Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.955 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 73 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2026-18414İstismar yok | Out-of-bounds write in the ADI MAX32 ADC driver due to incorrect adc_sequence buffer size validationzephyrproject · zephyr · CWE-787 | Yüksek7,8 | — | %0,1 | 28 Eyl 2026 |
29İzleyin | CVE-2026-84895İstismar yok | In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSefacebook · proxygen · CWE-416 | Yüksek7,3 | — | %0,1 | 28 Eyl 2026 |
30İzleyin | CVE-2026-91096İstismar yok | In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destroy in releases beforfacebook · proxygen · CWE-416 | Yüksek7,5 | — | %0,2 | 28 Eyl 2026 |
34İzleyin | CVE-2024-42002İstismar yok | Unsafe use of eval() method in ros2 topic hz toolopen source robotics foundation · robot operating system 2 (ros 2) · CWE-94 | Yüksek8,6 | — | %0,1 | 28 Eyl 2026 |
28İzleyin | CVE-2024-58386İstismar yok | ZoneMinder 1.37.x Path Traversal via files viewzoneminder · zoneminder · CWE-22 | Yüksek7,1 | — | %0,3 | 28 Eyl 2026 |
28İzleyin | CVE-2026-101091İstismar yok | SiYuan before v3.8.4 SQL Injection via Block Query Embedsiyuan-note · siyuan · CWE-89 | Yüksek7,1 | — | %0,2 | 28 Eyl 2026 |
30İzleyin | CVE-2026-102281İstismar yok | Nest: Remote process termination via a deeply nested microservice message patternnestjs · nest · CWE-248 | Yüksek7,5 | — | %0,3 | 28 Eyl 2026 |
33İzleyin | CVE-2026-102296İstismar yok | ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Responsezoneminder · zoneminder · CWE-120 | Yüksek8,3 | — | %0,3 | 28 Eyl 2026 |
35İzleyin | CVE-2026-101260İstismar yok | Ziroom ZHOME A0101 firstLogin command injectionziroom · zhome a0101 · CWE-74 | Yüksek8,5 | — | %2,3 | 28 Eyl 2026 |
35İzleyin | CVE-2026-101261İstismar yok | Ziroom ZHOME A0101 firstSetup_wifi command injectionziroom · zhome a0101 · CWE-74 | Yüksek8,5 | — | %2,3 | 28 Eyl 2026 |
35İzleyin | CVE-2026-101262İstismar yok | Ziroom ZHOME A0101 set_online_client command injectionziroom · zhome a0101 · CWE-74 | Yüksek8,5 | — | %2,3 | 28 Eyl 2026 |
36İzleyin | CVE-2026-102334İstismar yok | Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protectionnginxproxymanager · nginx-proxy-manager · CWE-307 | Kritik9,1 | — | %0,4 | 28 Eyl 2026 |
28İzleyin | CVE-2026-102335İstismar yok | Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_confignginxproxymanager · nginx-proxy-manager · CWE-863 | Yüksek7,1 | — | %0,2 | 28 Eyl 2026 |
35İzleyin | CVE-2026-101263İstismar yok | Ziroom ZHOME A0101 set_online_client command injectionziroom · zhome a0101 · CWE-74 | Yüksek8,5 | — | %2,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-101264İstismar yok | Ziroom ZHOME A0101 set_passwd command injectionziroom · zhome a0101 · CWE-74 | Yüksek8,5 | — | %2,3 | 29 Eyl 2026 |
37İzleyin | CVE-2026-102361İstismar yok | mall4j through 4.0 Missing Authentication in Password Update Endpointgz-yami · mall4j · CWE-306 | Kritik9,3 | — | %0,3 | 29 Eyl 2026 |
28İzleyin | CVE-2026-102365İstismar yok | mall4j through 4.0 Missing Authorization in Admin User Address Endpointsgz-yami · mall4j · CWE-862 | Yüksek7,1 | — | %0,2 | 29 Eyl 2026 |
28İzleyin | CVE-2026-102373İstismar yok | GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parametergestsup · gestsup · CWE-639 | Yüksek7,1 | — | %0,2 | 29 Eyl 2026 |
34İzleyin | CVE-2026-101354İstismar yok | FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflowfast · fac1203r · CWE-119 | Yüksek8,6 | — | %0,3 | 29 Eyl 2026 |
29İzleyin | CVE-2026-101860İstismar yok | RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges managementraspap · raspap-webgui · CWE-266 | Yüksek7,4 | — | %0,4 | 29 Eyl 2026 |
30İzleyin | CVE-2026-101878İstismar yok | Bitwarden Server 2025.6.0 < 2025.6.0 Authentication Bypass via SSO Identifier Truncationbitwarden · bitwarden server · CWE-303 | Yüksek7,7 | — | %0,2 | 29 Eyl 2026 |
38İzleyin | CVE-2026-102240İstismar yok | Netcore NAP930 Network Tools CGI network_tools eval os command injectionnetcore · nap930 · CWE-77 | Kritik9,3 | — | %2,0 | 29 Eyl 2026 |
28İzleyin | CVE-2026-96326İstismar yok | HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Fieldhtplugins · ht contact form – drag & drop form builder for wordpress · CWE-79 | Yüksek7,2 | — | %0,1 | 29 Eyl 2026 |
28İzleyin | CVE-2026-97685İstismar yok | LimeSurvey Community Edition 7.3.0 - Cross-survey object authorization bypass in REST survey patch operationslimesurvey · limesurvey · CWE-639 | Yüksek7,1 | — | %0,2 | 29 Eyl 2026 |
28İzleyin | CVE-2026-102247İstismar yok | FastAdmin Database Management database.php unnecessary privilegesCWE-250 | Yüksek7,1 | — | %0,3 | 29 Eyl 2026 |
36İzleyin | CVE-2026-102422Kavram kanıtı | shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` tokenCWE-78 | Kritik9,2 | — | %0,3 | 29 Eyl 2026 |
28İzleyin | CVE-2026-97024İstismar yok | Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etcred hat · red hat enterprise linux 10 · CWE-61 | Yüksek7,1 | — | %0,3 | 29 Eyl 2026 |
8İzleyin | CVE-2026-102261Kavram kanıtı | owen2345 Camaleon CMS Media Crop media_controller.rb crop authorizationowen2345 · camaleon cms · CWE-285 | Düşük2,1 | — | %0,2 | 29 Eyl 2026 |
30İzleyin | CVE-2026-86158İstismar yok | Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhereprogress software · progress® telerik® fiddler® everywhere · CWE-306 | Yüksek7,7 | — | %0,0 | 29 Eyl 2026 |
34İzleyin | CVE-2026-101169İstismar yok | In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set specifically crafteoctopus deploy · octopus server · CWE-502 | Yüksek8,7 | — | %0,3 | 29 Eyl 2026 |
39İzleyin | CVE-2026-84154İstismar yok | Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026xdassault systèmes · geovia geospatial data manager · CWE-94 | Kritik9,9 | — | %0,3 | 29 Eyl 2026 |
39İzleyin | CVE-2026-91012İstismar yok | Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalationapache · karaf · CWE-22 | Kritik9,8 | — | %0,6 | 29 Eyl 2026 |
39İzleyin | CVE-2026-91048İstismar yok | Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-createapache · karaf · CWE-862 | Kritik9,8 | — | %0,5 | 29 Eyl 2026 |
35İzleyin | CVE-2026-92142İstismar yok | Apache Karaf: Authorization bypass in JMX MBean lifecycle operationsapache · karaf · CWE-862 | Yüksek8,8 | — | %0,6 | 29 Eyl 2026 |
37İzleyin | CVE-2026-96428İstismar yok | Flowring Agentflow 4.0 - SQL Injectionflowring technology corp · agentflow 4.0 · CWE-89 | Kritik9,3 | — | %0,3 | 29 Eyl 2026 |
37İzleyin | CVE-2026-96429İstismar yok | Flowring Agentflow 4.0 - SQL Injectionflowring technology corp · agentflow 4.0 · CWE-89 | Kritik9,3 | — | %0,2 | 29 Eyl 2026 |
34İzleyin | CVE-2026-96430İstismar yok | Flowring Agentflow 4.0 - Exposed Dangerous Method or Functionflowring technology corp · agentflow 4.0 · CWE-749 | Yüksek8,7 | — | %0,2 | 29 Eyl 2026 |
37İzleyin | CVE-2026-96431İstismar yok | Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Typeflowring technology corp · agentflow 4.0 · CWE-434 | Kritik9,3 | — | %0,2 | 29 Eyl 2026 |
28İzleyin | CVE-2026-96440İstismar yok | Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal）flowring technology corp · agentflow 4.0 · CWE-22 | Yüksek7,1 | — | %0,2 | 29 Eyl 2026 |
36İzleyin | CVE-2026-15390İstismar yok | Out-of-bounds write in Das U-Bootdenx software engineering · das u-boot · CWE-459 | Kritik9,0 | — | %0,2 | 29 Eyl 2026 |
28İzleyin | CVE-2026-19547İstismar yok | Local Privilege Escalation in Ghostscript for Windowsartifex software inc. · ghostscript · CWE-426 | Yüksek7,0 | — | %0,1 | 29 Eyl 2026 |
32İzleyin | CVE-2026-76718İstismar yok | HPE OneView - Cross-site scripting vulnerabilityhewlett packard enterprise · hpe oneview · CWE-79 | Yüksek8,2 | — | %0,2 | 29 Eyl 2026 |
32İzleyin | CVE-2026-76719İstismar yok | HPE OneView - Cross-site scripting vulnerabilityhewlett packard enterprise · hpe oneview · CWE-79 | Yüksek8,2 | — | %0,1 | 29 Eyl 2026 |
34İzleyin | CVE-2026-7395İstismar yok | Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to hitachi energy · asset suite · CWE-306 | Yüksek8,5 | — | %0,2 | 29 Eyl 2026 |
34İzleyin | CVE-2026-84739İstismar yok | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabgitlab · gitlab · CWE-79 | Yüksek8,7 | — | %0,4 | 29 Eyl 2026 |
36İzleyin | CVE-2026-8065Kavram kanıtı | An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticathitachi energy · rtu500 series cmu firmware · CWE-306 | Kritik9,1 | — | %0,5 | 29 Eyl 2026 |
36İzleyin | CVE-2026-8066İstismar yok | A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticatedhitachi energy · rtu500 series cmu firmware · CWE-23 | Kritik9,1 | — | %0,7 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95387İstismar yok | Heap-based Buffer Overflow in Wiresharkwireshark · wireshark · CWE-122 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
32İzleyin | CVE-2026-95389İstismar yok | Heap-based Buffer Overflow in Wiresharkwireshark · wireshark · CWE-122 | Yüksek8,1 | — | %0,3 | 29 Eyl 2026 |
31İzleyin | CVE-2026-96419İstismar yok | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wiresharkwireshark · wireshark · CWE-22 | Yüksek7,8 | — | %0,1 | 29 Eyl 2026 |
28İzleyin | CVE-2026-96423İstismar yok | Heap-based Buffer Overflow in Wiresharkwireshark · wireshark · CWE-122 | Yüksek7,1 | — | %0,1 | 29 Eyl 2026 |
35İzleyin | CVE-2026-95509İstismar yok | Out-of-bounds read vulnerability in string formatting impacts Qt for MCUsqt · qt for mcus · CWE-125 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
30İzleyin | CVE-2026-102495İstismar yok | Apache XMLSchema: Denial of service through unbounded recursion when resolving schema imports and includesapache · xmlschema · CWE-674 | Yüksek7,5 | — | %0,5 | 29 Eyl 2026 |
30İzleyin | CVE-2026-102496İstismar yok | Apache XMLSchema: Denial of service through deeply nested schema structuresapache · xmlschema · CWE-674 | Yüksek7,5 | — | %0,5 | 29 Eyl 2026 |
30İzleyin | CVE-2026-102497İstismar yok | Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walkerapache · xmlschema · CWE-674 | Yüksek7,5 | — | %0,5 | 29 Eyl 2026 |
27İzleyin | CVE-2026-41875Kavram kanıtı | Cross-Site Request Forgery in admin panel of Quick.Cartopensolution · quick.cart · CWE-352 | Orta6,9 | — | %0,1 | 29 Eyl 2026 |
35İzleyin | CVE-2026-73594İstismar yok | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Valdell · policy manager for secure connect gateway · CWE-295 | Yüksek8,8 | — | %0,0 | 29 Eyl 2026 |
39İzleyin | CVE-2026-73595İstismar yok | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without dell · policy manager for secure connect gateway · CWE-494 | Kritik9,8 | — | %0,1 | 29 Eyl 2026 |
32İzleyin | CVE-2026-73597İstismar yok | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability.dell · policy manager for secure connect gateway · CWE-352 | Yüksek8,1 | — | %0,1 | 29 Eyl 2026 |
37İzleyin | CVE-2026-85520Kavram kanıtı | Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop modulemypresta · google merchant center feed · CWE-73 | Kritik9,3 | — | %0,9 | 29 Eyl 2026 |
35İzleyin | CVE-2026-87748İstismar yok | Privilege Escalation via Account Takeover in Interprobe's Qorela DCinterprobe information technologies inc. · qorela dc · CWE-862 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
28İzleyin | CVE-2026-95520İstismar yok | Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packagesred hat · red hat enterprise linux 10 · CWE-787 | Yüksek7,1 | — | %0,1 | 29 Eyl 2026 |
32İzleyin | CVE-2026-100756İstismar yok | Incorrect boundary conditions in the Audio/Video: Playback componentmozilla · firefox · CWE-119 | Yüksek8,1 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100757İstismar yok | Use-after-free in the Widget componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-100758İstismar yok | Sandbox escape in the DOM: Navigation componentmozilla · firefox · CWE-284 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
32İzleyin | CVE-2026-100759İstismar yok | Uninitialized memory in the Storage: Quota Manager componentmozilla · firefox · CWE-457 | Yüksek8,1 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-100760İstismar yok | Sandbox escape in the Security: Process Sandboxing componentmozilla · firefox · CWE-693 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100761İstismar yok | Privilege escalation due to use-after-free in the Graphics: WebGPU componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
38İzleyin | CVE-2026-100762İstismar yok | Sandbox escape due to use-after-free in the DOM: Content Processes componentmozilla · firefox · CWE-416 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
36İzleyin | CVE-2026-100763İstismar yok | Incorrect boundary conditions in the Graphics: WebGPU componentmozilla · firefox · CWE-119 | Kritik9,1 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100764İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU componentmozilla · firefox · CWE-119 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100765İstismar yok | Use-after-free in the JavaScript: WebAssembly componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100767İstismar yok | Use-after-free in the Networking: Cache componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100768İstismar yok | Use-after-free in the Graphics: WebGPU componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100769İstismar yok | Use-after-free in the JavaScript: WebAssembly componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-100770İstismar yok | Sandbox escape due to use-after-free in the DOM: Content Processes componentmozilla · firefox · CWE-416 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
32İzleyin | CVE-2026-100771İstismar yok | Undefined behavior in the DOM: Streams componentmozilla · firefox · CWE-758 | Yüksek8,1 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100772İstismar yok | Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100773İstismar yok | Use-after-free in the Storage: IndexedDB componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100774İstismar yok | Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-100775İstismar yok | Sandbox escape in the Graphics componentmozilla · firefox · CWE-693 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100776İstismar yok | Use-after-free in the JavaScript: WebAssembly componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100777İstismar yok | Use-after-free in the Graphics: Canvas2D componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-100778İstismar yok | Sandbox escape due to use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100779İstismar yok | Use-after-free in the XSLT componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100780İstismar yok | Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-100781İstismar yok | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentmozilla · firefox · CWE-119 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100782İstismar yok | Privilege escalation due to incorrect boundary conditions in the Graphics componentmozilla · firefox · CWE-119 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100784İstismar yok | Use-after-free in the Layout: Text and Fonts componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100785İstismar yok | Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-100786İstismar yok | Sandbox escape due to use-after-free in the Graphics componentmozilla · firefox · CWE-416 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
38İzleyin | CVE-2026-100787İstismar yok | Sandbox escape in the XUL componentmozilla · firefox · CWE-20 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
39İzleyin | CVE-2026-100788İstismar yok | Invalid pointer in the JavaScript: WebAssembly componentmozilla · firefox · CWE-824 | Kritik9,8 | — | %0,4 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100789İstismar yok | Use-after-free in the Graphics: Canvas2D componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100790İstismar yok | Use-after-free in the XSLT componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100791İstismar yok | Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Eyl 2026 |
28İzleyin | CVE-2026-100792İstismar yok | JIT miscompilation in the JavaScript: WebAssembly componentmozilla · firefox · CWE-843 | Yüksek7,1 | — | %0,2 | 29 Eyl 2026 |
38İzleyin | CVE-2026-100794İstismar yok | Sandbox escape due to incorrect boundary conditions in the Internationalization componentmozilla · firefox · CWE-119 | Kritik9,6 | — | %0,3 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100796İstismar yok | Use-after-free in the JavaScript: WebAssembly componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
35İzleyin | CVE-2026-100797İstismar yok | Privilege escalation due to use-after-free in the Graphics: WebRender componentmozilla · firefox · CWE-416 | Yüksek8,8 | — | %0,2 | 29 Eyl 2026 |
- CVE-2026-1841431İzleyin
Out-of-bounds write in the ADI MAX32 ADC driver due to incorrect adc_sequence buffer size validation
YüksekCVSS 7,8İstismar yokEPSS %0zephyrproject · zephyr28 Eyl 2026
- CVE-2026-8489529İzleyin
In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base QuicWtSe
YüksekCVSS 7,3İstismar yokEPSS %0facebook · proxygen28 Eyl 2026
- CVE-2026-9109630İzleyin
In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destroy in releases befor
YüksekCVSS 7,5İstismar yokEPSS %0facebook · proxygen28 Eyl 2026
- CVE-2024-4200234İzleyin
Unsafe use of eval() method in ros2 topic hz tool
YüksekCVSS 8,6İstismar yokEPSS %0open source robotics foundation · robot operating system 2 (ros 2)28 Eyl 2026
- CVE-2024-5838628İzleyin
ZoneMinder 1.37.x Path Traversal via files view
YüksekCVSS 7,1İstismar yokEPSS %0zoneminder · zoneminder28 Eyl 2026
- CVE-2026-10109128İzleyin
SiYuan before v3.8.4 SQL Injection via Block Query Embed
YüksekCVSS 7,1İstismar yokEPSS %0siyuan-note · siyuan28 Eyl 2026
- CVE-2026-10228130İzleyin
Nest: Remote process termination via a deeply nested microservice message pattern
YüksekCVSS 7,5İstismar yokEPSS %0nestjs · nest28 Eyl 2026
- CVE-2026-10229633İzleyin
ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response
YüksekCVSS 8,3İstismar yokEPSS %0zoneminder · zoneminder28 Eyl 2026
- CVE-2026-10126035İzleyin
Ziroom ZHOME A0101 firstLogin command injection
YüksekCVSS 8,5İstismar yokEPSS %2ziroom · zhome a010128 Eyl 2026
- CVE-2026-10126135İzleyin
Ziroom ZHOME A0101 firstSetup_wifi command injection
YüksekCVSS 8,5İstismar yokEPSS %2ziroom · zhome a010128 Eyl 2026
- CVE-2026-10126235İzleyin
Ziroom ZHOME A0101 set_online_client command injection
YüksekCVSS 8,5İstismar yokEPSS %2ziroom · zhome a010128 Eyl 2026
- CVE-2026-10233436İzleyin
Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection
KritikCVSS 9,1İstismar yokEPSS %0nginxproxymanager · nginx-proxy-manager28 Eyl 2026
- CVE-2026-10233528İzleyin
Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config
YüksekCVSS 7,1İstismar yokEPSS %0nginxproxymanager · nginx-proxy-manager28 Eyl 2026
- CVE-2026-10126335İzleyin
Ziroom ZHOME A0101 set_online_client command injection
YüksekCVSS 8,5İstismar yokEPSS %2ziroom · zhome a010129 Eyl 2026
- CVE-2026-10126435İzleyin
Ziroom ZHOME A0101 set_passwd command injection
YüksekCVSS 8,5İstismar yokEPSS %2ziroom · zhome a010129 Eyl 2026
- CVE-2026-10236137İzleyin
mall4j through 4.0 Missing Authentication in Password Update Endpoint
KritikCVSS 9,3İstismar yokEPSS %0gz-yami · mall4j29 Eyl 2026
- CVE-2026-10236528İzleyin
mall4j through 4.0 Missing Authorization in Admin User Address Endpoints
YüksekCVSS 7,1İstismar yokEPSS %0gz-yami · mall4j29 Eyl 2026
- CVE-2026-10237328İzleyin
GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parameter
YüksekCVSS 7,1İstismar yokEPSS %0gestsup · gestsup29 Eyl 2026
- CVE-2026-10135434İzleyin
FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflow
YüksekCVSS 8,6İstismar yokEPSS %0fast · fac1203r29 Eyl 2026
- CVE-2026-10186029İzleyin
RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management
YüksekCVSS 7,4İstismar yokEPSS %0raspap · raspap-webgui29 Eyl 2026
- CVE-2026-10187830İzleyin
Bitwarden Server 2025.6.0 < 2025.6.0 Authentication Bypass via SSO Identifier Truncation
YüksekCVSS 7,7İstismar yokEPSS %0bitwarden · bitwarden server29 Eyl 2026
- CVE-2026-10224038İzleyin
Netcore NAP930 Network Tools CGI network_tools eval os command injection
KritikCVSS 9,3İstismar yokEPSS %2netcore · nap93029 Eyl 2026
- CVE-2026-9632628İzleyin
HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field
YüksekCVSS 7,2İstismar yokEPSS %0htplugins · ht contact form – drag & drop form builder for wordpress29 Eyl 2026
- CVE-2026-9768528İzleyin
LimeSurvey Community Edition 7.3.0 - Cross-survey object authorization bypass in REST survey patch operations
YüksekCVSS 7,1İstismar yokEPSS %0limesurvey · limesurvey29 Eyl 2026
- CVE-2026-10224728İzleyin
FastAdmin Database Management database.php unnecessary privileges
YüksekCVSS 7,1İstismar yokEPSS %029 Eyl 2026
- CVE-2026-10242236İzleyin
shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token
KritikCVSS 9,2Kavram kanıtıEPSS %029 Eyl 2026
- CVE-2026-9702428İzleyin
Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc
YüksekCVSS 7,1İstismar yokEPSS %0red hat · red hat enterprise linux 1029 Eyl 2026
- CVE-2026-1022618İzleyin
owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization
DüşükCVSS 2,1Kavram kanıtıEPSS %0owen2345 · camaleon cms29 Eyl 2026
- CVE-2026-8615830İzleyin
Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhere
YüksekCVSS 7,7İstismar yokEPSS %0progress software · progress® telerik® fiddler® everywhere29 Eyl 2026
- CVE-2026-10116934İzleyin
In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set specifically crafte
YüksekCVSS 8,7İstismar yokEPSS %0octopus deploy · octopus server29 Eyl 2026
- CVE-2026-8415439İzleyin
Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x
KritikCVSS 9,9İstismar yokEPSS %0dassault systèmes · geovia geospatial data manager29 Eyl 2026
- CVE-2026-9101239İzleyin
Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation
KritikCVSS 9,8İstismar yokEPSS %0apache · karaf29 Eyl 2026
- CVE-2026-9104839İzleyin
Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-create
KritikCVSS 9,8İstismar yokEPSS %0apache · karaf29 Eyl 2026
- CVE-2026-9214235İzleyin
Apache Karaf: Authorization bypass in JMX MBean lifecycle operations
YüksekCVSS 8,8İstismar yokEPSS %0apache · karaf29 Eyl 2026
- CVE-2026-9642837İzleyin
Flowring Agentflow 4.0 - SQL Injection
KritikCVSS 9,3İstismar yokEPSS %0flowring technology corp · agentflow 4.029 Eyl 2026
- CVE-2026-9642937İzleyin
Flowring Agentflow 4.0 - SQL Injection
KritikCVSS 9,3İstismar yokEPSS %0flowring technology corp · agentflow 4.029 Eyl 2026
- CVE-2026-9643034İzleyin
Flowring Agentflow 4.0 - Exposed Dangerous Method or Function
YüksekCVSS 8,7İstismar yokEPSS %0flowring technology corp · agentflow 4.029 Eyl 2026
- CVE-2026-9643137İzleyin
Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Type
KritikCVSS 9,3İstismar yokEPSS %0flowring technology corp · agentflow 4.029 Eyl 2026
- CVE-2026-9644028İzleyin
Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal）
YüksekCVSS 7,1İstismar yokEPSS %0flowring technology corp · agentflow 4.029 Eyl 2026
- CVE-2026-1539036İzleyin
Out-of-bounds write in Das U-Boot
KritikCVSS 9,0İstismar yokEPSS %0denx software engineering · das u-boot29 Eyl 2026
- CVE-2026-1954728İzleyin
Local Privilege Escalation in Ghostscript for Windows
YüksekCVSS 7,0İstismar yokEPSS %0artifex software inc. · ghostscript29 Eyl 2026
- CVE-2026-7671832İzleyin
HPE OneView - Cross-site scripting vulnerability
YüksekCVSS 8,2İstismar yokEPSS %0hewlett packard enterprise · hpe oneview29 Eyl 2026
- CVE-2026-7671932İzleyin
HPE OneView - Cross-site scripting vulnerability
YüksekCVSS 8,2İstismar yokEPSS %0hewlett packard enterprise · hpe oneview29 Eyl 2026
- CVE-2026-739534İzleyin
Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to
YüksekCVSS 8,5İstismar yokEPSS %0hitachi energy · asset suite29 Eyl 2026
- CVE-2026-8473934İzleyin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
YüksekCVSS 8,7İstismar yokEPSS %0gitlab · gitlab29 Eyl 2026
- CVE-2026-806536İzleyin
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticat
KritikCVSS 9,1Kavram kanıtıEPSS %0hitachi energy · rtu500 series cmu firmware29 Eyl 2026
- CVE-2026-806636İzleyin
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated
KritikCVSS 9,1İstismar yokEPSS %0hitachi energy · rtu500 series cmu firmware29 Eyl 2026
- CVE-2026-9538735İzleyin
Heap-based Buffer Overflow in Wireshark
YüksekCVSS 8,8İstismar yokEPSS %0wireshark · wireshark29 Eyl 2026
- CVE-2026-9538932İzleyin
Heap-based Buffer Overflow in Wireshark
YüksekCVSS 8,1İstismar yokEPSS %0wireshark · wireshark29 Eyl 2026
- CVE-2026-9641931İzleyin
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark
YüksekCVSS 7,8İstismar yokEPSS %0wireshark · wireshark29 Eyl 2026
- CVE-2026-9642328İzleyin
Heap-based Buffer Overflow in Wireshark
YüksekCVSS 7,1İstismar yokEPSS %0wireshark · wireshark29 Eyl 2026
- CVE-2026-9550935İzleyin
Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs
YüksekCVSS 8,8İstismar yokEPSS %0qt · qt for mcus29 Eyl 2026
- CVE-2026-10249530İzleyin
Apache XMLSchema: Denial of service through unbounded recursion when resolving schema imports and includes
YüksekCVSS 7,5İstismar yokEPSS %0apache · xmlschema29 Eyl 2026
- CVE-2026-10249630İzleyin
Apache XMLSchema: Denial of service through deeply nested schema structures
YüksekCVSS 7,5İstismar yokEPSS %0apache · xmlschema29 Eyl 2026
- CVE-2026-10249730İzleyin
Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker
YüksekCVSS 7,5İstismar yokEPSS %0apache · xmlschema29 Eyl 2026
- CVE-2026-4187527İzleyin
Cross-Site Request Forgery in admin panel of Quick.Cart
OrtaCVSS 6,9Kavram kanıtıEPSS %0opensolution · quick.cart29 Eyl 2026
- CVE-2026-7359435İzleyin
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Val
YüksekCVSS 8,8İstismar yokEPSS %0dell · policy manager for secure connect gateway29 Eyl 2026
- CVE-2026-7359539İzleyin
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without
KritikCVSS 9,8İstismar yokEPSS %0dell · policy manager for secure connect gateway29 Eyl 2026
- CVE-2026-7359732İzleyin
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability.
YüksekCVSS 8,1İstismar yokEPSS %0dell · policy manager for secure connect gateway29 Eyl 2026
- CVE-2026-8552037İzleyin
Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module
KritikCVSS 9,3Kavram kanıtıEPSS %0mypresta · google merchant center feed29 Eyl 2026
- CVE-2026-8774835İzleyin
Privilege Escalation via Account Takeover in Interprobe's Qorela DC
YüksekCVSS 8,8İstismar yokEPSS %0interprobe information technologies inc. · qorela dc29 Eyl 2026
- CVE-2026-9552028İzleyin
Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages
YüksekCVSS 7,1İstismar yokEPSS %0red hat · red hat enterprise linux 1029 Eyl 2026
- CVE-2026-10075632İzleyin
Incorrect boundary conditions in the Audio/Video: Playback component
YüksekCVSS 8,1İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10075735İzleyin
Use-after-free in the Widget component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10075838İzleyin
Sandbox escape in the DOM: Navigation component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10075932İzleyin
Uninitialized memory in the Storage: Quota Manager component
YüksekCVSS 8,1İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10076038İzleyin
Sandbox escape in the Security: Process Sandboxing component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10076135İzleyin
Privilege escalation due to use-after-free in the Graphics: WebGPU component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10076238İzleyin
Sandbox escape due to use-after-free in the DOM: Content Processes component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10076336İzleyin
Incorrect boundary conditions in the Graphics: WebGPU component
KritikCVSS 9,1İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10076435İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10076535İzleyin
Use-after-free in the JavaScript: WebAssembly component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10076735İzleyin
Use-after-free in the Networking: Cache component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10076835İzleyin
Use-after-free in the Graphics: WebGPU component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10076935İzleyin
Use-after-free in the JavaScript: WebAssembly component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10077038İzleyin
Sandbox escape due to use-after-free in the DOM: Content Processes component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10077132İzleyin
Undefined behavior in the DOM: Streams component
YüksekCVSS 8,1İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10077235İzleyin
Use-after-free in the DOM: Core & HTML component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10077335İzleyin
Use-after-free in the Storage: IndexedDB component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10077435İzleyin
Use-after-free in the DOM: Core & HTML component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10077538İzleyin
Sandbox escape in the Graphics component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10077635İzleyin
Use-after-free in the JavaScript: WebAssembly component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10077735İzleyin
Use-after-free in the Graphics: Canvas2D component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10077838İzleyin
Sandbox escape due to use-after-free in the DOM: Core & HTML component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10077935İzleyin
Use-after-free in the XSLT component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10078035İzleyin
Use-after-free in the DOM: Core & HTML component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10078138İzleyin
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10078235İzleyin
Privilege escalation due to incorrect boundary conditions in the Graphics component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10078435İzleyin
Use-after-free in the Layout: Text and Fonts component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10078535İzleyin
Use-after-free in the DOM: Core & HTML component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10078638İzleyin
Sandbox escape due to use-after-free in the Graphics component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10078738İzleyin
Sandbox escape in the XUL component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10078839İzleyin
Invalid pointer in the JavaScript: WebAssembly component
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10078935İzleyin
Use-after-free in the Graphics: Canvas2D component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10079035İzleyin
Use-after-free in the XSLT component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10079135İzleyin
Use-after-free in the DOM: Core & HTML component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10079228İzleyin
JIT miscompilation in the JavaScript: WebAssembly component
YüksekCVSS 7,1İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10079438İzleyin
Sandbox escape due to incorrect boundary conditions in the Internationalization component
KritikCVSS 9,6İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10079635İzleyin
Use-after-free in the JavaScript: WebAssembly component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026
- CVE-2026-10079735İzleyin
Privilege escalation due to use-after-free in the Graphics: WebRender component
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox29 Eyl 2026