İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları

7.954 kayıt · 32 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 76 / 80

  • CVE-2026-102321
    35İzleyin

    Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome29 Eyl 2026

  • CVE-2026-102323
    35İzleyin

    Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome29 Eyl 2026

  • CVE-2026-102324
    33İzleyin

    Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer proces

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome29 Eyl 2026

  • CVE-2026-102326
    35İzleyin

    Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome29 Eyl 2026

  • CVE-2026-102327
    30İzleyin

    Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the r

    YüksekCVSS 7,5İstismar yokEPSS %0

    google · chrome29 Eyl 2026

  • CVE-2026-102328
    35İzleyin

    Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome29 Eyl 2026

  • CVE-2026-102331
    38İzleyin

    Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary co

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome29 Eyl 2026

  • CVE-2026-102875
    34İzleyin

    VLC media player before 3.0.24 Path Traversal via skins2

    YüksekCVSS 8,5İstismar yokEPSS %0

    videolan · vlc29 Eyl 2026

  • CVE-2026-102876
    34İzleyin

    SurrealDB before 3.3.0 Cross-Tenant Access via Headers

    YüksekCVSS 8,6İstismar yokEPSS %0

    surrealdb · surrealdb29 Eyl 2026

  • CVE-2026-102878
    34İzleyin

    mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

    YüksekCVSS 8,6İstismar yokEPSS %0

    hangwin · mcp-chrome-bridge29 Eyl 2026

  • CVE-2026-39117
    39İzleyin

    An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary

    KritikCVSS 9,8İstismar yokEPSS %0

    29 Eyl 2026

  • CVE-2026-53988
    36İzleyin

    Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints

    KritikCVSS 9,2İstismar yokEPSS %0

    finsys · dockhand29 Eyl 2026

  • CVE-2026-61519
    34İzleyin

    Liberu CRM 0.9.1 < 10.0.0 Broken Access Control via TeamPolicy::addTeamMember()

    YüksekCVSS 8,7İstismar yokEPSS %0

    liberu software · liberu crm29 Eyl 2026

  • CVE-2026-67987
    30İzleyin

    crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions i

    YüksekCVSS 7,5İstismar yokEPSS %0

    29 Eyl 2026

  • CVE-2026-67993
    35İzleyin

    basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credenti

    YüksekCVSS 8,8İstismar yokEPSS %0

    29 Eyl 2026

  • CVE-2026-76721
    39İzleyin

    Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APs

    KritikCVSS 9,8İstismar yokEPSS %0

    hewlett packard enterprise (hpe) · instant on29 Eyl 2026

  • CVE-2026-76722
    39İzleyin

    Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APs

    KritikCVSS 9,8İstismar yokEPSS %0

    hewlett packard enterprise (hpe) · instant on29 Eyl 2026

  • CVE-2026-76723
    38İzleyin

    Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APS

    KritikCVSS 9,6İstismar yokEPSS %0

    hewlett packard enterprise (hpe) · instant on29 Eyl 2026

  • CVE-2026-76724
    38İzleyin

    Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI Protocol

    KritikCVSS 9,6İstismar yokEPSS %1

    hewlett packard enterprise (hpe) · instant on29 Eyl 2026

  • CVE-2026-76725
    38İzleyin

    Authentication Bypass in a Management Protocol of HPE Networking Instant ON APs

    KritikCVSS 9,6İstismar yokEPSS %0

    hewlett packard enterprise (hpe) · instant on29 Eyl 2026

  • CVE-2026-76726
    32İzleyin

    Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint

    YüksekCVSS 8,1İstismar yokEPSS %0

    hewlett packard enterprise (hpe) · instant on29 Eyl 2026

  • CVE-2026-76727
    28İzleyin

    Authenticated Command Injection Vulnerabilities in HPE Networking Instant ON

    YüksekCVSS 7,2İstismar yokEPSS %0

    hewlett packard enterprise (hpe) · instant on29 Eyl 2026

  • CVE-2026-76728
    28İzleyin

    Authenticated Server-Side Request Forgery Leading to Remote Code Execution in HPE Networking Instant ON APs

    YüksekCVSS 7,2İstismar yokEPSS %0

    hewlett packard enterprise (hpe) · instant on29 Eyl 2026

  • CVE-2026-76731
    26İzleyin

    Authentication Bypass in the Captive Portal of HPE Networking Instant On

    OrtaCVSS 6,5İstismar yokEPSS %0

    hewlett packard enterprise (hpe) · instant on29 Eyl 2026

  • CVE-2026-79403
    33İzleyin

    An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint

    YüksekCVSS 8,4İstismar yokEPSS %0

    29 Eyl 2026

  • CVE-2026-79417
    21İzleyin

    Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    29 Eyl 2026

  • CVE-2026-79536
    36İzleyin

    bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component.

    KritikCVSS 9,1İstismar yokEPSS %0

    29 Eyl 2026

  • CVE-2026-79537
    36İzleyin

    metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP transport session dispatch.

    KritikCVSS 9,1İstismar yokEPSS %0

    29 Eyl 2026

  • CVE-2026-79538
    39İzleyin

    metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/s

    KritikCVSS 9,8İstismar yokEPSS %0

    29 Eyl 2026

  • CVE-2026-94953
    35İzleyin

    A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030.

    YüksekCVSS 8,8İstismar yokEPSS %0

    29 Eyl 2026

  • CVE-2026-96274
    33İzleyin

    Uncaught exception in Baicells Nova 430H

    YüksekCVSS 8,3İstismar yokEPSS %0

    baicells · nova 430h enodeb (model pbs3101sh)29 Eyl 2026

  • CVE-2026-102253
    34İzleyin

    iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    esnet · iperf329 Eyl 2026

  • CVE-2026-102925
    31İzleyin

    virtualenv bash and fish activation scripts execute commands embedded in paths

    YüksekCVSS 7,8İstismar yokEPSS %0

    pypa · virtualenv29 Eyl 2026

  • CVE-2026-102930
    30İzleyin

    virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

    YüksekCVSS 7,7İstismar yokEPSS %0

    pypa · virtualenv29 Eyl 2026

  • CVE-2026-102937
    29İzleyin

    virtualenv: Command injection via --prompt in activate.bat (batch activator)

    YüksekCVSS 7,3İstismar yokEPSS %0

    pypa · virtualenv29 Eyl 2026

  • CVE-2026-93853
    28İzleyin

    Barman snapshot backup deletion trusts unverified backup catalog metadata

    YüksekCVSS 7,2İstismar yokEPSS %0

    enterprisedb · barman29 Eyl 2026

  • CVE-2026-94204
    34İzleyin

    Incorrect Permission Assignment for Critical Resource in Viidure Dashcam Android Application

    YüksekCVSS 8,7İstismar yokEPSS %0

    viidure · dashcam android application29 Eyl 2026

  • CVE-2026-94952
    39İzleyin

    A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030.

    KritikCVSS 9,8İstismar yokEPSS %0

    29 Eyl 2026

  • CVE-2026-96587
    40Planlayın

    Use of Hard-coded Credentials in Viidure Dashcam Android Application

    KritikCVSS 10,0İstismar yokEPSS %0

    viidure · dashcam android application29 Eyl 2026

  • CVE-2026-63713
    34İzleyin

    Toptech TMS7 and TopHAT SQL Injection

    YüksekCVSS 8,5İstismar yokEPSS %0

    toptech systems · tms729 Eyl 2026

  • CVE-2026-68068
    34İzleyin

    Toptech TMS7 and TopHAT SQL Injection

    YüksekCVSS 8,5İstismar yokEPSS %0

    toptech systems · tms729 Eyl 2026

  • CVE-2026-68954
    34İzleyin

    Toptech TMS7 and TopHAT SQL Injection

    YüksekCVSS 8,5İstismar yokEPSS %0

    toptech systems · tms729 Eyl 2026

  • CVE-2026-70356
    37İzleyin

    Toptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous Type

    KritikCVSS 9,4İstismar yokEPSS %0

    toptech systems · tms729 Eyl 2026

  • CVE-2026-71302
    30İzleyin

    Toptech TMS7 and TopHAT Session Fixation

    YüksekCVSS 7,5İstismar yokEPSS %0

    toptech systems · tms729 Eyl 2026

  • CVE-2026-71379
    40Planlayın

    Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties

    KritikCVSS 10,0İstismar yokEPSS %0

    toptech systems · tms729 Eyl 2026

  • CVE-2026-71971
    35İzleyin

    U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly

    YüksekCVSS 8,8İstismar yokEPSS %0

    u-boot · u-boot29 Eyl 2026

  • CVE-2026-72507
    34İzleyin

    Toptech TMS7 and TopHAT SQL Injection

    YüksekCVSS 8,5İstismar yokEPSS %0

    toptech systems · tms729 Eyl 2026

  • CVE-2026-72510
    34İzleyin

    Toptech TMS7 and TopHAT SQL Injection

    YüksekCVSS 8,5İstismar yokEPSS %0

    toptech systems · tms729 Eyl 2026

  • CVE-2026-74220
    35İzleyin

    U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply

    YüksekCVSS 8,8İstismar yokEPSS %0

    u-boot · u-boot29 Eyl 2026

  • CVE-2026-74221
    35İzleyin

    U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK

    YüksekCVSS 8,8İstismar yokEPSS %0

    u-boot · u-boot29 Eyl 2026

  • CVE-2026-74222
    35İzleyin

    U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback

    YüksekCVSS 8,8İstismar yokEPSS %0

    u-boot · u-boot29 Eyl 2026

  • CVE-2026-74225
    28İzleyin

    U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6

    YüksekCVSS 7,1İstismar yokEPSS %0

    u-boot · u-boot29 Eyl 2026

  • CVE-2026-84409
    30İzleyin

    Lantronix G520 Series Cellular Gateway Cross-site Scripting

    YüksekCVSS 7,7İstismar yokEPSS %0

    lantronix · g520 series29 Eyl 2026

  • CVE-2026-91191
    30İzleyin

    Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature

    YüksekCVSS 7,7İstismar yokEPSS %0

    lantronix · g520 series29 Eyl 2026

  • CVE-2026-102792
    35İzleyin

    Ziroom ZHOME A0101 set_syslog command injection

    YüksekCVSS 8,5İstismar yokEPSS %3

    ziroom · zhome a010129 Eyl 2026

  • CVE-2026-103040
    37İzleyin

    LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service

    KritikCVSS 9,3İstismar yokEPSS %0

    modeltc · lightllm29 Eyl 2026

  • CVE-2026-103041
    37İzleyin

    LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service

    KritikCVSS 9,3İstismar yokEPSS %0

    modeltc · lightllm29 Eyl 2026

  • CVE-2026-103042
    34İzleyin

    LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value

    YüksekCVSS 8,7İstismar yokEPSS %0

    modeltc · lightllm29 Eyl 2026

  • CVE-2026-103043
    34İzleyin

    anchorme through 3.0.8 Regular Expression Denial of Service

    YüksekCVSS 8,7İstismar yokEPSS %0

    alexcorvi · anchorme29 Eyl 2026

  • CVE-2026-103044
    39İzleyin

    EasyTimeline should not serve image maps as application/xml

    KritikCVSS 9,8İstismar yokEPSS %0

    the wikimedia foundation · mediawiki - easytimeline extension29 Eyl 2026

  • CVE-2026-102793
    35İzleyin

    Ziroom ZHOME A0101 set_time_zone command injection

    YüksekCVSS 8,5İstismar yokEPSS %2

    ziroom · zhome a010130 Eyl 2026

  • CVE-2026-102794
    35İzleyin

    Ziroom ZHOME A0101 ping command injection

    YüksekCVSS 8,5İstismar yokEPSS %2

    ziroom · zhome a010130 Eyl 2026

  • CVE-2026-13046
    30İzleyin

    Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution

    YüksekCVSS 7,5İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-13224
    32İzleyin

    Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read

    YüksekCVSS 8,2İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-18105
    28İzleyin

    Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service

    YüksekCVSS 7,1İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-18145
    34İzleyin

    Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution

    YüksekCVSS 8,6İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-81433
    34İzleyin

    Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution

    YüksekCVSS 8,7İstismar yokEPSS %0

    watchguard · fireware os30 Eyl 2026

  • CVE-2026-86101
    28İzleyin

    Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access

    YüksekCVSS 7,2İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-86104
    34İzleyin

    Fireware OS Resource Exhaustion in Login Process Allows Denial of Service

    YüksekCVSS 8,7İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-86128
    32İzleyin

    Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service

    YüksekCVSS 8,2İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-86131
    36İzleyin

    Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution

    KritikCVSS 9,2İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-86132
    32İzleyin

    Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service

    YüksekCVSS 8,2İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-86133
    32İzleyin

    Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service

    YüksekCVSS 8,2İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-86136
    28İzleyin

    Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A

    YüksekCVSS 7,1İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-90441
    28İzleyin

    Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B

    YüksekCVSS 7,1İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-103054
    28İzleyin

    AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP

    YüksekCVSS 7,1İstismar yokEPSS %0

    beenuar · aisoc30 Eyl 2026

  • CVE-2026-103055
    34İzleyin

    AiSOC 7.5.0 before 12.0.0 Authentication Bypass via Hard-coded JWT Secret

    YüksekCVSS 8,7İstismar yokEPSS %0

    beenuar · aisoc30 Eyl 2026

  • CVE-2026-103056
    37İzleyin

    AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR

    KritikCVSS 9,4İstismar yokEPSS %1

    beenuar · aisoc30 Eyl 2026

  • CVE-2026-103087
    28İzleyin

    Uncontrolled recursion in the Gosub browser engine (gosub-engine) through 0.1.0 and main before commit 46868b3 allows a remote attacker to c

    YüksekCVSS 7,1İstismar yokEPSS %0

    gosub-io · gosub-engine30 Eyl 2026

  • CVE-2026-103088
    30İzleyin

    Handlebars.java before 4.5.5 allows directory traversal.

    YüksekCVSS 7,5İstismar yokEPSS %0

    jknack · handlebars.java30 Eyl 2026

  • CVE-2026-103099
    30İzleyin

    Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a s

    YüksekCVSS 7,5İstismar yokEPSS %0

    pexip · pexip infinity30 Eyl 2026

  • CVE-2026-103100
    30İzleyin

    Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trig

    YüksekCVSS 7,5İstismar yokEPSS %0

    pexip · pexip infinity30 Eyl 2026

  • CVE-2026-103101
    30İzleyin

    Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to

    YüksekCVSS 7,5İstismar yokEPSS %0

    pexip · pexip infinity30 Eyl 2026

  • CVE-2026-103102
    34İzleyin

    Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigge

    YüksekCVSS 8,6İstismar yokEPSS %0

    pexip · pexip infinity30 Eyl 2026

  • CVE-2026-103104
    30İzleyin

    Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a re

    YüksekCVSS 7,5İstismar yokEPSS %0

    pexip · pexip infinity30 Eyl 2026

  • CVE-2026-103105
    35İzleyin

    Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attac

    YüksekCVSS 8,8İstismar yokEPSS %0

    pexip · pexip infinity30 Eyl 2026

  • CVE-2026-103106
    31İzleyin

    Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service th

    YüksekCVSS 7,8İstismar yokEPSS %0

    pexip · pexip infinity30 Eyl 2026

  • CVE-2026-103108
    30İzleyin

    Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a re

    YüksekCVSS 7,5İstismar yokEPSS %0

    pexip · pexip infinity30 Eyl 2026

  • CVE-2026-103109
    37İzleyin

    Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a rem

    KritikCVSS 9,4İstismar yokEPSS %0

    pexip · pexip infinity30 Eyl 2026

  • CVE-2026-96649
    28İzleyin

    Frontend Post Submission Manager Lite <= 1.3.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via post_content Parameter (data-label DOM Sink)

    YüksekCVSS 7,2İstismar yokEPSS %0

    wpshuffle · frontend post submission manager lite – guest post and frontend submission forms30 Eyl 2026

  • CVE-2026-102911
    35İzleyin

    zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection

    YüksekCVSS 8,6İstismar yokEPSS %1

    zosmaai · pi-llm-wiki30 Eyl 2026

  • CVE-2026-103110
    39İzleyin

    Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code

    KritikCVSS 9,8İstismar yokEPSS %0

    pexip · pexip infinity30 Eyl 2026

  • CVE-2026-86134
    34İzleyin

    Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service

    YüksekCVSS 8,7İstismar yokEPSS %0

    watchguard · fireware30 Eyl 2026

  • CVE-2026-103111
    30İzleyin

    PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with ar

    YüksekCVSS 7,6İstismar yokEPSS %0

    pcre · pcre230 Eyl 2026

  • CVE-2026-75823
    29İzleyin

    WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption

    YüksekCVSS 7,4İstismar yokEPSS %0

    unknown · user frontend30 Eyl 2026

  • CVE-2026-75873
    39İzleyin

    Zella Theme < 2.6.3 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · zella theme30 Eyl 2026

  • CVE-2026-85573
    35İzleyin

    All in One Files Upload for WooCommerce 2.0.3 - 2.0.16 - Unauthenticated Stored XSS via SVG Upload

    YüksekCVSS 8,8İstismar yokEPSS %0

    unknown · all in one files upload30 Eyl 2026

  • CVE-2026-88797
    28İzleyin

    Vayu X < 1.0.6 - Subscriber+ Arbitrary WordPress.org Plugin Installation and Activation

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · vayu x30 Eyl 2026

  • CVE-2026-89193
    30İzleyin

    Robin Image Optimizer 2.0.0 - 2.0.7 - Unauthenticated Stored XSS via WebP URL Delivery HTML Parser

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · robin image optimizer30 Eyl 2026

  • CVE-2026-91832
    28İzleyin

    WP Mobile Menu 2.7.4 - 2.8.8 - Stored XSS via CSRF

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · wp mobile menu30 Eyl 2026