Yayın tarihine göre
Eylül 2026: sömürülen ve yeni ciddi CVE kayıtları
7.953 kayıt · 32 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 80 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2026-102112İstismar yok | Kiteworks Core Local Privilege Escalationaccellion · kiteworks · CWE-78 | Yüksek7,8 | — | %0,3 | 30 Eyl 2026 |
31İzleyin | CVE-2026-102113İstismar yok | Kiteworks Core Local Privilege Escalationaccellion · kiteworks · CWE-59 | Yüksek7,8 | — | %0,3 | 30 Eyl 2026 |
29İzleyin | CVE-2026-102114İstismar yok | Kiteworks Core OS Command Injectionaccellion · kiteworks · CWE-78 | Yüksek7,2 | — | %3,1 | 30 Eyl 2026 |
39İzleyin | CVE-2026-102115İstismar yok | Kiteworks Core Authentication Bypass in the Password Reset Workflowaccellion · kiteworks · CWE-640 | Kritik9,8 | — | %1,0 | 30 Eyl 2026 |
29İzleyin | CVE-2026-102116İstismar yok | Kiteworks Email Protection Gateway Path Traversalaccellion · kiteworks · CWE-22 | Yüksek7,2 | — | %1,9 | 30 Eyl 2026 |
28İzleyin | CVE-2026-102117İstismar yok | Kiteworks Core Remote Code Executionaccellion · kiteworks · CWE-807 | Yüksek7,2 | — | %1,2 | 30 Eyl 2026 |
31İzleyin | CVE-2026-102118İstismar yok | Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalationaccellion · kiteworks · CWE-59 | Yüksek7,8 | — | %0,3 | 30 Eyl 2026 |
28İzleyin | CVE-2026-102119İstismar yok | Kiteworks Email Protection Gateway Path Traversalaccellion · kiteworks · CWE-22 | Yüksek7,2 | — | %1,3 | 30 Eyl 2026 |
35İzleyin | CVE-2026-102120İstismar yok | Kiteworks Core OS Command Injectionaccellion · kiteworks · CWE-78 | Yüksek8,8 | — | %0,4 | 30 Eyl 2026 |
34İzleyin | CVE-2026-102121İstismar yok | Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actoraccellion · kiteworks · CWE-200 | Yüksek8,6 | — | %0,4 | 30 Eyl 2026 |
29İzleyin | CVE-2026-102123İstismar yok | Kiteworks Core Path Traversalaccellion · kiteworks · CWE-22 | Yüksek7,4 | — | %0,9 | 30 Eyl 2026 |
35İzleyin | CVE-2026-102125İstismar yok | Kiteworks Core Sandbox Escapeaccellion · kiteworks · CWE-653 | Yüksek8,8 | — | %0,3 | 30 Eyl 2026 |
32İzleyin | CVE-2026-102126İstismar yok | Kiteworks Core Stored Cross-site Scripting (XSS)accellion · kiteworks · CWE-79 | Yüksek8,1 | — | %0,3 | 30 Eyl 2026 |
28İzleyin | CVE-2026-102127İstismar yok | Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Referenceaccellion · kiteworks · CWE-611 | Yüksek7,0 | — | %0,1 | 30 Eyl 2026 |
30İzleyin | CVE-2026-102128İstismar yok | Kiteworks Email Protection Gateway Improper Authenticationaccellion · kiteworks · CWE-287 | Yüksek7,5 | — | %0,2 | 30 Eyl 2026 |
28İzleyin | CVE-2026-102129İstismar yok | Kiteworks Core Incorrect Privilege Assignmentaccellion · kiteworks · CWE-266 | Yüksek7,2 | — | %0,8 | 30 Eyl 2026 |
28İzleyin | CVE-2026-102130İstismar yok | Kiteworks Email Protection Gateway Remote Code Executionaccellion · kiteworks · CWE-94 | Yüksek7,2 | — | %1,1 | 30 Eyl 2026 |
28İzleyin | CVE-2026-102131İstismar yok | Kiteworks Email Protection Gateway Improper Handling of Case Sensitivityaccellion · kiteworks · CWE-94 | Yüksek7,2 | — | %1,1 | 30 Eyl 2026 |
28İzleyin | CVE-2026-102132İstismar yok | Kiteworks Core Privilege Escalation through Improper Access Controlaccellion · kiteworks · CWE-284 | Yüksek7,2 | — | %1,0 | 30 Eyl 2026 |
25İzleyin | CVE-2026-102136İstismar yok | Kiteworks Core Command Execution through Configuration Injectionaccellion · kiteworks · CWE-93 | Orta6,3 | — | %0,1 | 30 Eyl 2026 |
28İzleyin | CVE-2026-102142İstismar yok | Kiteworks Core Remote Code Execution through Server-Side Template Injectionaccellion · kiteworks · CWE-1336 | Yüksek7,2 | — | %1,2 | 30 Eyl 2026 |
30İzleyin | CVE-2026-102143İstismar yok | Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Typeaccellion · kiteworks · CWE-306 | Yüksek7,5 | — | %0,3 | 30 Eyl 2026 |
37İzleyin | CVE-2026-102147İstismar yok | Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)accellion · kiteworks · CWE-79 | Kritik9,3 | — | %0,4 | 30 Eyl 2026 |
37İzleyin | CVE-2026-102149İstismar yok | Kiteworks Email Protection Gateway Improper Access Controlaccellion · kiteworks · CWE-306 | Kritik9,4 | — | %0,2 | 30 Eyl 2026 |
28İzleyin | CVE-2026-102150İstismar yok | Kiteworks Secure Data Forms Missing Authentication for Critical Functionaccellion · kiteworks · CWE-306 | Yüksek7,2 | — | %0,2 | 30 Eyl 2026 |
34İzleyin | CVE-2026-102995İstismar yok | pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)pypdf project · pypdf · CWE-400 | Yüksek8,7 | — | %0,3 | 30 Eyl 2026 |
34İzleyin | CVE-2026-102996İstismar yok | pypdf: Possible large memory usage when parsing font datapypdf project · pypdf · CWE-400 | Yüksek8,7 | — | %0,3 | 30 Eyl 2026 |
34İzleyin | CVE-2026-102997İstismar yok | pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)pypdf project · pypdf · CWE-400 | Yüksek8,7 | — | %0,3 | 30 Eyl 2026 |
34İzleyin | CVE-2026-102998İstismar yok | pypdf: Possible long runtimes when generating appearance streamspypdf project · pypdf · CWE-400 | Yüksek8,7 | — | %0,3 | 30 Eyl 2026 |
34İzleyin | CVE-2026-102999İstismar yok | pypdf: Possible long runtimes with large amount of embedded filespypdf project · pypdf · CWE-400 | Yüksek8,7 | — | %0,3 | 30 Eyl 2026 |
34İzleyin | CVE-2026-103000İstismar yok | pypdf: Possible large memory usage when retrieving alphabetical page labelspypdf project · pypdf · CWE-400 | Yüksek8,7 | — | %0,3 | 30 Eyl 2026 |
32İzleyin | CVE-2026-51568İstismar yok | modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file.CWE-22 | Yüksek8,1 | — | %0,3 | 30 Eyl 2026 |
32İzleyin | CVE-2026-51570İstismar yok | modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file.CWE-22 | Yüksek8,1 | — | %0,3 | 30 Eyl 2026 |
30İzleyin | CVE-2026-51852İstismar yok | agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64.CWE-22 | Yüksek7,5 | — | %0,6 | 30 Eyl 2026 |
30İzleyin | CVE-2026-51853İstismar yok | agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__.CWE-22 | Yüksek7,5 | — | %0,6 | 30 Eyl 2026 |
39İzleyin | CVE-2026-51856İstismar yok | In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes execute_python_code as an available tool, a remote WebSocketCWE-94 | Kritik9,8 | — | %0,3 | 30 Eyl 2026 |
39İzleyin | CVE-2026-51857İstismar yok | In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter wCWE-94 | Kritik9,8 | — | %0,4 | 30 Eyl 2026 |
39İzleyin | CVE-2026-51858İstismar yok | In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an apprCWE-94 | Kritik9,8 | — | %0,4 | 30 Eyl 2026 |
36İzleyin | CVE-2026-51859İstismar yok | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/core/cache/utils.py:29CWE-22 | Kritik9,1 | — | %0,6 | 30 Eyl 2026 |
30İzleyin | CVE-2026-51860İstismar yok | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_exec.py.CWE-22 | Yüksek7,5 | — | %0,5 | 30 Eyl 2026 |
39İzleyin | CVE-2026-51861İstismar yok | bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py.CWE-94 | Kritik9,8 | — | %0,3 | 30 Eyl 2026 |
36İzleyin | CVE-2026-51862İstismar yok | DB-GPT 0.8.0 contains directory traversal in skill_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py:40).CWE-22 | Kritik9,1 | — | %0,7 | 30 Eyl 2026 |
36İzleyin | CVE-2026-51864İstismar yok | DB-GPT v0.7.5 and v0.8.0 contains directory traversal in python_file_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/python_upload_aCWE-22 | Kritik9,1 | — | %0,7 | 30 Eyl 2026 |
39İzleyin | CVE-2026-51866İstismar yok | In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later be executed through the real /api/v1/chatCWE-94 | Kritik9,8 | — | %0,3 | 30 Eyl 2026 |
39İzleyin | CVE-2026-51867İstismar yok | agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts.CWE-284 | Kritik9,8 | — | %0,2 | 30 Eyl 2026 |
39İzleyin | CVE-2026-51869İstismar yok | DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host.CWE-284 | Kritik9,8 | — | %0,2 | 30 Eyl 2026 |
39İzleyin | CVE-2026-51870İstismar yok | DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute.CWE-78 | Kritik9,8 | — | %0,9 | 30 Eyl 2026 |
39İzleyin | CVE-2026-51871İstismar yok | Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achievCWE-94 | Kritik9,8 | — | %0,4 | 30 Eyl 2026 |
39İzleyin | CVE-2026-51872İstismar yok | Devika v1.0 is vulnerable to Code Injection via the Runner.run_code function in src/agents/runner/runner.py.CWE-94 | Kritik9,8 | — | %0,3 | 30 Eyl 2026 |
35İzleyin | CVE-2026-92172İstismar yok | Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horimeta platforms, inc · meta horizon os · CWE-923 | Yüksek8,8 | — | %0,2 | 30 Eyl 2026 |
36İzleyin | CVE-2026-92173İstismar yok | Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculumeta platforms, inc · meta horizon os · CWE-923 | Kritik9,1 | — | %0,2 | 30 Eyl 2026 |
36İzleyin | CVE-2026-101283İstismar yok | iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attaesnet · iperf3 · CWE-122 | Kritik9,2 | — | %0,2 | 30 Eyl 2026 |
34İzleyin | CVE-2026-103591İstismar yok | DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/fileasyncfuncai · deepwiki-open · CWE-73 | Yüksek8,7 | — | %0,4 | 30 Eyl 2026 |
- CVE-2026-10211231İzleyin
Kiteworks Core Local Privilege Escalation
YüksekCVSS 7,8İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10211331İzleyin
Kiteworks Core Local Privilege Escalation
YüksekCVSS 7,8İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10211429İzleyin
Kiteworks Core OS Command Injection
YüksekCVSS 7,2İstismar yokEPSS %3accellion · kiteworks30 Eyl 2026
- CVE-2026-10211539İzleyin
Kiteworks Core Authentication Bypass in the Password Reset Workflow
KritikCVSS 9,8İstismar yokEPSS %1accellion · kiteworks30 Eyl 2026
- CVE-2026-10211629İzleyin
Kiteworks Email Protection Gateway Path Traversal
YüksekCVSS 7,2İstismar yokEPSS %1accellion · kiteworks30 Eyl 2026
- CVE-2026-10211728İzleyin
Kiteworks Core Remote Code Execution
YüksekCVSS 7,2İstismar yokEPSS %1accellion · kiteworks30 Eyl 2026
- CVE-2026-10211831İzleyin
Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation
YüksekCVSS 7,8İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10211928İzleyin
Kiteworks Email Protection Gateway Path Traversal
YüksekCVSS 7,2İstismar yokEPSS %1accellion · kiteworks30 Eyl 2026
- CVE-2026-10212035İzleyin
Kiteworks Core OS Command Injection
YüksekCVSS 8,8İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10212134İzleyin
Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor
YüksekCVSS 8,6İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10212329İzleyin
Kiteworks Core Path Traversal
YüksekCVSS 7,4İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10212535İzleyin
Kiteworks Core Sandbox Escape
YüksekCVSS 8,8İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10212632İzleyin
Kiteworks Core Stored Cross-site Scripting (XSS)
YüksekCVSS 8,1İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10212728İzleyin
Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference
YüksekCVSS 7,0İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10212830İzleyin
Kiteworks Email Protection Gateway Improper Authentication
YüksekCVSS 7,5İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10212928İzleyin
Kiteworks Core Incorrect Privilege Assignment
YüksekCVSS 7,2İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10213028İzleyin
Kiteworks Email Protection Gateway Remote Code Execution
YüksekCVSS 7,2İstismar yokEPSS %1accellion · kiteworks30 Eyl 2026
- CVE-2026-10213128İzleyin
Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity
YüksekCVSS 7,2İstismar yokEPSS %1accellion · kiteworks30 Eyl 2026
- CVE-2026-10213228İzleyin
Kiteworks Core Privilege Escalation through Improper Access Control
YüksekCVSS 7,2İstismar yokEPSS %1accellion · kiteworks30 Eyl 2026
- CVE-2026-10213625İzleyin
Kiteworks Core Command Execution through Configuration Injection
OrtaCVSS 6,3İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10214228İzleyin
Kiteworks Core Remote Code Execution through Server-Side Template Injection
YüksekCVSS 7,2İstismar yokEPSS %1accellion · kiteworks30 Eyl 2026
- CVE-2026-10214330İzleyin
Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type
YüksekCVSS 7,5İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10214737İzleyin
Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)
KritikCVSS 9,3İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10214937İzleyin
Kiteworks Email Protection Gateway Improper Access Control
KritikCVSS 9,4İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10215028İzleyin
Kiteworks Secure Data Forms Missing Authentication for Critical Function
YüksekCVSS 7,2İstismar yokEPSS %0accellion · kiteworks30 Eyl 2026
- CVE-2026-10299534İzleyin
pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
YüksekCVSS 8,7İstismar yokEPSS %0pypdf project · pypdf30 Eyl 2026
- CVE-2026-10299634İzleyin
pypdf: Possible large memory usage when parsing font data
YüksekCVSS 8,7İstismar yokEPSS %0pypdf project · pypdf30 Eyl 2026
- CVE-2026-10299734İzleyin
pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)
YüksekCVSS 8,7İstismar yokEPSS %0pypdf project · pypdf30 Eyl 2026
- CVE-2026-10299834İzleyin
pypdf: Possible long runtimes when generating appearance streams
YüksekCVSS 8,7İstismar yokEPSS %0pypdf project · pypdf30 Eyl 2026
- CVE-2026-10299934İzleyin
pypdf: Possible long runtimes with large amount of embedded files
YüksekCVSS 8,7İstismar yokEPSS %0pypdf project · pypdf30 Eyl 2026
- CVE-2026-10300034İzleyin
pypdf: Possible large memory usage when retrieving alphabetical page labels
YüksekCVSS 8,7İstismar yokEPSS %0pypdf project · pypdf30 Eyl 2026
- CVE-2026-5156832İzleyin
modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file.
YüksekCVSS 8,1İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5157032İzleyin
modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file.
YüksekCVSS 8,1İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5185230İzleyin
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64.
YüksekCVSS 7,5İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5185330İzleyin
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__.
YüksekCVSS 7,5İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5185639İzleyin
In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes execute_python_code as an available tool, a remote WebSocket
KritikCVSS 9,8İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5185739İzleyin
In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter w
KritikCVSS 9,8İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5185839İzleyin
In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an appr
KritikCVSS 9,8İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5185936İzleyin
bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file (src/backend/bisheng/core/cache/utils.py:29
KritikCVSS 9,1İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5186030İzleyin
bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/task_exec.py.
YüksekCVSS 7,5İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5186139İzleyin
bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py.
KritikCVSS 9,8İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5186236İzleyin
DB-GPT 0.8.0 contains directory traversal in skill_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py:40).
KritikCVSS 9,1İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5186436İzleyin
DB-GPT v0.7.5 and v0.8.0 contains directory traversal in python_file_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/python_upload_a
KritikCVSS 9,1İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5186639İzleyin
In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later be executed through the real /api/v1/chat
KritikCVSS 9,8İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5186739İzleyin
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts.
KritikCVSS 9,8İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5186939İzleyin
DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host.
KritikCVSS 9,8İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5187039İzleyin
DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute.
KritikCVSS 9,8İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5187139İzleyin
Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achiev
KritikCVSS 9,8İstismar yokEPSS %030 Eyl 2026
- CVE-2026-5187239İzleyin
Devika v1.0 is vulnerable to Code Injection via the Runner.run_code function in src/agents/runner/runner.py.
KritikCVSS 9,8İstismar yokEPSS %030 Eyl 2026
- CVE-2026-9217235İzleyin
Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.hori
YüksekCVSS 8,8İstismar yokEPSS %0meta platforms, inc · meta horizon os30 Eyl 2026
- CVE-2026-9217336İzleyin
Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculu
KritikCVSS 9,1İstismar yokEPSS %0meta platforms, inc · meta horizon os30 Eyl 2026
- CVE-2026-10128336İzleyin
iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the atta
KritikCVSS 9,2İstismar yokEPSS %0esnet · iperf330 Eyl 2026
- CVE-2026-10359134İzleyin
DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file
YüksekCVSS 8,7İstismar yokEPSS %0asyncfuncai · deepwiki-open30 Eyl 2026