Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.954 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 8 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2026-85649Kavram kanıtı | (Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root uchewkeanho · software-actualizer · CWE-252 | Yüksek7,9 | — | %0,2 | 4 Eyl 2026 |
30İzleyin | CVE-2026-12483İstismar yok | LearnDash LMS <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload via Assignment Upload Handlerstellarwp · learndash lms · CWE-434 | Yüksek7,5 | — | %0,3 | 4 Eyl 2026 |
35İzleyin | CVE-2026-52691İstismar yok | Apache Griffin Hive Metastore Module: SQL Injection Vulnerability in Hive Metastore Moduleapache software foundation · apache griffin hive metastore module · CWE-89 | Yüksek8,8 | — | %0,4 | 4 Eyl 2026 |
24İzleyin | CVE-2026-77818Kavram kanıtı | Reflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation Systemyordam information technology consulting, training and electronic systems industry and trade inc. · library information and document automation program · CWE-79 | Orta6,1 | — | %0,2 | 4 Eyl 2026 |
30İzleyin | CVE-2026-19205İstismar yok | User Enumeration in GastroMenum's GastroMenum Web Panelgastromenum · gastromenum web panel · CWE-204 | Yüksek7,5 | — | %0,2 | 4 Eyl 2026 |
34İzleyin | CVE-2026-6958İstismar yok | Acunetix 25.11.251107123 Local Privilege Escalation via wvsc.exeinvicti security corp. · acunetix · CWE-427 | Yüksek8,5 | — | %0,1 | 4 Eyl 2026 |
30İzleyin | CVE-2026-81832İstismar yok | IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEsibm · app connect enterprise · CWE-611 | Yüksek7,7 | — | %0,3 | 4 Eyl 2026 |
32İzleyin | CVE-2026-82728İstismar yok | Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoSelixir-mint · mint · CWE-770 | Yüksek8,2 | — | %0,5 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85606İstismar yok | firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePathfirecrawl · firecrawl-mcp-server · CWE-22 | Yüksek8,7 | — | %0,8 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85607İstismar yok | Blinko 1.8.7 Cross-User AI Conversation Read and Write via message tRPC Routerblinkospace · blinko · CWE-639 | Yüksek8,7 | — | %0,6 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85608İstismar yok | Douyin_TikTok_Download_API 4.1.2 SSRF via url parameterevil0ctal · douyin_tiktok_download_api · CWE-918 | Yüksek8,7 | — | %0,4 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85618İstismar yok | ConvertX 0.17.0 Arbitrary File Read via LaTeX Input Directivesc4illin · convertx · CWE-22 | Yüksek7,1 | — | %0,4 | 4 Eyl 2026 |
30İzleyin | CVE-2026-85619İstismar yok | AppFlowy-Cloud 0.9.64 Cross-Workspace Collab Access via HTTP APIappflowy-io · appflowy-cloud · CWE-863 | Yüksek7,7 | — | %0,5 | 4 Eyl 2026 |
36İzleyin | CVE-2026-85620İstismar yok | Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Functioncrystaldba · postgres-mcp · CWE-863 | Kritik9,2 | — | %0,5 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85623İstismar yok | goose 1.37.0 Arbitrary Command Execution via Recipe Extensionsaaif-goose · goose · CWE-94 | Yüksek8,7 | — | %0,5 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85624İstismar yok | Blinko 1.8.7 Cross-User Private Note Disclosure via noteReferenceListblinkospace · blinko · CWE-639 | Yüksek7,1 | — | %0,4 | 4 Eyl 2026 |
36İzleyin | CVE-2026-85625Kavram kanıtı | sift 17.1.3 Prototype Pollution Remote Code Execution via $wherecrcn · sift.js · CWE-1321 | Kritik9,2 | — | %0,7 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85626İstismar yok | git-mcp-server 2.15.1 Argument Injection via Git Ref Parameterscyanheads · git-mcp-server · CWE-88 | Yüksek8,7 | — | %0,4 | 4 Eyl 2026 |
33İzleyin | CVE-2026-85651İstismar yok | Trigger.dev before 4.5.2 Unauthorized Environment Access via Run Replaytriggerdotdev · trigger.dev · CWE-862 | Yüksek8,4 | — | %0,4 | 4 Eyl 2026 |
36İzleyin | CVE-2026-85660İstismar yok | cli-mcp-server 0.2.5 Command Allowlist Bypass via Shell Substitutionmladensu · cli-mcp-server · CWE-78 | Kritik9,2 | — | %0,6 | 4 Eyl 2026 |
37İzleyin | CVE-2026-85661İstismar yok | excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio modeharis-musa · excel-mcp-server · CWE-22 | Kritik9,3 | — | %0,6 | 4 Eyl 2026 |
37İzleyin | CVE-2026-85663İstismar yok | Aim 3.29.1 Remote Code Execution via Unauthenticated Method Dispatchaimhubio · aim · CWE-306 | Kritik9,3 | — | %0,7 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85664İstismar yok | Chroma 1.5.9 Unbounded HNSW Index Parameters Memory Exhaustionchroma-core · chroma · CWE-770 | Yüksek8,7 | — | %0,6 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85665İstismar yok | Bruno through 4.1.0 Arbitrary File Read via Unconfined Body File Pathusebruno · bruno · CWE-22 | Yüksek7,1 | — | %0,7 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85666İstismar yok | ogx 1.3.1 Server-Side Request Forgery via MCP tool server_urlogx-ai · ogx · CWE-918 | Yüksek8,7 | — | %0,7 | 4 Eyl 2026 |
37İzleyin | CVE-2026-85667İstismar yok | xiaobei through 5.5.2 Unauthenticated Webhook Message Injectionteamwiseflow · xiaobei · CWE-306 | Kritik9,3 | — | %0,6 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85668İstismar yok | Xinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-registerxorbitsai · inference · CWE-73 | Yüksek8,7 | — | %0,6 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85669İstismar yok | potpie through 2.0.0 Missing Ownership Check via code-changes syncpotpie-ai · potpie · CWE-862 | Yüksek7,1 | — | %0,3 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85670İstismar yok | tokenizers BpeBuilder Buffer Overflow via merge tokenhuggingface · tokenizers · CWE-787 | Yüksek7,1 | — | %0,4 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85671İstismar yok | QAnything 2.0.0 Unauthenticated Cross-User File Disclosurenetease-youdao · qanything · CWE-306 | Yüksek8,7 | — | %0,6 | 4 Eyl 2026 |
38İzleyin | CVE-2026-85672İstismar yok | zerox 1.1.20 OS Command Injection via Document URL File Extensiongetomni-ai · zerox · CWE-78 | Kritik9,3 | — | %2,5 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85673İstismar yok | LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebindinghiyouga · llamafactory · CWE-918 | Yüksek8,7 | — | %0,5 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85674İstismar yok | aider 0.86.2 Remote Code Execution via .aider.conf.ymlaider-ai · aider · CWE-94 | Yüksek8,5 | — | %0,2 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85675İstismar yok | OWL DocumentProcessingToolkit Server-Side Request Forgery via URL Fetchingcamel-ai · owl · CWE-918 | Yüksek8,7 | — | %0,4 | 4 Eyl 2026 |
35İzleyin | CVE-2026-85684İstismar yok | marker through 2.0.0 Path Traversal via upload filenamedatalab-to · marker · CWE-73 | Yüksek8,8 | — | %1,1 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85685İstismar yok | AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skillagentscope-ai · agentscope · CWE-22 | Yüksek8,7 | — | %0,5 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85686İstismar yok | ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLsmodelscope · ms-swift · CWE-918 | Yüksek8,7 | — | %0,4 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85687İstismar yok | surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot serverdatalab-to · surya · CWE-73 | Yüksek8,7 | — | %0,5 | 4 Eyl 2026 |
38İzleyin | CVE-2026-85688Kavram kanıtı | TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designerten-framework · ten-framework · CWE-306 | Kritik9,3 | — | %2,6 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85689İstismar yok | llmware 0.4.6 SQL Injection via unescaped filter valuesllmware-ai · llmware · CWE-89 | Yüksek7,1 | — | %0,4 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85690İstismar yok | Plandex 2.2.1 Path Traversal via ApplyFilesplandex-ai · plandex · CWE-22 | Yüksek8,5 | — | %0,2 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85691İstismar yok | MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/urlthe-vibe-company · megaparse · CWE-918 | Yüksek8,7 | — | %0,5 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85692İstismar yok | Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encodingccfos · nightingale · CWE-918 | Yüksek7,1 | — | %0,4 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85693İstismar yok | Chatbot UI Cross-User Private File Content Disclosure via Retrieval APImckaywrigley · chatbot-ui · CWE-639 | Yüksek7,1 | — | %0,4 | 4 Eyl 2026 |
36İzleyin | CVE-2026-85694İstismar yok | LaVague 0.2.35 Remote Code Execution via eval extractionlavague-ai · lavague · CWE-94 | Kritik9,2 | — | %0,9 | 4 Eyl 2026 |
37İzleyin | CVE-2026-85695İstismar yok | FastChat Unauthenticated Worker Registration SSRF and Model Spoofinglm-sys · fastchat · CWE-306 | Kritik9,3 | — | %0,7 | 4 Eyl 2026 |
38İzleyin | CVE-2026-85696İstismar yok | SadTalker OS Command Injection via Audio Filenameopentalker · sadtalker · CWE-78 | Kritik9,3 | — | %2,5 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85697İstismar yok | Documenso 2.17.0 PDF Route Ignores Document Visibilitydocumenso · documenso · CWE-863 | Yüksek7,1 | — | %0,4 | 4 Eyl 2026 |
34İzleyin | CVE-2026-85699İstismar yok | jina-ai reader server-side request forgery via redirect validation bypassjina-ai · reader · CWE-918 | Yüksek8,7 | — | %0,4 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85700İstismar yok | Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpointsonyx-dot-app · onyx · CWE-522 | Yüksek7,1 | — | %0,5 | 4 Eyl 2026 |
21İzleyin | CVE-2022-35497Kavram kanıtı | In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reCWE-79 | Orta5,4 | — | %0,2 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85578İstismar yok | SiYuan through 3.8.1 Authorization Bypass via getFilesiyuan-note · siyuan · CWE-862 | Yüksek7,1 | — | %0,3 | 4 Eyl 2026 |
28İzleyin | CVE-2022-35499Kavram kanıtı | In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary pCWE-79 | Yüksek7,1 | — | %0,2 | 4 Eyl 2026 |
39İzleyin | CVE-2026-18658İstismar yok | IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressedibm · operational decision manager · CWE-89 | Kritik9,8 | — | %0,4 | 4 Eyl 2026 |
30İzleyin | CVE-2026-18905İstismar yok | IBM ContextForge MCP Gateway is affected by server-side request forgery via DNS TOCTOU at tool invocationibm · contextforge · CWE-918 | Yüksek7,7 | — | %0,3 | 4 Eyl 2026 |
38İzleyin | CVE-2026-19274İstismar yok | IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container imageibm · observability with instana (agent) · CWE-284 | Kritik9,6 | — | %0,2 | 4 Eyl 2026 |
30İzleyin | CVE-2026-19283İstismar yok | IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container imageibm · observability with instana (agent) · CWE-863 | Yüksek7,7 | — | %0,3 | 4 Eyl 2026 |
35İzleyin | CVE-2026-19298İstismar yok | Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpointlangflow · langflow · CWE-94 | Yüksek8,8 | — | %0,5 | 4 Eyl 2026 |
30İzleyin | CVE-2026-19300İstismar yok | Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flowslangflow · langflow · CWE-200 | Yüksek7,5 | — | %0,3 | 4 Eyl 2026 |
28İzleyin | CVE-2026-85594İstismar yok | Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middlewaretraefik · traefik · CWE-639 | Yüksek7,0 | — | %0,4 | 4 Eyl 2026 |
37İzleyin | CVE-2026-85595İstismar yok | Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuthtraefik · traefik · CWE-287 | Kritik9,3 | — | %0,6 | 4 Eyl 2026 |
32İzleyin | CVE-2026-85596İstismar yok | Traefik v3.7 Authentication Bypass via TLS Option Conflicttraefik · traefik · CWE-287 | Yüksek8,2 | — | %0,4 | 4 Eyl 2026 |
32İzleyin | CVE-2026-85597İstismar yok | Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflicttraefik · traefik · CWE-863 | Yüksek8,2 | — | %0,3 | 4 Eyl 2026 |
32İzleyin | CVE-2026-19303İstismar yok | Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing componentslangflow · langflow · CWE-22 | Yüksek8,1 | — | %0,3 | 4 Eyl 2026 |
30İzleyin | CVE-2026-19305İstismar yok | Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple componentslangflow · langflow · CWE-918 | Yüksek7,5 | — | %0,2 | 4 Eyl 2026 |
30İzleyin | CVE-2026-19306İstismar yok | Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor componentslangflow · langflow · CWE-22 | Yüksek7,7 | — | %0,4 | 4 Eyl 2026 |
37İzleyin | CVE-2026-44402Kavram kanıtı | Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgivoltronic power · snmp web pro · CWE-434 | Kritik9,3 | — | %1,3 | 4 Eyl 2026 |
36İzleyin | CVE-2026-75160İstismar yok | An issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgiCWE-269 | Kritik9,1 | — | %0,6 | 4 Eyl 2026 |
35İzleyin | CVE-2026-75161İstismar yok | An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated uCWE-77 | Yüksek8,8 | — | %0,7 | 4 Eyl 2026 |
35İzleyin | CVE-2026-75166İstismar yok | Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows the low-privileged service user to execute /usr/CWE-269 | Yüksek8,8 | — | %0,7 | 4 Eyl 2026 |
35İzleyin | CVE-2026-75169İstismar yok | An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authentiCWE-434 | Yüksek8,8 | — | %0,7 | 4 Eyl 2026 |
39İzleyin | CVE-2026-75171İstismar yok | An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component.CWE-384 | Kritik9,8 | — | %0,6 | 4 Eyl 2026 |
39İzleyin | CVE-2026-75429Kavram kanıtı | PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the SeCWE-287 | Kritik9,8 | — | %0,9 | 4 Eyl 2026 |
36İzleyin | CVE-2026-75431Kavram kanıtı | PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-based authentication.CWE-321 | Kritik9,1 | — | %1,0 | 4 Eyl 2026 |
38İzleyin | CVE-2026-77822İstismar yok | IBM ContextForge MCP Gateway is affected by server-side request forgery (DNS rebinding) via the A2A agent invocation endpointibm · contextforge · CWE-918 | Kritik9,6 | — | %0,3 | 4 Eyl 2026 |
30İzleyin | CVE-2026-78543İstismar yok | IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEsibm · app connect enterprise · CWE-835 | Yüksek7,5 | — | %0,5 | 4 Eyl 2026 |
34İzleyin | CVE-2026-79418İstismar yok | EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality.emxtecnologia · gestao x business suite · CWE-79 | Yüksek8,7 | — | %0,3 | 4 Eyl 2026 |
34İzleyin | CVE-2026-79419İstismar yok | A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier.emxtecnologia · gestao x business suite · CWE-79 | Yüksek8,7 | — | %0,3 | 4 Eyl 2026 |
32İzleyin | CVE-2026-85730İstismar yok | smol-toml: Denial of Service via malformed TOML documentssquirrelchat · smol-toml · CWE-606 | Yüksek8,2 | — | %0,5 | 4 Eyl 2026 |
30İzleyin | CVE-2026-13297İstismar yok | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-1336 | Yüksek7,5 | — | %0,2 | 4 Eyl 2026 |
31İzleyin | CVE-2026-16826İstismar yok | IBM i is Affected By Multiple Vulnerabilities in Debug Serveribm · i · CWE-78 | Yüksek7,8 | — | %0,1 | 4 Eyl 2026 |
36İzleyin | CVE-2026-17057İstismar yok | IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]ibm · i · CWE-306 | Kritik9,1 | — | %0,3 | 4 Eyl 2026 |
36İzleyin | CVE-2026-17207İstismar yok | IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]ibm · i · CWE-787 | Kritik9,1 | — | %0,3 | 4 Eyl 2026 |
30İzleyin | CVE-2026-17255İstismar yok | IBM i is Affected By Denial of Service Vulnerability []ibm · i · CWE-787 | Yüksek7,5 | — | %0,4 | 4 Eyl 2026 |
30İzleyin | CVE-2026-17470İstismar yok | IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]ibm · i · CWE-787 | Yüksek7,5 | — | %0,3 | 4 Eyl 2026 |
31İzleyin | CVE-2026-17499İstismar yok | IBM i is Affected By Multiple Vulnerabilities in Debug Serveribm · i · CWE-78 | Yüksek7,8 | — | %0,1 | 4 Eyl 2026 |
28İzleyin | CVE-2026-17627İstismar yok | Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpointlangflow · langflow · CWE-639 | Yüksek7,1 | — | %0,1 | 4 Eyl 2026 |
30İzleyin | CVE-2026-18175İstismar yok | IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [, ]ibm · i · CWE-285 | Yüksek7,5 | — | %0,1 | 4 Eyl 2026 |
39İzleyin | CVE-2026-18221İstismar yok | IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [, ]ibm · i · CWE-287 | Kritik9,8 | — | %0,3 | 4 Eyl 2026 |
35İzleyin | CVE-2026-18341İstismar yok | IBM i is Affected By Buffer Overflow Vulnerability []ibm · i · CWE-122 | Yüksek8,8 | — | %0,2 | 4 Eyl 2026 |
35İzleyin | CVE-2026-18486İstismar yok | IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter executionibm · contextforge · CWE-200 | Yüksek8,8 | — | %0,3 | 4 Eyl 2026 |
29İzleyin | CVE-2026-18489İstismar yok | IBM ContextForge Translate is affected by cross-client credential context confusionibm · contextforge · CWE-488 | Yüksek7,4 | — | %0,2 | 4 Eyl 2026 |
39İzleyin | CVE-2026-31020İstismar yok | In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define prompt content used during chatbotCWE-94 | Kritik9,8 | — | %1,0 | 4 Eyl 2026 |
39İzleyin | CVE-2026-75430Kavram kanıtı | PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication on the CWE-306 | Kritik9,8 | — | %1,2 | 4 Eyl 2026 |
39İzleyin | CVE-2026-78745Kavram kanıtı | An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to execute arbitrary code via the Android Debug BrCWE-284 | Kritik9,8 | — | %0,7 | 4 Eyl 2026 |
32İzleyin | CVE-2026-84933İstismar yok | undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared cachesnodejs · undici · CWE-200 | Yüksek8,2 | — | %0,3 | 4 Eyl 2026 |
36İzleyin | CVE-2026-84961İstismar yok | undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPoolnodejs · undici · CWE-295 | Kritik9,1 | — | %0,1 | 4 Eyl 2026 |
30İzleyin | CVE-2026-85014İstismar yok | undici vulnerable to Denial of Service via WebSocketStream unclean closenodejs · undici · CWE-248 | Yüksek7,5 | — | %0,3 | 4 Eyl 2026 |
29İzleyin | CVE-2026-85152İstismar yok | undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptorsnodejs · undici · CWE-346 | Yüksek7,4 | — | %0,1 | 4 Eyl 2026 |
30İzleyin | CVE-2021-44319İstismar yok | Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service.CWE-400 | Yüksek7,5 | — | %0,5 | 4 Eyl 2026 |
- CVE-2026-8564931İzleyin
(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root u
YüksekCVSS 7,9Kavram kanıtıEPSS %0chewkeanho · software-actualizer4 Eyl 2026
- CVE-2026-1248330İzleyin
LearnDash LMS <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload via Assignment Upload Handler
YüksekCVSS 7,5İstismar yokEPSS %0stellarwp · learndash lms4 Eyl 2026
- CVE-2026-5269135İzleyin
Apache Griffin Hive Metastore Module: SQL Injection Vulnerability in Hive Metastore Module
YüksekCVSS 8,8İstismar yokEPSS %0apache software foundation · apache griffin hive metastore module4 Eyl 2026
- CVE-2026-7781824İzleyin
Reflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation System
OrtaCVSS 6,1Kavram kanıtıEPSS %0yordam information technology consulting, training and electronic systems industry and trade inc. · library information and document automation program4 Eyl 2026
- CVE-2026-1920530İzleyin
User Enumeration in GastroMenum's GastroMenum Web Panel
YüksekCVSS 7,5İstismar yokEPSS %0gastromenum · gastromenum web panel4 Eyl 2026
- CVE-2026-695834İzleyin
Acunetix 25.11.251107123 Local Privilege Escalation via wvsc.exe
YüksekCVSS 8,5İstismar yokEPSS %0invicti security corp. · acunetix4 Eyl 2026
- CVE-2026-8183230İzleyin
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
YüksekCVSS 7,7İstismar yokEPSS %0ibm · app connect enterprise4 Eyl 2026
- CVE-2026-8272832İzleyin
Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS
YüksekCVSS 8,2İstismar yokEPSS %0elixir-mint · mint4 Eyl 2026
- CVE-2026-8560634İzleyin
firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath
YüksekCVSS 8,7İstismar yokEPSS %0firecrawl · firecrawl-mcp-server4 Eyl 2026
- CVE-2026-8560734İzleyin
Blinko 1.8.7 Cross-User AI Conversation Read and Write via message tRPC Router
YüksekCVSS 8,7İstismar yokEPSS %0blinkospace · blinko4 Eyl 2026
- CVE-2026-8560834İzleyin
Douyin_TikTok_Download_API 4.1.2 SSRF via url parameter
YüksekCVSS 8,7İstismar yokEPSS %0evil0ctal · douyin_tiktok_download_api4 Eyl 2026
- CVE-2026-8561828İzleyin
ConvertX 0.17.0 Arbitrary File Read via LaTeX Input Directives
YüksekCVSS 7,1İstismar yokEPSS %0c4illin · convertx4 Eyl 2026
- CVE-2026-8561930İzleyin
AppFlowy-Cloud 0.9.64 Cross-Workspace Collab Access via HTTP API
YüksekCVSS 7,7İstismar yokEPSS %0appflowy-io · appflowy-cloud4 Eyl 2026
- CVE-2026-8562036İzleyin
Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Function
KritikCVSS 9,2İstismar yokEPSS %0crystaldba · postgres-mcp4 Eyl 2026
- CVE-2026-8562334İzleyin
goose 1.37.0 Arbitrary Command Execution via Recipe Extensions
YüksekCVSS 8,7İstismar yokEPSS %0aaif-goose · goose4 Eyl 2026
- CVE-2026-8562428İzleyin
Blinko 1.8.7 Cross-User Private Note Disclosure via noteReferenceList
YüksekCVSS 7,1İstismar yokEPSS %0blinkospace · blinko4 Eyl 2026
- CVE-2026-8562536İzleyin
sift 17.1.3 Prototype Pollution Remote Code Execution via $where
KritikCVSS 9,2Kavram kanıtıEPSS %0crcn · sift.js4 Eyl 2026
- CVE-2026-8562634İzleyin
git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters
YüksekCVSS 8,7İstismar yokEPSS %0cyanheads · git-mcp-server4 Eyl 2026
- CVE-2026-8565133İzleyin
Trigger.dev before 4.5.2 Unauthorized Environment Access via Run Replay
YüksekCVSS 8,4İstismar yokEPSS %0triggerdotdev · trigger.dev4 Eyl 2026
- CVE-2026-8566036İzleyin
cli-mcp-server 0.2.5 Command Allowlist Bypass via Shell Substitution
KritikCVSS 9,2İstismar yokEPSS %0mladensu · cli-mcp-server4 Eyl 2026
- CVE-2026-8566137İzleyin
excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio mode
KritikCVSS 9,3İstismar yokEPSS %0haris-musa · excel-mcp-server4 Eyl 2026
- CVE-2026-8566337İzleyin
Aim 3.29.1 Remote Code Execution via Unauthenticated Method Dispatch
KritikCVSS 9,3İstismar yokEPSS %0aimhubio · aim4 Eyl 2026
- CVE-2026-8566434İzleyin
Chroma 1.5.9 Unbounded HNSW Index Parameters Memory Exhaustion
YüksekCVSS 8,7İstismar yokEPSS %0chroma-core · chroma4 Eyl 2026
- CVE-2026-8566528İzleyin
Bruno through 4.1.0 Arbitrary File Read via Unconfined Body File Path
YüksekCVSS 7,1İstismar yokEPSS %0usebruno · bruno4 Eyl 2026
- CVE-2026-8566634İzleyin
ogx 1.3.1 Server-Side Request Forgery via MCP tool server_url
YüksekCVSS 8,7İstismar yokEPSS %0ogx-ai · ogx4 Eyl 2026
- CVE-2026-8566737İzleyin
xiaobei through 5.5.2 Unauthenticated Webhook Message Injection
KritikCVSS 9,3İstismar yokEPSS %0teamwiseflow · xiaobei4 Eyl 2026
- CVE-2026-8566834İzleyin
Xinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-register
YüksekCVSS 8,7İstismar yokEPSS %0xorbitsai · inference4 Eyl 2026
- CVE-2026-8566928İzleyin
potpie through 2.0.0 Missing Ownership Check via code-changes sync
YüksekCVSS 7,1İstismar yokEPSS %0potpie-ai · potpie4 Eyl 2026
- CVE-2026-8567028İzleyin
tokenizers BpeBuilder Buffer Overflow via merge token
YüksekCVSS 7,1İstismar yokEPSS %0huggingface · tokenizers4 Eyl 2026
- CVE-2026-8567134İzleyin
QAnything 2.0.0 Unauthenticated Cross-User File Disclosure
YüksekCVSS 8,7İstismar yokEPSS %0netease-youdao · qanything4 Eyl 2026
- CVE-2026-8567238İzleyin
zerox 1.1.20 OS Command Injection via Document URL File Extension
KritikCVSS 9,3İstismar yokEPSS %2getomni-ai · zerox4 Eyl 2026
- CVE-2026-8567334İzleyin
LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding
YüksekCVSS 8,7İstismar yokEPSS %0hiyouga · llamafactory4 Eyl 2026
- CVE-2026-8567434İzleyin
aider 0.86.2 Remote Code Execution via .aider.conf.yml
YüksekCVSS 8,5İstismar yokEPSS %0aider-ai · aider4 Eyl 2026
- CVE-2026-8567534İzleyin
OWL DocumentProcessingToolkit Server-Side Request Forgery via URL Fetching
YüksekCVSS 8,7İstismar yokEPSS %0camel-ai · owl4 Eyl 2026
- CVE-2026-8568435İzleyin
marker through 2.0.0 Path Traversal via upload filename
YüksekCVSS 8,8İstismar yokEPSS %1datalab-to · marker4 Eyl 2026
- CVE-2026-8568534İzleyin
AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill
YüksekCVSS 8,7İstismar yokEPSS %0agentscope-ai · agentscope4 Eyl 2026
- CVE-2026-8568634İzleyin
ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs
YüksekCVSS 8,7İstismar yokEPSS %0modelscope · ms-swift4 Eyl 2026
- CVE-2026-8568734İzleyin
surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server
YüksekCVSS 8,7İstismar yokEPSS %0datalab-to · surya4 Eyl 2026
- CVE-2026-8568838İzleyin
TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer
KritikCVSS 9,3Kavram kanıtıEPSS %2ten-framework · ten-framework4 Eyl 2026
- CVE-2026-8568928İzleyin
llmware 0.4.6 SQL Injection via unescaped filter values
YüksekCVSS 7,1İstismar yokEPSS %0llmware-ai · llmware4 Eyl 2026
- CVE-2026-8569034İzleyin
Plandex 2.2.1 Path Traversal via ApplyFiles
YüksekCVSS 8,5İstismar yokEPSS %0plandex-ai · plandex4 Eyl 2026
- CVE-2026-8569134İzleyin
MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/url
YüksekCVSS 8,7İstismar yokEPSS %0the-vibe-company · megaparse4 Eyl 2026
- CVE-2026-8569228İzleyin
Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding
YüksekCVSS 7,1İstismar yokEPSS %0ccfos · nightingale4 Eyl 2026
- CVE-2026-8569328İzleyin
Chatbot UI Cross-User Private File Content Disclosure via Retrieval API
YüksekCVSS 7,1İstismar yokEPSS %0mckaywrigley · chatbot-ui4 Eyl 2026
- CVE-2026-8569436İzleyin
LaVague 0.2.35 Remote Code Execution via eval extraction
KritikCVSS 9,2İstismar yokEPSS %0lavague-ai · lavague4 Eyl 2026
- CVE-2026-8569537İzleyin
FastChat Unauthenticated Worker Registration SSRF and Model Spoofing
KritikCVSS 9,3İstismar yokEPSS %0lm-sys · fastchat4 Eyl 2026
- CVE-2026-8569638İzleyin
SadTalker OS Command Injection via Audio Filename
KritikCVSS 9,3İstismar yokEPSS %2opentalker · sadtalker4 Eyl 2026
- CVE-2026-8569728İzleyin
Documenso 2.17.0 PDF Route Ignores Document Visibility
YüksekCVSS 7,1İstismar yokEPSS %0documenso · documenso4 Eyl 2026
- CVE-2026-8569934İzleyin
jina-ai reader server-side request forgery via redirect validation bypass
YüksekCVSS 8,7İstismar yokEPSS %0jina-ai · reader4 Eyl 2026
- CVE-2026-8570028İzleyin
Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints
YüksekCVSS 7,1İstismar yokEPSS %0onyx-dot-app · onyx4 Eyl 2026
- CVE-2022-3549721İzleyin
In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via re
OrtaCVSS 5,4Kavram kanıtıEPSS %04 Eyl 2026
- CVE-2026-8557828İzleyin
SiYuan through 3.8.1 Authorization Bypass via getFile
YüksekCVSS 7,1İstismar yokEPSS %0siyuan-note · siyuan4 Eyl 2026
- CVE-2022-3549928İzleyin
In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary p
YüksekCVSS 7,1Kavram kanıtıEPSS %04 Eyl 2026
- CVE-2026-1865839İzleyin
IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed
KritikCVSS 9,8İstismar yokEPSS %0ibm · operational decision manager4 Eyl 2026
- CVE-2026-1890530İzleyin
IBM ContextForge MCP Gateway is affected by server-side request forgery via DNS TOCTOU at tool invocation
YüksekCVSS 7,7İstismar yokEPSS %0ibm · contextforge4 Eyl 2026
- CVE-2026-1927438İzleyin
IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
KritikCVSS 9,6İstismar yokEPSS %0ibm · observability with instana (agent)4 Eyl 2026
- CVE-2026-1928330İzleyin
IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
YüksekCVSS 7,7İstismar yokEPSS %0ibm · observability with instana (agent)4 Eyl 2026
- CVE-2026-1929835İzleyin
Langflow is vulnerable to remote code execution due to authorization policy bypass in the authenticated flow-build endpoint
YüksekCVSS 8,8İstismar yokEPSS %0langflow · langflow4 Eyl 2026
- CVE-2026-1930030İzleyin
Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows
YüksekCVSS 7,5İstismar yokEPSS %0langflow · langflow4 Eyl 2026
- CVE-2026-8559428İzleyin
Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middleware
YüksekCVSS 7,0İstismar yokEPSS %0traefik · traefik4 Eyl 2026
- CVE-2026-8559537İzleyin
Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth
KritikCVSS 9,3İstismar yokEPSS %0traefik · traefik4 Eyl 2026
- CVE-2026-8559632İzleyin
Traefik v3.7 Authentication Bypass via TLS Option Conflict
YüksekCVSS 8,2İstismar yokEPSS %0traefik · traefik4 Eyl 2026
- CVE-2026-8559732İzleyin
Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict
YüksekCVSS 8,2İstismar yokEPSS %0traefik · traefik4 Eyl 2026
- CVE-2026-1930332İzleyin
Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components
YüksekCVSS 8,1İstismar yokEPSS %0langflow · langflow4 Eyl 2026
- CVE-2026-1930530İzleyin
Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components
YüksekCVSS 7,5İstismar yokEPSS %0langflow · langflow4 Eyl 2026
- CVE-2026-1930630İzleyin
Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components
YüksekCVSS 7,7İstismar yokEPSS %0langflow · langflow4 Eyl 2026
- CVE-2026-4440237İzleyin
Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi
KritikCVSS 9,3Kavram kanıtıEPSS %1voltronic power · snmp web pro4 Eyl 2026
- CVE-2026-7516036İzleyin
An issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgi
KritikCVSS 9,1İstismar yokEPSS %04 Eyl 2026
- CVE-2026-7516135İzleyin
An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated u
YüksekCVSS 8,8İstismar yokEPSS %04 Eyl 2026
- CVE-2026-7516635İzleyin
Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows the low-privileged service user to execute /usr/
YüksekCVSS 8,8İstismar yokEPSS %04 Eyl 2026
- CVE-2026-7516935İzleyin
An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenti
YüksekCVSS 8,8İstismar yokEPSS %04 Eyl 2026
- CVE-2026-7517139İzleyin
An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component.
KritikCVSS 9,8İstismar yokEPSS %04 Eyl 2026
- CVE-2026-7542939İzleyin
PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Se
KritikCVSS 9,8Kavram kanıtıEPSS %04 Eyl 2026
- CVE-2026-7543136İzleyin
PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-based authentication.
KritikCVSS 9,1Kavram kanıtıEPSS %14 Eyl 2026
- CVE-2026-7782238İzleyin
IBM ContextForge MCP Gateway is affected by server-side request forgery (DNS rebinding) via the A2A agent invocation endpoint
KritikCVSS 9,6İstismar yokEPSS %0ibm · contextforge4 Eyl 2026
- CVE-2026-7854330İzleyin
IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
YüksekCVSS 7,5İstismar yokEPSS %0ibm · app connect enterprise4 Eyl 2026
- CVE-2026-7941834İzleyin
EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality.
YüksekCVSS 8,7İstismar yokEPSS %0emxtecnologia · gestao x business suite4 Eyl 2026
- CVE-2026-7941934İzleyin
A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier.
YüksekCVSS 8,7İstismar yokEPSS %0emxtecnologia · gestao x business suite4 Eyl 2026
- CVE-2026-8573032İzleyin
smol-toml: Denial of Service via malformed TOML documents
YüksekCVSS 8,2İstismar yokEPSS %0squirrelchat · smol-toml4 Eyl 2026
- CVE-2026-1329730İzleyin
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
YüksekCVSS 7,5İstismar yokEPSS %0ibm · verify identity access4 Eyl 2026
- CVE-2026-1682631İzleyin
IBM i is Affected By Multiple Vulnerabilities in Debug Server
YüksekCVSS 7,8İstismar yokEPSS %0ibm · i4 Eyl 2026
- CVE-2026-1705736İzleyin
IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]
KritikCVSS 9,1İstismar yokEPSS %0ibm · i4 Eyl 2026
- CVE-2026-1720736İzleyin
IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]
KritikCVSS 9,1İstismar yokEPSS %0ibm · i4 Eyl 2026
- CVE-2026-1725530İzleyin
IBM i is Affected By Denial of Service Vulnerability []
YüksekCVSS 7,5İstismar yokEPSS %0ibm · i4 Eyl 2026
- CVE-2026-1747030İzleyin
IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]
YüksekCVSS 7,5İstismar yokEPSS %0ibm · i4 Eyl 2026
- CVE-2026-1749931İzleyin
IBM i is Affected By Multiple Vulnerabilities in Debug Server
YüksekCVSS 7,8İstismar yokEPSS %0ibm · i4 Eyl 2026
- CVE-2026-1762728İzleyin
Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpoint
YüksekCVSS 7,1İstismar yokEPSS %0langflow · langflow4 Eyl 2026
- CVE-2026-1817530İzleyin
IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [, ]
YüksekCVSS 7,5İstismar yokEPSS %0ibm · i4 Eyl 2026
- CVE-2026-1822139İzleyin
IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [, ]
KritikCVSS 9,8İstismar yokEPSS %0ibm · i4 Eyl 2026
- CVE-2026-1834135İzleyin
IBM i is Affected By Buffer Overflow Vulnerability []
YüksekCVSS 8,8İstismar yokEPSS %0ibm · i4 Eyl 2026
- CVE-2026-1848635İzleyin
IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution
YüksekCVSS 8,8İstismar yokEPSS %0ibm · contextforge4 Eyl 2026
- CVE-2026-1848929İzleyin
IBM ContextForge Translate is affected by cross-client credential context confusion
YüksekCVSS 7,4İstismar yokEPSS %0ibm · contextforge4 Eyl 2026
- CVE-2026-3102039İzleyin
In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define prompt content used during chatbot
KritikCVSS 9,8İstismar yokEPSS %14 Eyl 2026
- CVE-2026-7543039İzleyin
PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication on the
KritikCVSS 9,8Kavram kanıtıEPSS %14 Eyl 2026
- CVE-2026-7874539İzleyin
An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to execute arbitrary code via the Android Debug Br
KritikCVSS 9,8Kavram kanıtıEPSS %04 Eyl 2026
- CVE-2026-8493332İzleyin
undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches
YüksekCVSS 8,2İstismar yokEPSS %0nodejs · undici4 Eyl 2026
- CVE-2026-8496136İzleyin
undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool
KritikCVSS 9,1İstismar yokEPSS %0nodejs · undici4 Eyl 2026
- CVE-2026-8501430İzleyin
undici vulnerable to Denial of Service via WebSocketStream unclean close
YüksekCVSS 7,5İstismar yokEPSS %0nodejs · undici4 Eyl 2026
- CVE-2026-8515229İzleyin
undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors
YüksekCVSS 7,4İstismar yokEPSS %0nodejs · undici4 Eyl 2026
- CVE-2021-4431930İzleyin
Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service.
YüksekCVSS 7,5İstismar yokEPSS %04 Eyl 2026