İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.964 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 66 / 80

  • CVE-2026-77294
    32İzleyin

    TREK: Server-Side Request Forgery via User-Configurable LLM Base URL

    YüksekCVSS 8,1İstismar yokEPSS %0

    mauriceboe · trek24 Eyl 2026

  • CVE-2026-81455
    34İzleyin

    Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function vulnerability.

    YüksekCVSS 8,6İstismar yokEPSS %0

    dell · thinos 1024 Eyl 2026

  • CVE-2026-82157
    33İzleyin

    Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerability.

    YüksekCVSS 8,3İstismar yokEPSS %0

    dell · thinos 1024 Eyl 2026

  • CVE-2026-86857
    33İzleyin

    Authorization Bypass in ServiceNow AI Platform

    YüksekCVSS 8,4İstismar yokEPSS %0

    servicenow · servicenow ai platform24 Eyl 2026

  • CVE-2026-86858
    34İzleyin

    Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform

    YüksekCVSS 8,7İstismar yokEPSS %0

    servicenow · servicenow ai platform24 Eyl 2026

  • CVE-2026-86859
    34İzleyin

    Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform

    YüksekCVSS 8,7İstismar yokEPSS %0

    servicenow · servicenow ai platform24 Eyl 2026

  • CVE-2026-86860
    37İzleyin

    Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform

    KritikCVSS 9,3İstismar yokEPSS %0

    servicenow · servicenow ai platform24 Eyl 2026

  • CVE-2026-89325
    31İzleyin

    Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation

    YüksekCVSS 7,8İstismar yokEPSS %0

    rapid7 · insight agent24 Eyl 2026

  • CVE-2026-96748
    33İzleyin

    Connection redirection via percent-encoded delimiter injection in connection string hosts

    YüksekCVSS 8,3İstismar yokEPSS %0

    mongodb · python driver24 Eyl 2026

  • CVE-2026-96749
    30İzleyin

    Heap out-of-bounds write via signed size overflow in BSON document encoding

    YüksekCVSS 7,5İstismar yokEPSS %0

    mongodb · python driver24 Eyl 2026

  • CVE-2026-51996
    39İzleyin

    An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getS

    KritikCVSS 9,8İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-52001
    30İzleyin

    An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE transport eventSour

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-81539
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data24 Eyl 2026

  • CVE-2026-81545
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data24 Eyl 2026

  • CVE-2026-81547
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data24 Eyl 2026

  • CVE-2026-81548
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data24 Eyl 2026

  • CVE-2026-81549
    30İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 7,7İstismar yokEPSS %0

    ibm · datastage on cloud pak for data24 Eyl 2026

  • CVE-2026-81552
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data24 Eyl 2026

  • CVE-2026-82093
    35İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data24 Eyl 2026

  • CVE-2026-82094
    28İzleyin

    DataStage on Cloud Pak for Data has several vulnerabilities

    YüksekCVSS 7,1İstismar yokEPSS %0

    ibm · datastage on cloud pak for data24 Eyl 2026

  • CVE-2026-90959
    32İzleyin

    Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft

    YüksekCVSS 8,1İstismar yokEPSS %0

    red hat · red hat ansible automation platform 224 Eyl 2026

  • CVE-2026-56737
    32İzleyin

    phpMyFAQ's two-factor authentication login bypasses the password factor

    YüksekCVSS 8,1İstismar yokEPSS %0

    thorsten · phpmyfaq24 Eyl 2026

  • CVE-2026-56739
    34İzleyin

    Logto: SSRF via Webhooks and Custom OAuth2 Connector UserInfo Endpoint

    YüksekCVSS 8,5İstismar yokEPSS %0

    logto-io · logto24 Eyl 2026

  • CVE-2026-75907
    30İzleyin

    The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212

    YüksekCVSS 7,5İstismar yokEPSS %0

    norwegian cruise line · door access control24 Eyl 2026

  • CVE-2026-77581
    34İzleyin

    BentoPDF: SSRF in cors-proxy-worker.js via DNS-based hostname allowlist bypass

    YüksekCVSS 8,6İstismar yokEPSS %0

    alam00000 · bentopdf24 Eyl 2026

  • CVE-2026-88355
    30İzleyin

    An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in new_expr().

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-88365
    39İzleyin

    minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when parsing the APEv2 tag-size field.

    KritikCVSS 9,8İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-88366
    30İzleyin

    NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__pathArcTo() when parsing SVG arc commands.

    YüksekCVSS 7,5İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-93207
    39İzleyin

    SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93221
    32İzleyin

    nfsd: convert nfsd_net boolean flags to unsigned long flags word

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93224
    32İzleyin

    svcrdma: Fix unmatched rn_unregister on failed accept

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93225
    29İzleyin

    phy: fsl-imx8mq-usb: fix typec switch leak on probe error path

    YüksekCVSS 7,4İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93228
    36İzleyin

    svcrdma: Reject Write/Reply chunks with segcount 0

    KritikCVSS 9,1İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93229
    28İzleyin

    nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93237
    31İzleyin

    LoongArch: Add DIRECT_MAP_PHYSMEM_END definition

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93239
    0İzleyin

    arm64: mm: Fix the lockless page-table walk in show_pte()

    İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93250
    31İzleyin

    vxlan: mdb: Fix use-after-free in vxlan_mdb_flush()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93260
    29İzleyin

    powerpc/xive: propagate IPI init errors to prevent use-after-free

    YüksekCVSS 7,4İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93262
    31İzleyin

    md/raid5-ppl: fix use-after-free in ppl_do_flush()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93265
    30İzleyin

    PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node

    YüksekCVSS 7,7İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93277
    31İzleyin

    RDMA/bnxt_re: Validate udata before executing commands

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93280
    35İzleyin

    greybus: audio: bound the topology section sizes against the fetched size

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93282
    32İzleyin

    ksmbd: fix maximum allowed access checks

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-77967
    34İzleyin

    Botslab G980H Dashcams Authentication Bypass by Capture-replay

    YüksekCVSS 8,6İstismar yokEPSS %0

    botslab · g980h24 Eyl 2026

  • CVE-2026-82164
    28İzleyin

    Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability.

    YüksekCVSS 7,1İstismar yokEPSS %0

    dell · trusted device client,24 Eyl 2026

  • CVE-2026-82566
    34İzleyin

    Botslab G980H Dashcams Insufficient session expiration

    YüksekCVSS 8,7İstismar yokEPSS %0

    botslab · g980h24 Eyl 2026

  • CVE-2026-84399
    34İzleyin

    Botslab G980H Dashcams Incorrect Authorization

    YüksekCVSS 8,7İstismar yokEPSS %0

    botslab · g980h24 Eyl 2026

  • CVE-2026-85496
    30İzleyin

    Botslab G980H Dashcams Generation of Predictable Numbers or Identifiers

    YüksekCVSS 7,7İstismar yokEPSS %0

    botslab · g980h24 Eyl 2026

  • CVE-2026-88956
    28İzleyin

    Botslab G980H Dashcams Missing Authentication for Critical Function

    YüksekCVSS 7,0İstismar yokEPSS %0

    botslab · g980h24 Eyl 2026

  • CVE-2026-96883
    34İzleyin

    Type confusion in AWS pgcollection allows remote code execution

    YüksekCVSS 8,7İstismar yokEPSS %0

    aws · pgcollection24 Eyl 2026

  • CVE-2026-56738
    34İzleyin

    phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion

    YüksekCVSS 8,5İstismar yokEPSS %0

    thorsten · phpmyfaq24 Eyl 2026

  • CVE-2026-56744
    34İzleyin

    `@bsv/wallet-toolbox` / `-client` / `-mobile` don't verify storage-supplied recipient output scripts against caller-requested outputs in createAction (can redir

    YüksekCVSS 8,7İstismar yokEPSS %0

    bsv-blockchain · @bsv/wallet-toolbox24 Eyl 2026

  • CVE-2026-62368
    33İzleyin

    Snipe-IT: Stored XSS via Custom Field name in asset-list column headers

    YüksekCVSS 8,4İstismar yokEPSS %0

    snipeitapp · snipe-it24 Eyl 2026

  • CVE-2026-63493
    34İzleyin

    Snipe-IT: 2FA bypass via the API token flow

    YüksekCVSS 8,6İstismar yokEPSS %0

    snipeitapp · snipe-it24 Eyl 2026

  • CVE-2026-79766
    36İzleyin

    Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email

    KritikCVSS 9,1İstismar yokEPSS %0

    termix-ssh · termix24 Eyl 2026

  • CVE-2026-88378
    39İzleyin

    QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().

    KritikCVSS 9,8İstismar yokEPSS %0

    24 Eyl 2026

  • CVE-2026-91160
    32İzleyin

    OpenWA: A read-only API key can receive a session pairing QR over the WebSocket event stream

    YüksekCVSS 8,2İstismar yokEPSS %0

    rmyndharis · openwa24 Eyl 2026

  • CVE-2026-93284
    35İzleyin

    drm/pagemap: dma-unmap pages before handling migration errors

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93287
    31İzleyin

    i2c: smbus: reject oversized block transfers in the common path

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93288
    31İzleyin

    netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93782
    31İzleyin

    vhost-scsi: flush backend after device ioctls

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93786
    32İzleyin

    ksmbd: preserve VFS inherited POSIX ACL mask

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93787
    32İzleyin

    smb: client: bound dirent name against end of SMB response in cifs_filldir

    YüksekCVSS 8,1İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93790
    35İzleyin

    wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93793
    35İzleyin

    wifi: iwlwifi: mvm: validate TX_CMD response layout

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93796
    28İzleyin

    wifi: iwlwifi: pcie: null RX pointers after free

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93798
    31İzleyin

    btrfs: fix reloc root cleanup in merge_reloc_roots()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93799
    35İzleyin

    wifi: iwlwifi: mvm: validate sta_id in BA window status notif

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93801
    28İzleyin

    smb/client: zero-initialize stack-allocated cifs_open_info_data

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93806
    35İzleyin

    wifi: cfg80211: validate assoc response length before status and IE access

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93810
    28İzleyin

    cachefiles: Fix double fput

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93813
    31İzleyin

    btrfs: tree-checker: validate INODE_REF's namelen

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93816
    28İzleyin

    f2fs: validate inline dentry name lengths before conversion

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93817
    31İzleyin

    perf: Fix addr_filter_ranges lifetime

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93826
    30İzleyin

    HID: hidpp: fix potential UAF in hidpp_connect_event()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-93830
    30İzleyin

    net: stmmac: xgmac2: disable RBUE in default RX interrupt mask

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-94606
    35İzleyin

    authentik: MFA Bypass via State Confusion / Parameter Injection in AuthenticatorEmailStage

    YüksekCVSS 8,9İstismar yokEPSS %0

    goauthentik · authentik24 Eyl 2026

  • CVE-2026-94609
    35İzleyin

    authentik: Privilege Escalation to Superuser via Group Hierarchy

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    goauthentik · authentik24 Eyl 2026

  • CVE-2026-94613
    30İzleyin

    authentik: Denial of Service via Document Type Declarations in SAML Messages

    YüksekCVSS 7,5İstismar yokEPSS %0

    goauthentik · authentik24 Eyl 2026

  • CVE-2026-97409
    35İzleyin

    nvme-fc: Do not cancel requests in io target before it is initialized

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97413
    39İzleyin

    RDMA/rtrs-srv: Fix integer underflow in process_read and process_write

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97415
    31İzleyin

    btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97417
    30İzleyin

    netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97421
    31İzleyin

    RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97428
    30İzleyin

    drm/amdgpu: harden FRU PIA parsing with bounded helpers

    YüksekCVSS 7,7İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97429
    31İzleyin

    drm/amdkfd: fix UAF race in destroy_queue_cpsch

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97437
    28İzleyin

    ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e()

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97438
    28İzleyin

    fs/ntfs3: validate index entry key bounds

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97442
    35İzleyin

    wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97444
    30İzleyin

    ACPICA: add boundary checks in two places

    YüksekCVSS 7,7İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97445
    30İzleyin

    ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()

    YüksekCVSS 7,7İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97448
    30İzleyin

    ACPICA: Add validation for node in acpi_ns_build_normalized_path()

    YüksekCVSS 7,7İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97450
    33İzleyin

    ACPICA: validate handler object type in two places

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97451
    33İzleyin

    ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97452
    33İzleyin

    ACPICA: Prevent adding invalid references

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97454
    30İzleyin

    ACPICA: add boundary checks in acpi_ps_get_next_field()

    YüksekCVSS 7,7İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97455
    33İzleyin

    ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97478
    31İzleyin

    virt: acrn: Fix irqfd use-after-free during eventfd shutdown

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97496
    28İzleyin

    drm/amdkfd: Fix OOB memory exposure in get_wave_state()

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux24 Eyl 2026

  • CVE-2026-97497
    31İzleyin

    drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux24 Eyl 2026