İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.955 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 65 / 80

  • CVE-2026-6721
    39İzleyin

    Multiple Vulnerabilities in IBM Concert Software

    KritikCVSS 9,8İstismar yokEPSS %1

    ibm · concert23 Eyl 2026

  • CVE-2026-6730
    31İzleyin

    Multiple Vulnerabilities in IBM Concert Software

    YüksekCVSS 7,8İstismar yokEPSS %0

    ibm · concert23 Eyl 2026

  • CVE-2026-6794
    31İzleyin

    Multiple Vulnerabilities in IBM Concert Software

    YüksekCVSS 7,8İstismar yokEPSS %0

    ibm · concert23 Eyl 2026

  • CVE-2026-6928
    39İzleyin

    Multiple Vulnerabilities in IBM Concert Software

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · concert23 Eyl 2026

  • CVE-2026-6935
    31İzleyin

    Multiple Vulnerabilities in IBM Concert Software

    YüksekCVSS 7,8İstismar yokEPSS %0

    ibm · concert23 Eyl 2026

  • CVE-2026-75886
    28İzleyin

    Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding

    YüksekCVSS 7,2İstismar yokEPSS %0

    red hat · red hat openshift container platform 423 Eyl 2026

  • CVE-2026-80379
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data23 Eyl 2026

  • CVE-2026-80412
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data23 Eyl 2026

  • CVE-2026-80425
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data23 Eyl 2026

  • CVE-2026-82369
    34İzleyin

    Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a

    YüksekCVSS 8,6İstismar yokEPSS %0

    brocade · sannav23 Eyl 2026

  • CVE-2026-18467
    39İzleyin

    Paytium: Mollie payment forms & donations <= 5.0.3 - Unauthenticated Privilege Escalation via 'pt_form_field[pt-user-role]' Parameter

    KritikCVSS 9,8İstismar yokEPSS %0

    paytiumsupport · paytium: mollie payment forms & donations23 Eyl 2026

  • CVE-2026-97055
    36İzleyin

    SigNoz before 0.143.0 Authentication Bypass via Empty JWT Secret

    KritikCVSS 9,2İstismar yokEPSS %0

    signoz · signoz23 Eyl 2026

  • CVE-2026-97056
    30İzleyin

    SigNoz before 0.143.0 Insufficient Session Expiration Authentication Bypass

    YüksekCVSS 7,6İstismar yokEPSS %0

    signoz · signoz23 Eyl 2026

  • CVE-2026-75887
    30İzleyin

    Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat openshift container platform 423 Eyl 2026

  • CVE-2026-81208
    30İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 7,7İstismar yokEPSS %0

    ibm · datastage on cloud pak for data23 Eyl 2026

  • CVE-2026-81536
    30İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 7,7İstismar yokEPSS %0

    ibm · datastage on cloud pak for data23 Eyl 2026

  • CVE-2026-81537
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %1

    ibm · datastage on cloud pak for data23 Eyl 2026

  • CVE-2026-96891
    37İzleyin

    D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write

    KritikCVSS 9,3İstismar yokEPSS %0

    d-link · dir-82523 Eyl 2026

  • CVE-2026-70125
    35İzleyin

    Microsoft Office Outlook Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · 365 apps23 Eyl 2026

  • CVE-2026-82370
    34İzleyin

    Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service

    YüksekCVSS 8,6İstismar yokEPSS %0

    brocade · sannav24 Eyl 2026

  • CVE-2026-92470
    30İzleyin

    Missing Authorization in GitLab

    YüksekCVSS 7,7İstismar yokEPSS %0

    gitlab · gitlab24 Eyl 2026

  • CVE-2026-97151
    33İzleyin

    mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document.

    YüksekCVSS 8,4İstismar yokEPSS %0

    mwilliamson · mammoth.js24 Eyl 2026

  • CVE-2026-97152
    34İzleyin

    Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecke

    YüksekCVSS 8,6İstismar yokEPSS %0

    nanomsg · nanomsg24 Eyl 2026

  • CVE-2026-80513
    30İzleyin

    wpForo Forum < 3.1.6 - Subscriber+ PHP Object Injection via Profile Fields

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · wpforo forum24 Eyl 2026

  • CVE-2026-88843
    28İzleyin

    MasterStudy LMS 3.5.29 - < 3.7.50 - Contributor+ LFI via Elementor Courses Categories Widget

    YüksekCVSS 7,2İstismar yokEPSS %0

    unknown · masterstudy lms wordpress plugin24 Eyl 2026

  • CVE-2026-93661
    10İzleyin

    Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR

    DüşükCVSS 2,7Kavram kanıtıEPSS %0

    unknown · events manager24 Eyl 2026

  • CVE-2026-77193
    30İzleyin

    eesy_ID2WP – Publish InDesign HTML5 <= 1.0.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'id2wp_path' Query Parameter

    YüksekCVSS 7,5İstismar yokEPSS %0

    eesywp · eesy_id2wp – publish indesign html524 Eyl 2026

  • CVE-2026-78311
    35İzleyin

    SQL Injection in DIAEnergie

    YüksekCVSS 8,8İstismar yokEPSS %0

    deltaww · diaenergie24 Eyl 2026

  • CVE-2026-78312
    36İzleyin

    Path Traversal in DIAEnergie

    KritikCVSS 9,1İstismar yokEPSS %0

    deltaww · diaenergie24 Eyl 2026

  • CVE-2026-85682
    35İzleyin

    YOP Poll <= 7.0.10 - Unauthenticated Origin Validation Error to Administrator Account Takeover via '/auth/wp-login-redirect' REST Route

    YüksekCVSS 8,8İstismar yokEPSS %0

    yourownprogrammer · yop poll24 Eyl 2026

  • CVE-2026-14780
    30İzleyin

    PaperCut NG/MF: Remote Code Execution via Scripting Subsystem

    YüksekCVSS 7,5İstismar yokEPSS %0

    papercut · papercut ng/mf24 Eyl 2026

  • CVE-2026-12227
    40Planlayın

    Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    visualcomposer · visual composer website builder24 Eyl 2026

  • CVE-2026-57590
    32İzleyin

    Apache DolphinScheduler: Missing Authorization in Task Group APIs Allows Unauthorized Cross-Project Operations

    YüksekCVSS 8,1İstismar yokEPSS %0

    apache software foundation · apache dolphinscheduler24 Eyl 2026

  • CVE-2026-82077
    29İzleyin

    PaperCut NG/MF: Remote Code Execution via Scan2Fax

    YüksekCVSS 7,3İstismar yokEPSS %0

    papercut · papercut ng/mf24 Eyl 2026

  • CVE-2026-4638
    28İzleyin

    Plaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitor

    YüksekCVSS 7,1İstismar yokEPSS %0

    paessler gmbh · prtg network monitor24 Eyl 2026

  • CVE-2026-7169
    30İzleyin

    Uncontrolled Search Path Element in Evope Collector

    YüksekCVSS 7,5İstismar yokEPSS %0

    evope collector · evope collector24 Eyl 2026

  • CVE-2026-78308
    39İzleyin

    Authentication Bypass in DIAEnergie

    KritikCVSS 9,8İstismar yokEPSS %0

    deltaww · diaenergie24 Eyl 2026

  • CVE-2026-78309
    35İzleyin

    SQL Injection in DIAEnergie

    YüksekCVSS 8,8İstismar yokEPSS %0

    deltaww · diaenergie24 Eyl 2026

  • CVE-2026-97185
    31İzleyin

    Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file

    YüksekCVSS 7,8İstismar yokEPSS %0

    red hat · red hat enterprise linux 1024 Eyl 2026

  • CVE-2026-19072
    39İzleyin

    Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal

    KritikCVSS 9,9İstismar yokEPSS %0

    rapid7 · velociraptor24 Eyl 2026

  • CVE-2026-88907
    29İzleyin

    SAML ePPN Attribute Validation Bypass in TÜBİTAK ULAKBİM's UlakPDF

    YüksekCVSS 7,4İstismar yokEPSS %0

    tübi̇tak ulakbi̇m · ulakpdf24 Eyl 2026

  • CVE-2026-91187
    37İzleyin

    Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy

    KritikCVSS 9,3İstismar yokEPSS %0

    dashbit · nimble_zta24 Eyl 2026

  • CVE-2026-95519
    31İzleyin

    Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)

    YüksekCVSS 7,8İstismar yokEPSS %0

    red hat · red hat enterprise linux 1024 Eyl 2026

  • CVE-2026-95521
    31İzleyin

    Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm

    YüksekCVSS 7,8İstismar yokEPSS %0

    red hat · red hat enterprise linux 1024 Eyl 2026

  • CVE-2026-97057
    34İzleyin

    redis-parser through 3.0.0 Denial of Service via Invalid Array Length

    YüksekCVSS 8,7İstismar yokEPSS %0

    noderedis · redis-parser24 Eyl 2026

  • CVE-2026-97360
    40Planlayın

    HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Engine

    KritikCVSS 10,0İstismar yokEPSS %0

    rejetto · hfs224 Eyl 2026

  • CVE-2026-12559
    29İzleyin

    Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation Application

    YüksekCVSS 7,3İstismar yokEPSS %0

    opentext · vendor invoice management for sap solutions24 Eyl 2026

  • CVE-2026-13465
    33İzleyin

    EL3 Stack Buffer Overflow in FCS HKDF Request

    YüksekCVSS 8,3İstismar yokEPSS %0

    altera · trusted firmware24 Eyl 2026

  • CVE-2026-13466
    33İzleyin

    Unit Confusion in VAB Authentication

    YüksekCVSS 8,3İstismar yokEPSS %0

    altera · trusted firmware24 Eyl 2026

  • CVE-2026-13467
    33İzleyin

    Systemic Missing Address Validation in SiP SMC Handlers

    YüksekCVSS 8,3İstismar yokEPSS %0

    altera · trusted firmware24 Eyl 2026

  • CVE-2026-51994
    36İzleyin

    mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata URL extracted from

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    24 Eyl 2026

  • CVE-2026-51995
    30İzleyin

    An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-s

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-51997
    35İzleyin

    An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open() functions

    YüksekCVSS 8,8İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-56736
    32İzleyin

    phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

    YüksekCVSS 8,2İstismar yokEPSS %0

    thorsten · phpmyfaq24 Eyl 2026

  • CVE-2026-58004
    33İzleyin

    Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.

    YüksekCVSS 8,3İstismar yokEPSS %0

    altera · trusted firmware24 Eyl 2026

  • CVE-2026-58005
    33İzleyin

    Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.

    YüksekCVSS 8,3İstismar yokEPSS %0

    altera · trusted firmware24 Eyl 2026

  • CVE-2026-58006
    33İzleyin

    Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption

    YüksekCVSS 8,3İstismar yokEPSS %0

    altera · trusted firmware24 Eyl 2026

  • CVE-2026-58007
    33İzleyin

    Unchecked SDM mailbox response address enables EL3 secure-memory corruption

    YüksekCVSS 8,3İstismar yokEPSS %0

    altera · trusted firmware24 Eyl 2026

  • CVE-2026-58008
    33İzleyin

    Unchecked HKDF key-size input in EL3 causes a stack buffer overflow

    YüksekCVSS 8,3İstismar yokEPSS %0

    altera · trusted firmware24 Eyl 2026

  • CVE-2026-77874
    34İzleyin

    IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

    YüksekCVSS 8,6İstismar yokEPSS %0

    ibm · enterprise build of quarkus24 Eyl 2026

  • CVE-2026-88351
    39İzleyin

    An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms.

    KritikCVSS 9,8İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-90481
    36İzleyin

    In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate p

    KritikCVSS 9,2İstismar yokEPSS %0

    portswigger · burp suite dast24 Eyl 2026

  • CVE-2026-97362
    34İzleyin

    HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Thread

    YüksekCVSS 8,7İstismar yokEPSS %0

    rejetto · hfs224 Eyl 2026

  • CVE-2026-97404
    36İzleyin

    In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header.

    KritikCVSS 9,2İstismar yokEPSS %0

    openstack · zaqar24 Eyl 2026

  • CVE-2026-63203
    30İzleyin

    Logto: Account API can disclose stored third-party provider tokens without the identities scope

    YüksekCVSS 7,6İstismar yokEPSS %0

    logto-io · logto24 Eyl 2026

  • CVE-2026-88357
    30İzleyin

    nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code.

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-88361
    30İzleyin

    SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries.

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-88362
    30İzleyin

    MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c.

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-88368
    30İzleyin

    NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's nsvg__addActive() function.

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-88369
    29İzleyin

    zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump().

    YüksekCVSS 7,3İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-92680
    27İzleyin

    Araxis Merge insufficiently protected credentials

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    araxis · merge24 Eyl 2026

  • CVE-2026-93425
    39İzleyin

    Dokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as root

    KritikCVSS 9,9İstismar yokEPSS %0

    dokploy · dokploy24 Eyl 2026

  • CVE-2026-96744
    28İzleyin

    Unauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for Laravel

    YüksekCVSS 7,1İstismar yokEPSS %0

    mongodb · laravel mongodb (php)24 Eyl 2026

  • CVE-2026-96746
    33İzleyin

    Heap buffer overflow via mid-scan command list growth in client topology monitoring

    YüksekCVSS 8,3İstismar yokEPSS %0

    mongodb · c driver24 Eyl 2026

  • CVE-2026-96750
    29İzleyin

    Shell script injection via server-supplied database name in Open MongoDB shell

    YüksekCVSS 7,3İstismar yokEPSS %0

    mongodb · compass24 Eyl 2026

  • CVE-2026-96873
    22İzleyin

    Reflected XSS in CirrusSearch debug explain output

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    the wikimedia foundation · mediawiki - cirrussearch extension24 Eyl 2026

  • CVE-2026-79764
    30İzleyin

    Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

    YüksekCVSS 7,7İstismar yokEPSS %0

    termix-ssh · termix24 Eyl 2026

  • CVE-2026-88372
    30İzleyin

    libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-88373
    30İzleyin

    libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path.

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-88376
    30İzleyin

    Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4_AvccAtom::Create() and AP4_HvccAtom::Create().

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-88382
    30İzleyin

    hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser.

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-88390
    30İzleyin

    An out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2v29 (commit bffc6d0) allows crafted JavaScript input contain

    YüksekCVSS 7,7İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-91122
    34İzleyin

    Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users

    YüksekCVSS 8,7İstismar yokEPSS %0

    discourse · discourse24 Eyl 2026

  • CVE-2026-91123
    28İzleyin

    Discourse: Reject literal backslash path separators in iframe src traversal guard

    YüksekCVSS 7,2İstismar yokEPSS %0

    discourse · discourse24 Eyl 2026

  • CVE-2026-93543
    29İzleyin

    Out-of-bounds read in libXi's XI2 class parser

    YüksekCVSS 7,4İstismar yokEPSS %0

    x.org · libxi24 Eyl 2026

  • CVE-2026-93827
    33İzleyin

    virtio-fs: avoid double-free on failed queue setup

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-94611
    32İzleyin

    authentik: Stored credentials are readable with view permission alone

    YüksekCVSS 8,1İstismar yokEPSS %0

    goauthentik · authentik24 Eyl 2026

  • CVE-2026-94612
    29İzleyin

    authentik: Authentication bypass via assertion confusion in SAML sources

    YüksekCVSS 7,4İstismar yokEPSS %0

    goauthentik · authentik24 Eyl 2026

  • CVE-2026-96515
    34İzleyin

    Command Injection Vulnerability in Netlink ICT HG323RW Router

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    netlink ict pvt ltd · netlink ict hg323rw router24 Eyl 2026

  • CVE-2026-97433
    32İzleyin

    nvme: validate FDP configuration descriptor sizes

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97474
    29İzleyin

    wifi: iwlwifi: mld: purge async notifications upon nic error

    YüksekCVSS 7,4İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97520
    28İzleyin

    gfs2: move quota_init qc iterator increment

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-88360
    30İzleyin

    libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images.

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-97059
    35İzleyin

    DCMTK through 3.7.0 Heap Over-read via NumberOfFrames

    YüksekCVSS 8,8İstismar yokEPSS %0

    offis · dcmtk24 Eyl 2026

  • CVE-2026-97359
    40Planlayın

    HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection

    KritikCVSS 10,0İstismar yokEPSS %0

    rejetto · hfs224 Eyl 2026

  • CVE-2026-85056
    32İzleyin

    ZITADEL: MFA bypass via session reuse in Login V2

    YüksekCVSS 8,2İstismar yokEPSS %0

    zitadel · zitadel24 Eyl 2026

  • CVE-2026-95985
    34İzleyin

    Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces

    YüksekCVSS 8,6İstismar yokEPSS %0

    amazon · kiro ide24 Eyl 2026

  • CVE-2026-13016
    37İzleyin

    Unauthenticated SQL Injection in ServiceNow AI Platform

    KritikCVSS 9,3İstismar yokEPSS %0

    servicenow · servicenow ai platform24 Eyl 2026

  • CVE-2026-13248
    35İzleyin

    Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface

    YüksekCVSS 8,8İstismar yokEPSS %0

    honeywell · pd45 industrial printer24 Eyl 2026

  • CVE-2026-13249
    39İzleyin

    Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    honeywell · pd45 industrial printer24 Eyl 2026