Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.961 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 7 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-80098İstismar yok | Copilot Studio Elevation of Privilege Vulnerabilitymicrosoft · copilot studio · CWE-347 | Kritik10,0 | — | %0,4 | 3 Eyl 2026 |
37İzleyin | CVE-2026-85426İstismar yok | MOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Namesmoos-ivp · moos-ivp · CWE-78 | Kritik9,3 | — | %0,9 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85452İstismar yok | MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MOOS Identifiersthemoos · ui-moos · CWE-787 | Yüksek8,7 | — | %0,6 | 3 Eyl 2026 |
34İzleyin | CVE-2026-67397İstismar yok | Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root.webpros · plesk · CWE-22 | Yüksek8,5 | — | %0,1 | 3 Eyl 2026 |
32İzleyin | CVE-2026-67398İstismar yok | Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.7, from 9.0.0 before 9webpros · whmcs · CWE-862 | Yüksek8,2 | — | %0,4 | 3 Eyl 2026 |
36İzleyin | CVE-2026-67402İstismar yok | An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual howebpros · configserver security & firewall · CWE-552 | Kritik9,2 | — | %0,5 | 3 Eyl 2026 |
31İzleyin | CVE-2026-45200İstismar yok | GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlagsimagination technologies · graphics ddk · CWE-416 | Yüksek7,8 | — | %0,1 | 3 Eyl 2026 |
29İzleyin | CVE-2026-62906İstismar yok | Microsoft Discovery Studio Information Disclosure Vulnerabilitymicrosoft · discovery studio · CWE-943 | Yüksek7,4 | — | %0,9 | 3 Eyl 2026 |
40Planlayın | CVE-2026-70352İstismar yok | Azure AI Language Elevation of Privilege Vulnerabilitymicrosoft · azure ai language authoring · CWE-306 | Kritik10,0 | — | %0,9 | 3 Eyl 2026 |
40Planlayın | CVE-2026-83711İstismar yok | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerabilitymicrosoft · azure active directory b2c · CWE-639 | Kritik10,0 | — | %0,7 | 3 Eyl 2026 |
37İzleyin | CVE-2026-85424İstismar yok | MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEARthemoos · core-moos · CWE-306 | Kritik9,3 | — | %0,8 | 3 Eyl 2026 |
38İzleyin | CVE-2026-85425İstismar yok | MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOSmit · moos-ivp · CWE-78 | Kritik9,3 | — | %1,7 | 3 Eyl 2026 |
36İzleyin | CVE-2026-85427İstismar yok | MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILEthemoos · essential-moos · CWE-494 | Kritik9,2 | — | %0,5 | 3 Eyl 2026 |
37İzleyin | CVE-2026-85428İstismar yok | MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Writethemoos · core-moos · CWE-306 | Kritik9,3 | — | %0,8 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85429İstismar yok | MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofingmit · moos-ivp · CWE-345 | Yüksek8,7 | — | %0,3 | 3 Eyl 2026 |
35İzleyin | CVE-2026-85430İstismar yok | MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishingthemoos · essential-moos · CWE-345 | Yüksek8,8 | — | %1,6 | 3 Eyl 2026 |
35İzleyin | CVE-2026-85431İstismar yok | MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injectionthemoos · essential-moos · CWE-345 | Yüksek8,7 | — | %3,3 | 3 Eyl 2026 |
35İzleyin | CVE-2026-85432İstismar yok | MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identitythemoos · core-moos · CWE-290 | Yüksek8,8 | — | %0,5 | 3 Eyl 2026 |
37İzleyin | CVE-2026-85433İstismar yok | MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfigurationthemoos · essential-moos · CWE-862 | Kritik9,3 | — | %0,7 | 3 Eyl 2026 |
37İzleyin | CVE-2026-85434İstismar yok | MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Pingmit · moos-ivp · CWE-345 | Kritik9,3 | — | %0,4 | 3 Eyl 2026 |
37İzleyin | CVE-2026-85435İstismar yok | MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollmentmit · moos-ivp · CWE-345 | Kritik9,3 | — | %0,4 | 3 Eyl 2026 |
35İzleyin | CVE-2026-85436İstismar yok | MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Lengththemoos · essential-moos · CWE-191 | Yüksek8,7 | — | %2,0 | 3 Eyl 2026 |
37İzleyin | CVE-2026-85437İstismar yok | MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decodersmit · moos-ivp · CWE-787 | Kritik9,3 | — | %1,4 | 3 Eyl 2026 |
37İzleyin | CVE-2026-85438İstismar yok | MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Countsmit · moos-ivp · CWE-190 | Kritik9,3 | — | %1,0 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85439İstismar yok | MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathnamemit · moos-ivp · CWE-78 | Yüksek8,5 | — | %0,4 | 3 Eyl 2026 |
37İzleyin | CVE-2026-85440İstismar yok | MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Lengththemoos · core-moos · CWE-787 | Kritik9,3 | — | %1,0 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85441İstismar yok | MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Lengththemoos · core-moos · CWE-195 | Yüksek8,7 | — | %0,6 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85442İstismar yok | MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocationthemoos · core-moos · CWE-789 | Yüksek8,7 | — | %0,7 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85443İstismar yok | MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Servicethemoos · core-moos · CWE-400 | Yüksek8,7 | — | %0,6 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85444İstismar yok | MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevronedmit · moos-ivp · CWE-125 | Yüksek8,7 | — | %0,7 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85445İstismar yok | MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Countmit · moos-ivp · CWE-789 | Yüksek8,7 | — | %0,7 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85446İstismar yok | MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Servicemit · moos-ivp · CWE-407 | Yüksek8,7 | — | %0,7 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85447İstismar yok | MOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Servicemit · moos-ivp · CWE-770 | Yüksek8,7 | — | %0,7 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85448İstismar yok | MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retentionmit · moos-ivp · CWE-770 | Yüksek8,7 | — | %0,7 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85449İstismar yok | MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORTmit · moos-ivp · CWE-770 | Yüksek8,7 | — | %0,9 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85450İstismar yok | MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustionthemoos · core-moos · CWE-770 | Yüksek8,7 | — | %0,6 | 3 Eyl 2026 |
28İzleyin | CVE-2026-85451İstismar yok | MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrasethemoos · core-moos · CWE-798 | Yüksek7,1 | — | %0,3 | 3 Eyl 2026 |
35İzleyin | CVE-2026-85455İstismar yok | MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packetthemoos · core-moos · CWE-125 | Yüksek8,8 | — | %0,6 | 3 Eyl 2026 |
40Planlayın | CVE-2026-75754İstismar yok | Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center aasus · control center enterprise (acc) · CWE-306 | Kritik10,0 | — | %0,3 | 3 Eyl 2026 |
37İzleyin | CVE-2026-85146İstismar yok | Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentialslightstar · smartit desktop manager · CWE-798 | Kritik9,3 | — | %0,6 | 3 Eyl 2026 |
34İzleyin | CVE-2026-85147İstismar yok | Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentialslightstar · smartit desktop manager · CWE-284 | Yüksek8,7 | — | %0,3 | 3 Eyl 2026 |
37İzleyin | CVE-2026-85148İstismar yok | Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentialslightstar · smartit desktop manager · CWE-798 | Kritik9,3 | — | %0,6 | 3 Eyl 2026 |
39İzleyin | CVE-2026-11613Kavram kanıtı | Divi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' Parameterdivi engine · divi ajax filter · CWE-98 | Kritik9,8 | — | %0,8 | 4 Eyl 2026 |
39İzleyin | CVE-2026-85504İstismar yok | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-stringfreeipmi · freeipmi · CWE-121 | Kritik9,8 | — | %0,4 | 4 Eyl 2026 |
30İzleyin | CVE-2026-85505İstismar yok | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitfreeipmi · freeipmi · CWE-125 | Yüksek7,5 | — | %0,3 | 4 Eyl 2026 |
39İzleyin | CVE-2026-85506İstismar yok | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-freeipmi · freeipmi · CWE-121 | Kritik9,8 | — | %0,4 | 4 Eyl 2026 |
39İzleyin | CVE-2026-85507İstismar yok | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-ifreeipmi · freeipmi · CWE-121 | Kritik9,8 | — | %0,4 | 4 Eyl 2026 |
39İzleyin | CVE-2026-85508İstismar yok | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (freeipmi · freeipmi · CWE-121 | Kritik9,8 | — | %0,4 | 4 Eyl 2026 |
39İzleyin | CVE-2026-85509İstismar yok | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than freeipmi · freeipmi · CWE-121 | Kritik9,8 | — | %0,4 | 4 Eyl 2026 |
28İzleyin | CVE-2026-16281İstismar yok | Classified Listing < 6.1.1 - Subscriber+ Arbitrary Attachment Deletion and Listing Image Tampering via IDORunknown · classified listing · CWE-639 | Yüksek7,1 | — | %0,3 | 4 Eyl 2026 |
28İzleyin | CVE-2026-19224İstismar yok | Hummingbird < 3.21.2 - Admin+ Network-Wide RCE via Hub Connector on Multisiteunknown · hummingbird performance · CWE-94 | Yüksek7,2 | — | %0,6 | 4 Eyl 2026 |
38İzleyin | CVE-2026-62928İstismar yok | XING CPTrans-ME-X contains an OS Command Injection (CWE-78).xing inc. · xing cptrans-me-x · CWE-78 | Kritik9,3 | — | %2,0 | 4 Eyl 2026 |
34İzleyin | CVE-2026-66840İstismar yok | XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497).xing inc. · xing cptrans-me-x · CWE-497 | Yüksek8,7 | — | %0,4 | 4 Eyl 2026 |
37İzleyin | CVE-2026-69657İstismar yok | XING CPTrans-ME-X contains a Use of Default Password (CWE-1393).xing inc. · xing cptrans-me-x · CWE-1393 | Kritik9,3 | — | %0,5 | 4 Eyl 2026 |
37İzleyin | CVE-2026-70403İstismar yok | XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259).xing inc. · xing cptrans-me-x · CWE-259 | Kritik9,3 | — | %0,5 | 4 Eyl 2026 |
36İzleyin | CVE-2026-80181İstismar yok | Apache Allura: Server-side request forgeryapache software foundation · apache allura · CWE-918 | Kritik9,1 | — | %0,4 | 4 Eyl 2026 |
30İzleyin | CVE-2026-81270İstismar yok | Apache Allura: Information exposure via searchapache software foundation · apache allura · CWE-200 | Yüksek7,5 | — | %0,4 | 4 Eyl 2026 |
16İzleyin | CVE-2026-82186Kavram kanıtı | WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameterunknown · wplp cookie consent · CWE-89 | Orta4,1 | — | %0,6 | 4 Eyl 2026 |
38İzleyin | CVE-2026-85085İstismar yok | The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView.canva · canva · CWE-940 | Kritik9,6 | — | %0,3 | 4 Eyl 2026 |
35İzleyin | CVE-2026-85094İstismar yok | The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView.canva · canva · CWE-212 | Yüksek8,8 | — | %0,4 | 4 Eyl 2026 |
25İzleyin | CVE-2026-6217İstismar yok | Information Disclosure in Pik Online Software's Portalpik online software solutions inc. · pik online portal · CWE-759 | Orta6,3 | — | %0,1 | 4 Eyl 2026 |
30İzleyin | CVE-2026-57777İstismar yok | WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerabilityautomattic · woocommerce · CWE-89 | Yüksek7,6 | — | %0,3 | 4 Eyl 2026 |
34İzleyin | CVE-2026-81302İstismar yok | PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code wijal digital co.,ltd. · pallet control · CWE-276 | Yüksek8,5 | — | %0,1 | 4 Eyl 2026 |
29İzleyin | CVE-2026-85525İstismar yok | Improper OCSP response validation in Snowflake driverssnowflake · snowflake connector for python · CWE-295 | Yüksek7,4 | — | %0,1 | 4 Eyl 2026 |
30İzleyin | CVE-2026-85533İstismar yok | MISP Sharing Group Authorization Bypass via Omitted Distribution Parametermisp · misp · CWE-862 | Yüksek7,6 | — | %0,3 | 4 Eyl 2026 |
33İzleyin | CVE-2026-85538İstismar yok | MISP Attribute Deletion Authorization Bypass Allows Users Without Modify Permissions to Delete Attributesmisp · misp · CWE-863 | Yüksek8,3 | — | %0,4 | 4 Eyl 2026 |
30İzleyin | CVE-2026-76169İstismar yok | fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlersfastify · fastify · CWE-288 | Yüksek7,5 | — | %0,5 | 4 Eyl 2026 |
39İzleyin | CVE-2026-82923İstismar yok | AI Website Builder (GitHub build) 1.0.0 - Unauthenticated RCE via Unprotected REST Routesunknown · ai website builder (github build) · CWE-862 | Kritik9,8 | — | %0,8 | 4 Eyl 2026 |
30İzleyin | CVE-2026-84469İstismar yok | fastify vulnerable to request validation bypass via skipped boolean false schemasfastify · fastify · CWE-20 | Yüksek7,5 | — | %0,4 | 4 Eyl 2026 |
32İzleyin | CVE-2026-84504İstismar yok | fastify vulnerable to request body replacement via an async validation result collisionfastify · fastify · CWE-20 | Yüksek8,1 | — | %0,4 | 4 Eyl 2026 |
36İzleyin | CVE-2026-85184İstismar yok | @fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request targetfastify · fastify\/middie · CWE-436 | Kritik9,1 | — | %0,5 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85540İstismar yok | Interinfo｜DreamMaker - SQL Injectioninterinfo · dreammaker · CWE-89 | Yüksek8,7 | — | %0,5 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85546İstismar yok | MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requestsmisp · misp · CWE-352 | Yüksek8,6 | — | %0,2 | 4 Eyl 2026 |
34İzleyin | CVE-2026-4644İstismar yok | Improper Authorization in Google Cloud Integration Connectors Leads to Project Takeovergoogle cloud · integration connectors · CWE-863 | Yüksek8,5 | — | %0,3 | 4 Eyl 2026 |
34İzleyin | CVE-2026-79707İstismar yok | Arbitrary File Read in Google Agent Development Kit (ADK)google cloud · agent development kit (adk) · CWE-22 | Yüksek8,7 | — | %0,6 | 4 Eyl 2026 |
30İzleyin | CVE-2026-84428İstismar yok | fastify vulnerable to header validation bypass via incomplete schema case normalizationfastify · fastify · CWE-178 | Yüksek7,5 | — | %0,5 | 4 Eyl 2026 |
30İzleyin | CVE-2026-85197İstismar yok | Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body uploadred hat · red hat enterprise linux 10 · CWE-416 | Yüksek7,6 | — | %0,3 | 4 Eyl 2026 |
28İzleyin | CVE-2026-19051İstismar yok | Plaintext Storage of User Credentials in Menulux Software's Menulux Portalmenulux software inc. · menulux portal · CWE-256 | Yüksek7,1 | — | %0,2 | 4 Eyl 2026 |
30İzleyin | CVE-2026-19080İstismar yok | Username Enumeration in Menulux Software's Menulux Portalmenulux software inc. · menulux portal · CWE-204 | Yüksek7,5 | — | %0,4 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85580İstismar yok | SiYuan before v3.8.2 Path Guard Bypass via Case Mismatchsiyuan-note · siyuan · CWE-22 | Yüksek7,1 | — | %0,5 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85581İstismar yok | SiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registrationsiyuan-note · siyuan · CWE-770 | Yüksek8,7 | — | %0,5 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85582İstismar yok | SiYuan before v3.8.2 Unbounded Session Creation via Basic Authsiyuan-note · siyuan · CWE-770 | Yüksek7,1 | — | %0,4 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85583İstismar yok | SiYuan before v3.8.2 Path Traversal via symlink in file APIsiyuan-note · siyuan · CWE-59 | Yüksek7,1 | — | %0,6 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85584İstismar yok | SiYuan before v3.8.2 Denial of Service via Auth Throttlesiyuan-note · siyuan · CWE-770 | Yüksek8,7 | — | %0,5 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85585İstismar yok | SiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrencysiyuan-note · siyuan · CWE-400 | Yüksek8,7 | — | %0,5 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85590İstismar yok | phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disablethorsten · phpmyfaq · CWE-308 | Yüksek7,1 | — | %0,5 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85591İstismar yok | phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Changethorsten · phpmyfaq · CWE-620 | Yüksek7,1 | — | %0,5 | 4 Eyl 2026 |
37İzleyin | CVE-2026-85602İstismar yok | Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypassgetgrav · grav-plugin-form · CWE-807 | Kritik9,3 | — | %0,3 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85603İstismar yok | Grav Admin Plugin Path Traversal via Save As Language Codegetgrav · grav · CWE-73 | Yüksek7,1 | — | %0,6 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85604İstismar yok | Grav before 2.0.18 Remote Code Execution via sort filtergetgrav · grav · CWE-94 | Yüksek8,7 | — | %0,8 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85610İstismar yok | OpenPanel before 2.3.0 Remote Code Execution via chart formulasopenpanel-dev · openpanel · CWE-94 | Yüksek8,7 | — | %0,7 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85612İstismar yok | OpenPanel before 2.3.0 SSRF via favicon and og endpointsopenpanel-dev · openpanel · CWE-918 | Yüksek8,7 | — | %0,4 | 4 Eyl 2026 |
33İzleyin | CVE-2026-85613İstismar yok | OpenPanel before 2.3.0 Unauthenticated XSS via SVG Favicon Proxyopenpanel-dev · openpanel · CWE-79 | Yüksek8,4 | — | %0,3 | 4 Eyl 2026 |
36İzleyin | CVE-2026-85614İstismar yok | OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checkeropenpanel-dev · openpanel · CWE-918 | Kritik9,2 | — | %0,2 | 4 Eyl 2026 |
33İzleyin | CVE-2026-85616İstismar yok | Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptancesnipeitapp · snipe-it · CWE-639 | Yüksek8,4 | — | %0,3 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85617İstismar yok | snipe-it before 8.6.3 Authorization Bypass via Bulk Deletesnipeitapp · snipe-it · CWE-639 | Yüksek8,7 | — | %0,4 | 4 Eyl 2026 |
30İzleyin | CVE-2026-81665İstismar yok | Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassemblyred hat · red hat enterprise linux 10 · CWE-122 | Yüksek7,5 | — | %0,4 | 4 Eyl 2026 |
35İzleyin | CVE-2026-18198İstismar yok | SQL Injection in TAC Information's GoldenHorntac information services internal and external trade inc. · goldenhorn oneit · CWE-89 | Yüksek8,8 | — | %0,4 | 4 Eyl 2026 |
28İzleyin | CVE-2026-74236İstismar yok | GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handlergfi software · gfi exinda ai · CWE-22 | Yüksek7,0 | — | %0,9 | 4 Eyl 2026 |
28İzleyin | CVE-2026-74237İstismar yok | GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Clientgfi software · gfi exinda ai · CWE-88 | Yüksek7,1 | — | %0,3 | 4 Eyl 2026 |
- CVE-2026-8009840Planlayın
Copilot Studio Elevation of Privilege Vulnerability
KritikCVSS 10,0İstismar yokEPSS %0microsoft · copilot studio3 Eyl 2026
- CVE-2026-8542637İzleyin
MOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Names
KritikCVSS 9,3İstismar yokEPSS %0moos-ivp · moos-ivp3 Eyl 2026
- CVE-2026-8545234İzleyin
MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MOOS Identifiers
YüksekCVSS 8,7İstismar yokEPSS %0themoos · ui-moos3 Eyl 2026
- CVE-2026-6739734İzleyin
Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root.
YüksekCVSS 8,5İstismar yokEPSS %0webpros · plesk3 Eyl 2026
- CVE-2026-6739832İzleyin
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.7, from 9.0.0 before 9
YüksekCVSS 8,2İstismar yokEPSS %0webpros · whmcs3 Eyl 2026
- CVE-2026-6740236İzleyin
An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual ho
KritikCVSS 9,2İstismar yokEPSS %0webpros · configserver security & firewall3 Eyl 2026
- CVE-2026-4520031İzleyin
GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlags
YüksekCVSS 7,8İstismar yokEPSS %0imagination technologies · graphics ddk3 Eyl 2026
- CVE-2026-6290629İzleyin
Microsoft Discovery Studio Information Disclosure Vulnerability
YüksekCVSS 7,4İstismar yokEPSS %0microsoft · discovery studio3 Eyl 2026
- CVE-2026-7035240Planlayın
Azure AI Language Elevation of Privilege Vulnerability
KritikCVSS 10,0İstismar yokEPSS %0microsoft · azure ai language authoring3 Eyl 2026
- CVE-2026-8371140Planlayın
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
KritikCVSS 10,0İstismar yokEPSS %0microsoft · azure active directory b2c3 Eyl 2026
- CVE-2026-8542437İzleyin
MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR
KritikCVSS 9,3İstismar yokEPSS %0themoos · core-moos3 Eyl 2026
- CVE-2026-8542538İzleyin
MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS
KritikCVSS 9,3İstismar yokEPSS %1mit · moos-ivp3 Eyl 2026
- CVE-2026-8542736İzleyin
MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILE
KritikCVSS 9,2İstismar yokEPSS %0themoos · essential-moos3 Eyl 2026
- CVE-2026-8542837İzleyin
MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write
KritikCVSS 9,3İstismar yokEPSS %0themoos · core-moos3 Eyl 2026
- CVE-2026-8542934İzleyin
MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing
YüksekCVSS 8,7İstismar yokEPSS %0mit · moos-ivp3 Eyl 2026
- CVE-2026-8543035İzleyin
MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing
YüksekCVSS 8,8İstismar yokEPSS %1themoos · essential-moos3 Eyl 2026
- CVE-2026-8543135İzleyin
MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection
YüksekCVSS 8,7İstismar yokEPSS %3themoos · essential-moos3 Eyl 2026
- CVE-2026-8543235İzleyin
MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity
YüksekCVSS 8,8İstismar yokEPSS %0themoos · core-moos3 Eyl 2026
- CVE-2026-8543337İzleyin
MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration
KritikCVSS 9,3İstismar yokEPSS %0themoos · essential-moos3 Eyl 2026
- CVE-2026-8543437İzleyin
MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Ping
KritikCVSS 9,3İstismar yokEPSS %0mit · moos-ivp3 Eyl 2026
- CVE-2026-8543537İzleyin
MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollment
KritikCVSS 9,3İstismar yokEPSS %0mit · moos-ivp3 Eyl 2026
- CVE-2026-8543635İzleyin
MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length
YüksekCVSS 8,7İstismar yokEPSS %2themoos · essential-moos3 Eyl 2026
- CVE-2026-8543737İzleyin
MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders
KritikCVSS 9,3İstismar yokEPSS %1mit · moos-ivp3 Eyl 2026
- CVE-2026-8543837İzleyin
MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Counts
KritikCVSS 9,3İstismar yokEPSS %1mit · moos-ivp3 Eyl 2026
- CVE-2026-8543934İzleyin
MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname
YüksekCVSS 8,5İstismar yokEPSS %0mit · moos-ivp3 Eyl 2026
- CVE-2026-8544037İzleyin
MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length
KritikCVSS 9,3İstismar yokEPSS %1themoos · core-moos3 Eyl 2026
- CVE-2026-8544134İzleyin
MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Length
YüksekCVSS 8,7İstismar yokEPSS %0themoos · core-moos3 Eyl 2026
- CVE-2026-8544234İzleyin
MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocation
YüksekCVSS 8,7İstismar yokEPSS %0themoos · core-moos3 Eyl 2026
- CVE-2026-8544334İzleyin
MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service
YüksekCVSS 8,7İstismar yokEPSS %0themoos · core-moos3 Eyl 2026
- CVE-2026-8544434İzleyin
MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned
YüksekCVSS 8,7İstismar yokEPSS %0mit · moos-ivp3 Eyl 2026
- CVE-2026-8544534İzleyin
MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count
YüksekCVSS 8,7İstismar yokEPSS %0mit · moos-ivp3 Eyl 2026
- CVE-2026-8544634İzleyin
MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Service
YüksekCVSS 8,7İstismar yokEPSS %0mit · moos-ivp3 Eyl 2026
- CVE-2026-8544734İzleyin
MOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Service
YüksekCVSS 8,7İstismar yokEPSS %0mit · moos-ivp3 Eyl 2026
- CVE-2026-8544834İzleyin
MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention
YüksekCVSS 8,7İstismar yokEPSS %0mit · moos-ivp3 Eyl 2026
- CVE-2026-8544934İzleyin
MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORT
YüksekCVSS 8,7İstismar yokEPSS %0mit · moos-ivp3 Eyl 2026
- CVE-2026-8545034İzleyin
MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion
YüksekCVSS 8,7İstismar yokEPSS %0themoos · core-moos3 Eyl 2026
- CVE-2026-8545128İzleyin
MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrase
YüksekCVSS 7,1İstismar yokEPSS %0themoos · core-moos3 Eyl 2026
- CVE-2026-8545535İzleyin
MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet
YüksekCVSS 8,8İstismar yokEPSS %0themoos · core-moos3 Eyl 2026
- CVE-2026-7575440Planlayın
Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center a
KritikCVSS 10,0İstismar yokEPSS %0asus · control center enterprise (acc)3 Eyl 2026
- CVE-2026-8514637İzleyin
Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
KritikCVSS 9,3İstismar yokEPSS %0lightstar · smartit desktop manager3 Eyl 2026
- CVE-2026-8514734İzleyin
Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
YüksekCVSS 8,7İstismar yokEPSS %0lightstar · smartit desktop manager3 Eyl 2026
- CVE-2026-8514837İzleyin
Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
KritikCVSS 9,3İstismar yokEPSS %0lightstar · smartit desktop manager3 Eyl 2026
- CVE-2026-1161339İzleyin
Divi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' Parameter
KritikCVSS 9,8Kavram kanıtıEPSS %0divi engine · divi ajax filter4 Eyl 2026
- CVE-2026-8550439İzleyin
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string
KritikCVSS 9,8İstismar yokEPSS %0freeipmi · freeipmi4 Eyl 2026
- CVE-2026-8550530İzleyin
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujit
YüksekCVSS 7,5İstismar yokEPSS %0freeipmi · freeipmi4 Eyl 2026
- CVE-2026-8550639İzleyin
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-
KritikCVSS 9,8İstismar yokEPSS %0freeipmi · freeipmi4 Eyl 2026
- CVE-2026-8550739İzleyin
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-i
KritikCVSS 9,8İstismar yokEPSS %0freeipmi · freeipmi4 Eyl 2026
- CVE-2026-8550839İzleyin
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (
KritikCVSS 9,8İstismar yokEPSS %0freeipmi · freeipmi4 Eyl 2026
- CVE-2026-8550939İzleyin
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than
KritikCVSS 9,8İstismar yokEPSS %0freeipmi · freeipmi4 Eyl 2026
- CVE-2026-1628128İzleyin
Classified Listing < 6.1.1 - Subscriber+ Arbitrary Attachment Deletion and Listing Image Tampering via IDOR
YüksekCVSS 7,1İstismar yokEPSS %0unknown · classified listing4 Eyl 2026
- CVE-2026-1922428İzleyin
Hummingbird < 3.21.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite
YüksekCVSS 7,2İstismar yokEPSS %0unknown · hummingbird performance4 Eyl 2026
- CVE-2026-6292838İzleyin
XING CPTrans-ME-X contains an OS Command Injection (CWE-78).
KritikCVSS 9,3İstismar yokEPSS %2xing inc. · xing cptrans-me-x4 Eyl 2026
- CVE-2026-6684034İzleyin
XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497).
YüksekCVSS 8,7İstismar yokEPSS %0xing inc. · xing cptrans-me-x4 Eyl 2026
- CVE-2026-6965737İzleyin
XING CPTrans-ME-X contains a Use of Default Password (CWE-1393).
KritikCVSS 9,3İstismar yokEPSS %0xing inc. · xing cptrans-me-x4 Eyl 2026
- CVE-2026-7040337İzleyin
XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259).
KritikCVSS 9,3İstismar yokEPSS %0xing inc. · xing cptrans-me-x4 Eyl 2026
- CVE-2026-8018136İzleyin
Apache Allura: Server-side request forgery
KritikCVSS 9,1İstismar yokEPSS %0apache software foundation · apache allura4 Eyl 2026
- CVE-2026-8127030İzleyin
Apache Allura: Information exposure via search
YüksekCVSS 7,5İstismar yokEPSS %0apache software foundation · apache allura4 Eyl 2026
- CVE-2026-8218616İzleyin
WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameter
OrtaCVSS 4,1Kavram kanıtıEPSS %0unknown · wplp cookie consent4 Eyl 2026
- CVE-2026-8508538İzleyin
The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView.
KritikCVSS 9,6İstismar yokEPSS %0canva · canva4 Eyl 2026
- CVE-2026-8509435İzleyin
The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView.
YüksekCVSS 8,8İstismar yokEPSS %0canva · canva4 Eyl 2026
- CVE-2026-621725İzleyin
Information Disclosure in Pik Online Software's Portal
OrtaCVSS 6,3İstismar yokEPSS %0pik online software solutions inc. · pik online portal4 Eyl 2026
- CVE-2026-5777730İzleyin
WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0automattic · woocommerce4 Eyl 2026
- CVE-2026-8130234İzleyin
PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code wi
YüksekCVSS 8,5İstismar yokEPSS %0jal digital co.,ltd. · pallet control4 Eyl 2026
- CVE-2026-8552529İzleyin
Improper OCSP response validation in Snowflake drivers
YüksekCVSS 7,4İstismar yokEPSS %0snowflake · snowflake connector for python4 Eyl 2026
- CVE-2026-8553330İzleyin
MISP Sharing Group Authorization Bypass via Omitted Distribution Parameter
YüksekCVSS 7,6İstismar yokEPSS %0misp · misp4 Eyl 2026
- CVE-2026-8553833İzleyin
MISP Attribute Deletion Authorization Bypass Allows Users Without Modify Permissions to Delete Attributes
YüksekCVSS 8,3İstismar yokEPSS %0misp · misp4 Eyl 2026
- CVE-2026-7616930İzleyin
fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers
YüksekCVSS 7,5İstismar yokEPSS %0fastify · fastify4 Eyl 2026
- CVE-2026-8292339İzleyin
AI Website Builder (GitHub build) 1.0.0 - Unauthenticated RCE via Unprotected REST Routes
KritikCVSS 9,8İstismar yokEPSS %0unknown · ai website builder (github build)4 Eyl 2026
- CVE-2026-8446930İzleyin
fastify vulnerable to request validation bypass via skipped boolean false schemas
YüksekCVSS 7,5İstismar yokEPSS %0fastify · fastify4 Eyl 2026
- CVE-2026-8450432İzleyin
fastify vulnerable to request body replacement via an async validation result collision
YüksekCVSS 8,1İstismar yokEPSS %0fastify · fastify4 Eyl 2026
- CVE-2026-8518436İzleyin
@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target
KritikCVSS 9,1İstismar yokEPSS %0fastify · fastify\/middie4 Eyl 2026
- CVE-2026-8554034İzleyin
Interinfo｜DreamMaker - SQL Injection
YüksekCVSS 8,7İstismar yokEPSS %0interinfo · dreammaker4 Eyl 2026
- CVE-2026-8554634İzleyin
MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requests
YüksekCVSS 8,6İstismar yokEPSS %0misp · misp4 Eyl 2026
- CVE-2026-464434İzleyin
Improper Authorization in Google Cloud Integration Connectors Leads to Project Takeover
YüksekCVSS 8,5İstismar yokEPSS %0google cloud · integration connectors4 Eyl 2026
- CVE-2026-7970734İzleyin
Arbitrary File Read in Google Agent Development Kit (ADK)
YüksekCVSS 8,7İstismar yokEPSS %0google cloud · agent development kit (adk)4 Eyl 2026
- CVE-2026-8442830İzleyin
fastify vulnerable to header validation bypass via incomplete schema case normalization
YüksekCVSS 7,5İstismar yokEPSS %0fastify · fastify4 Eyl 2026
- CVE-2026-8519730İzleyin
Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload
YüksekCVSS 7,6İstismar yokEPSS %0red hat · red hat enterprise linux 104 Eyl 2026
- CVE-2026-1905128İzleyin
Plaintext Storage of User Credentials in Menulux Software's Menulux Portal
YüksekCVSS 7,1İstismar yokEPSS %0menulux software inc. · menulux portal4 Eyl 2026
- CVE-2026-1908030İzleyin
Username Enumeration in Menulux Software's Menulux Portal
YüksekCVSS 7,5İstismar yokEPSS %0menulux software inc. · menulux portal4 Eyl 2026
- CVE-2026-8558028İzleyin
SiYuan before v3.8.2 Path Guard Bypass via Case Mismatch
YüksekCVSS 7,1İstismar yokEPSS %0siyuan-note · siyuan4 Eyl 2026
- CVE-2026-8558134İzleyin
SiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registration
YüksekCVSS 8,7İstismar yokEPSS %0siyuan-note · siyuan4 Eyl 2026
- CVE-2026-8558228İzleyin
SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth
YüksekCVSS 7,1İstismar yokEPSS %0siyuan-note · siyuan4 Eyl 2026
- CVE-2026-8558328İzleyin
SiYuan before v3.8.2 Path Traversal via symlink in file API
YüksekCVSS 7,1İstismar yokEPSS %0siyuan-note · siyuan4 Eyl 2026
- CVE-2026-8558434İzleyin
SiYuan before v3.8.2 Denial of Service via Auth Throttle
YüksekCVSS 8,7İstismar yokEPSS %0siyuan-note · siyuan4 Eyl 2026
- CVE-2026-8558534İzleyin
SiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrency
YüksekCVSS 8,7İstismar yokEPSS %0siyuan-note · siyuan4 Eyl 2026
- CVE-2026-8559028İzleyin
phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disable
YüksekCVSS 7,1İstismar yokEPSS %0thorsten · phpmyfaq4 Eyl 2026
- CVE-2026-8559128İzleyin
phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change
YüksekCVSS 7,1İstismar yokEPSS %0thorsten · phpmyfaq4 Eyl 2026
- CVE-2026-8560237İzleyin
Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass
KritikCVSS 9,3İstismar yokEPSS %0getgrav · grav-plugin-form4 Eyl 2026
- CVE-2026-8560328İzleyin
Grav Admin Plugin Path Traversal via Save As Language Code
YüksekCVSS 7,1İstismar yokEPSS %0getgrav · grav4 Eyl 2026
- CVE-2026-8560434İzleyin
Grav before 2.0.18 Remote Code Execution via sort filter
YüksekCVSS 8,7İstismar yokEPSS %0getgrav · grav4 Eyl 2026
- CVE-2026-8561034İzleyin
OpenPanel before 2.3.0 Remote Code Execution via chart formulas
YüksekCVSS 8,7İstismar yokEPSS %0openpanel-dev · openpanel4 Eyl 2026
- CVE-2026-8561234İzleyin
OpenPanel before 2.3.0 SSRF via favicon and og endpoints
YüksekCVSS 8,7İstismar yokEPSS %0openpanel-dev · openpanel4 Eyl 2026
- CVE-2026-8561333İzleyin
OpenPanel before 2.3.0 Unauthenticated XSS via SVG Favicon Proxy
YüksekCVSS 8,4İstismar yokEPSS %0openpanel-dev · openpanel4 Eyl 2026
- CVE-2026-8561436İzleyin
OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checker
KritikCVSS 9,2İstismar yokEPSS %0openpanel-dev · openpanel4 Eyl 2026
- CVE-2026-8561633İzleyin
Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance
YüksekCVSS 8,4İstismar yokEPSS %0snipeitapp · snipe-it4 Eyl 2026
- CVE-2026-8561734İzleyin
snipe-it before 8.6.3 Authorization Bypass via Bulk Delete
YüksekCVSS 8,7İstismar yokEPSS %0snipeitapp · snipe-it4 Eyl 2026
- CVE-2026-8166530İzleyin
Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat enterprise linux 104 Eyl 2026
- CVE-2026-1819835İzleyin
SQL Injection in TAC Information's GoldenHorn
YüksekCVSS 8,8İstismar yokEPSS %0tac information services internal and external trade inc. · goldenhorn oneit4 Eyl 2026
- CVE-2026-7423628İzleyin
GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler
YüksekCVSS 7,0İstismar yokEPSS %0gfi software · gfi exinda ai4 Eyl 2026
- CVE-2026-7423728İzleyin
GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client
YüksekCVSS 7,1İstismar yokEPSS %0gfi software · gfi exinda ai4 Eyl 2026