzleyin
Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9179531İzleyin
Foxit PDF Editor/Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9179731İzleyin
Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9179931İzleyin
Foxit Editor/Reader Array resetForm Use-After-Free Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9180035İzleyin
Foxit PDF Editor installer local privilege escalation
YüksekCVSS 8,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9180131İzleyin
Foxit PDF Editor/Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9180331İzleyin
Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9180431İzleyin
Foxit PDF Editor/Reader Out-of-bounds Write Vulnerability While Rendering
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9180531İzleyin
Use-after-free Vulnerability in Foxit PDF Editor/Reader Page-tree Handling
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9180631İzleyin
Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9180931İzleyin
Foxit PDF Editor/Reader Annotation Use-After-Free Information Disclosure Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9181131İzleyin
Foxit PDF Editor/Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9181232İzleyin
Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9181331İzleyin
Foxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9181531İzleyin
Foxit PDF Editor/Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-9181631İzleyin
Foxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0foxit · pdf editor23 Eyl 2026
- CVE-2026-1959941Planlayın
Remote Code Execution vulnerability
KritikCVSS 9,9İstismar yokEPSS %5zohocorp · manageengine opmanager23 Eyl 2026
- CVE-2026-7582536İzleyin
Authentication Bypass vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2zohocorp · manageengine opmanager23 Eyl 2026
- CVE-2026-7697837İzleyin
Command Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %8zohocorp · manageengine opmanager23 Eyl 2026
- CVE-2026-7697931İzleyin
XML Injection vulnerability
YüksekCVSS 7,7İstismar yokEPSS %2zohocorp · manageengine opmanager23 Eyl 2026
- CVE-2026-7698029İzleyin
Data Exposure vulnerability
YüksekCVSS 7,4İstismar yokEPSS %0zohocorp · manageengine opmanager23 Eyl 2026
- CVE-2026-1297431İzleyin
Security Policy Bypass in Forcepoint Security Engine (NGFW)
YüksekCVSS 7,9İstismar yokEPSS %0forcepoint · forcepoint security engine (ngfw)23 Eyl 2026
- CVE-2026-5916740Planlayın
SunEditor: Critical XSS vulnerability - sanitizer bypass
KritikCVSS 10,0İstismar yokEPSS %0jihong88 · suneditor23 Eyl 2026
- CVE-2026-9424329İzleyin
Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence
YüksekCVSS 7,3İstismar yokEPSS %0apache · sling security23 Eyl 2026
- CVE-2026-8667737İzleyin
Broken Authentication vulnerability
YüksekCVSS 8,8İstismar yokEPSS %5zohocorp · manageengine applications manager23 Eyl 2026
- CVE-2026-8667836İzleyin
Broken Authentication vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1zohocorp · manageengine applications manager23 Eyl 2026
- CVE-2026-8667929İzleyin
Broken Access Control vulnerability
YüksekCVSS 7,1İstismar yokEPSS %1zohocorp · manageengine applications manager23 Eyl 2026
- CVE-2026-8668130İzleyin
Broken Access Control vulnerability
YüksekCVSS 7,6İstismar yokEPSS %1zohocorp · manageengine applications manager23 Eyl 2026
- CVE-2026-8668333İzleyin
Broken Authentication Vulnerability
YüksekCVSS 8,1İstismar yokEPSS %1zohocorp · manageengine applications manager23 Eyl 2026
- CVE-2026-8670841Planlayın
Sensitive data exposure
KritikCVSS 10,0İstismar yokEPSS %2zohocorp · manageengine applications manager23 Eyl 2026
- CVE-2026-9656037İzleyin
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel
KritikCVSS 9,3İstismar yokEPSS %1modeltc · lightllm23 Eyl 2026
- CVE-2026-5561034İzleyin
InvoiceShelf has cross-company user read/update IDOR that enables cross-tenant account takeover
YüksekCVSS 8,7İstismar yokEPSS %0invoiceshelf · invoiceshelf23 Eyl 2026
- CVE-2026-7358829İzleyin
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vuln
YüksekCVSS 7,4İstismar yokEPSS %0dell · policy manager for secure connect gateway23 Eyl 2026
- CVE-2026-7359130İzleyin
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Cod
YüksekCVSS 7,5İstismar yokEPSS %0dell · policy manager for secure connect gateway23 Eyl 2026
- CVE-2026-9644231İzleyin
Emacs: emacs: arbitrary code execution in flymake mode
YüksekCVSS 7,8İstismar yokEPSS %0gnu emacs · gnu emacs23 Eyl 2026
- CVE-2026-9659932İzleyin
Isotope eCommerce through 2.9.10 Weak Order Identifier Generation
YüksekCVSS 8,2İstismar yokEPSS %0isotope · isotope-core23 Eyl 2026
- CVE-2026-9660028İzleyin
Isotope eCommerce through 2.9.10 SQL Injection via Backend Callbacks
YüksekCVSS 7,0İstismar yokEPSS %0isotope · isotope-core23 Eyl 2026
- CVE-2026-9660928İzleyin
Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognize
YüksekCVSS 7,1İstismar yokEPSS %0robur · albatross23 Eyl 2026
- RUSTSEC-2026-030728İzleyin
`uncbv`: archive extraction is vulnerable to path traversal (zip-slip)
YüksekCVSS 7,1İstismar yokcrates.io · uncbv23 Eyl 2026
- CVE-2026-7931034İzleyin
webpy web.py 0.76 is vulnerable to server-side template injection (SSTI).
YüksekCVSS 8,5İstismar yokEPSS %023 Eyl 2026
- CVE-2026-9376928İzleyin
HumHub 1.18.5 - Stored XSS in Profile Field Category title via HForm#renderForm leading to System Administrator account takeover
YüksekCVSS 7,2İstismar yokEPSS %0humhub · humhub23 Eyl 2026
- CVE-2026-9667334İzleyin
Photoview through 2.4.0 SQL Injection via album download route
YüksekCVSS 8,7İstismar yokEPSS %0photoview · photoview23 Eyl 2026
- CVE-2026-7618339İzleyin
Apache Tomcat: Bypass of security constraints for WebSocket endpoints
KritikCVSS 9,8Kavram kanıtıEPSS %0apache software foundation · apache tomcat23 Eyl 2026
- CVE-2026-7776232İzleyin
Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled Request
YüksekCVSS 8,1İstismar yokEPSS %0apache software foundation · apache tomcat23 Eyl 2026
- CVE-2026-1988830İzleyin
NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer
YüksekCVSS 7,5İstismar yokEPSS %023 Eyl 2026
- CVE-2026-666830İzleyin
Integer overflow causes an infinite loop in packet buffer growth in PgBouncer
YüksekCVSS 7,5İstismar yokEPSS %023 Eyl 2026
- CVE-2026-8572438İzleyin
Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass
KritikCVSS 9,6İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-8883030İzleyin
Busybox: busybox: tls montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflow
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat hardened images23 Eyl 2026
- CVE-2026-8883229İzleyin
Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow
YüksekCVSS 7,3İstismar yokEPSS %0red hat · red hat hardened images23 Eyl 2026
- CVE-2026-9334935İzleyin
Frictionless OS Command Injection via explore Console Command
YüksekCVSS 8,6Kavram kanıtıEPSS %2frictionlessdata · frictionless-py23 Eyl 2026
- CVE-2026-9584234İzleyin
Moquette uncaught MQTT command exceptions can terminate shared session event loops
YüksekCVSS 8,7İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9584334İzleyin
Moquette malformed shared subscriptions can crash command processing
YüksekCVSS 8,7İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9584534İzleyin
Moquette unbounded per-session message queues allow memory exhaustion
YüksekCVSS 8,7İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9584634İzleyin
Moquette publishes Last-Will messages without enforcing write authorization
YüksekCVSS 8,7İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9584735İzleyin
Moquette client IDs can cause cross-session H2 durable-queue corruption
YüksekCVSS 8,8İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9584837İzleyin
Moquette fails open when configured authentication or authorization classes cannot load
KritikCVSS 9,3İstismar yokEPSS %0moquette · moquette23 Eyl 2026
- CVE-2026-9675537İzleyin
orval @orval/effect 8.14.0 through 8.28.1 Code Injection
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval23 Eyl 2026
- CVE-2026-9675636İzleyin
orval before 8.30.0 Code Injection via Factory Generation
KritikCVSS 9,2İstismar yokEPSS %0orval-labs · orval23 Eyl 2026
- CVE-2026-9675737İzleyin
orval before 8.29.0 Code Injection via unescaped OpenAPI media-type
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval23 Eyl 2026
- CVE-2026-9675837İzleyin
orval @orval/core before 8.28.0 Code Injection via Form-Data
KritikCVSS 9,3İstismar yokEPSS %0orval-labs · orval23 Eyl 2026
- CVE-2026-9677535İzleyin
MLflow dspy bypasses pickle deserialization control
YüksekCVSS 8,8İstismar yokEPSS %0mlflow · mlflow23 Eyl 2026
- CVE-2026-9680435İzleyin
MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load
YüksekCVSS 8,8İstismar yokEPSS %0mlflow · mlflow23 Eyl 2026
- CVE-2026-9680829İzleyin
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, valid
YüksekCVSS 7,4İstismar yokEPSS %0flatpak · flatpak23 Eyl 2026
- CVE-2026-8624330İzleyin
Apache Tomcat Native: DoS via TLS handshake
YüksekCVSS 7,5İstismar yokEPSS %0apache · tomcat native23 Eyl 2026
- CVE-2026-8624636İzleyin
Apache Tomcat Native: Insecure OpenSSL options enabled
KritikCVSS 9,1İstismar yokEPSS %0apache · tomcat native23 Eyl 2026
- CVE-2026-8624729İzleyin
Apache Tomcat Native: Client certificate requirements can be down-graded
YüksekCVSS 7,4İstismar yokEPSS %0apache · tomcat native23 Eyl 2026
- CVE-2026-9567629İzleyin
AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass
YüksekCVSS 7,4İstismar yokEPSS %0watchguard · authentication gateway23 Eyl 2026
- CVE-2026-1817728İzleyin
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
YüksekCVSS 7,1İstismar yokEPSS %0ibm · financial transaction manager23 Eyl 2026
- CVE-2026-8883121İzleyin
Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengths
OrtaCVSS 5,3İstismar yokEPSS %0red hat · red hat hardened images23 Eyl 2026
- CVE-2026-9651231İzleyin
Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization
YüksekCVSS 7,8Kavram kanıtıEPSS %0red hat · red hat hardened images23 Eyl 2026
- CVE-2026-9627535İzleyin
Flatpak: flatpak: arbitrary write access as root via extra-data extraction
YüksekCVSS 8,8İstismar yokEPSS %0red hat · red hat enterprise linux 1023 Eyl 2026
- CVE-2026-9661131İzleyin
FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c.
YüksekCVSS 7,8İstismar yokEPSS %0ffmpeg · ffmpeg23 Eyl 2026
- CVE-2026-7513134İzleyin
NetworkManager-l2tp Privilege Escalation via pppd Username Injection
YüksekCVSS 8,5İstismar yokEPSS %0nm-l2tp · networkmanager-l2tp23 Eyl 2026
- CVE-2026-7739430İzleyin
OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget
YüksekCVSS 7,6İstismar yokEPSS %0openc3 · cosmos23 Eyl 2026
- CVE-2026-7760135İzleyin
OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting
YüksekCVSS 8,8İstismar yokEPSS %0openc3 · cosmos23 Eyl 2026
- CVE-2026-8235630İzleyin
Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production
YüksekCVSS 7,5İstismar yokEPSS %0imprivata · imprivata enterprise access management23 Eyl 2026
- CVE-2026-8447439İzleyin
Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and
KritikCVSS 9,9İstismar yokEPSS %0red hat · red hat ansible automation platform 2.4 for rhel 823 Eyl 2026
- CVE-2026-8448632İzleyin
Automation-controller: automation-controller-container: automation-controller: unauthenticated debug scheduler-trigger endpoints (allowany, routed without debug
YüksekCVSS 8,2İstismar yokEPSS %0red hat · red hat ansible automation platform 2.6 for rhel 923 Eyl 2026
- CVE-2026-8449930İzleyin
Automation-controller: automation-controller-container: automation-controller: write-only survey password recovered in plaintext via schedule/workflowjobtemplat
YüksekCVSS 7,7İstismar yokEPSS %0red hat · red hat ansible automation platform 2.5 for rhel 823 Eyl 2026