Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

6.164 kayıt · 12 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 12 / 62

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
30İzleyin	CVE-2026-102165İstismar yok	Security Advisory 0198arista networks · wi-fi access points · CWE-121 Girişsiz RCE Bellek hatası	Yüksek7,7	—	%0,2	6 Eki 2026
36İzleyin	CVE-2026-102167İstismar yok	Security Advisory 0197arista networks · wi-fi access points · CWE-121 Girişsiz RCE Bellek hatası	Kritik9,0	—	%0,2	6 Eki 2026
28İzleyin	CVE-2026-102168İstismar yok	Security Advisory 0194arista networks · wi-fi access points · CWE-191 Girişsiz RCE Bellek hatası	Yüksek7,1	—	%0,2	6 Eki 2026
28İzleyin	CVE-2026-102169İstismar yok	Security Advisory 0194arista networks · wi-fi access points · CWE-476 Girişsiz RCE Bellek hatası	Yüksek7,1	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-102406İstismar yok	Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interceptionelastic · kibana · CWE-639 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,3	6 Eki 2026
28İzleyin	CVE-2026-103007İstismar yok	Incorrect Authorization in Elasticsearch Leading to Privilege Escalationelastic · elasticsearch · CWE-863 Erişim denetimi (IDOR)	Yüksek7,2	—	%0,3	6 Eki 2026
28İzleyin	CVE-2026-103009İstismar yok	Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosureelastic · elasticsearch · CWE-639 Erişim denetimi (IDOR)	Yüksek7,1	—	%0,2	6 Eki 2026
36İzleyin	CVE-2026-103059İstismar yok	Gitea built-in SSH server authentication bypass through key case foldinggitea · gitea · CWE-305 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,1	—	%0,2	6 Eki 2026
32İzleyin	CVE-2026-103504İstismar yok	Gitea API team demotion not applied to unit permissionsgitea · gitea · CWE-272	Yüksek8,1	—	%0,2	6 Eki 2026
30İzleyin	CVE-2026-103670İstismar yok	Gitea trusted workflow cancellation by unapproved fork runsgitea · gitea · CWE-667 Kimlik doğrulamasız	Yüksek7,5	—	%0,2	6 Eki 2026
32İzleyin	CVE-2026-104048İstismar yok	Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluationfedoraproject · sssd · CWE-1025	Yüksek8,1	—	%0,2	6 Eki 2026
35İzleyin	CVE-2026-104626İstismar yok	Gitea fork workflow job revival through later approvalgitea · gitea · CWE-841	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-104632İstismar yok	Gitea fork workflow approval bypass through cancel and rerungitea · gitea · CWE-285 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,2	6 Eki 2026
30İzleyin	CVE-2026-104636İstismar yok	Gitea SSRF through Git HTTP redirects in mirrors and fetchesgitea · gitea · CWE-918 Kimlik doğrulamasız SSRF	Yüksek7,5	—	%0,2	6 Eki 2026
36İzleyin	CVE-2026-106445Kavram kanıtı	Handlebars: JavaScript Injection via Own Property Check Bypasshandlebars-lang · handlebars.js · CWE-184 Kimlik doğrulamasız	Kritik9,2	—	%0,4	6 Eki 2026
39İzleyin	CVE-2026-106446İstismar yok	Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)handlebars-lang · handlebars.js · CWE-94 Girişsiz RCE	Kritik9,8	—	%0,6	6 Eki 2026
34İzleyin	CVE-2026-106447İstismar yok	StableLib: Stack exhaustion denial of service via deeply nested CBOR arrays, maps, or tagsstablelib · stablelib · CWE-674 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek8,7	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106448İstismar yok	StableLib: Prototype poisoning via `__proto__` map keys in CBOR decodingstablelib · stablelib · CWE-1321 Kimlik doğrulamasız Prototype pollution	Yüksek8,9	—	%0,4	6 Eki 2026
29İzleyin	CVE-2026-106451İstismar yok	yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local useryawkat · lz4-java · CWE-367 Yarış durumu	Yüksek7,3	—	%0,0	6 Eki 2026
30İzleyin	CVE-2026-70357İstismar yok	Gitea repository migration SSRF through DNS rebindinggitea · gitea · CWE-918 Kimlik doğrulamasız SSRF	Yüksek7,5	—	%0,2	6 Eki 2026
39İzleyin	CVE-2026-73278İstismar yok	Gitea WebAuthn bypass during OAuth and OIDC sign-ingitea · gitea · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,4	6 Eki 2026
39İzleyin	CVE-2026-76742İstismar yok	Authentication Bypass in the Web Management Interface of AOS-Shewlett packard enterprise (hpe) · aos-switch (aos-s) · CWE-269 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,5	6 Eki 2026
39İzleyin	CVE-2026-76743İstismar yok	Authentication Bypass Vulnerability in the Management Interface of AOS-Shewlett packard enterprise (hpe) · aos-switch (aos-s) · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,5	6 Eki 2026
39İzleyin	CVE-2026-76744İstismar yok	Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-Shewlett packard enterprise (hpe) · aos-switch (aos-s) · CWE-120 Girişsiz RCE Bellek hatası	Kritik9,8	—	%0,5	6 Eki 2026
38İzleyin	CVE-2026-76745İstismar yok	Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-Shewlett packard enterprise (hpe) · aos-switch (aos-s) · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,6	—	%0,2	6 Eki 2026
37İzleyin	CVE-2026-76746İstismar yok	Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-Shewlett packard enterprise (hpe) · aos-switch (aos-s) · CWE-120 Kimlik doğrulamasız Bellek hatası	Kritik9,3	—	%0,1	6 Eki 2026
36İzleyin	CVE-2026-76747İstismar yok	Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-Shewlett packard enterprise (hpe) · aos-switch (aos-s) · CWE-120 Kimlik doğrulamasız Bellek hatası	Kritik9,1	—	%0,4	6 Eki 2026
35İzleyin	CVE-2026-76748İstismar yok	Authenticated Privilege Escalation Vulnerability in the API of AOS-Shewlett packard enterprise (hpe) · aos-switch (aos-s) · CWE-269	Yüksek8,8	—	%0,2	6 Eki 2026
39İzleyin	CVE-2026-76750İstismar yok	Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Managerhewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-502 Girişsiz RCE Deserializasyon	Kritik9,8	—	%0,5	6 Eki 2026
39İzleyin	CVE-2026-76751İstismar yok	Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Executionhewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-353 Girişsiz RCE	Kritik9,8	—	%0,3	6 Eki 2026
39İzleyin	CVE-2026-76752İstismar yok	Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Accesshewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,4	6 Eki 2026
39İzleyin	CVE-2026-76753İstismar yok	Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Managerhewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-134 Girişsiz RCE	Kritik9,8	—	%0,5	6 Eki 2026
39İzleyin	CVE-2026-76754İstismar yok	Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Managerhewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-77 Girişsiz RCE SQL enjeksiyonu Komut enjeksiyonu	Kritik9,8	—	%0,3	6 Eki 2026
36İzleyin	CVE-2026-79794İstismar yok	Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interfacehewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-89 SQL enjeksiyonu	Kritik9,1	—	%0,2	6 Eki 2026
39İzleyin	CVE-2026-79796İstismar yok	Authentication Bypass Vulnerabilities in ClearPass Policy Managerhewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,4	6 Eki 2026
35İzleyin	CVE-2026-79797İstismar yok	Improper Access Control in HPE Networking ClearPass Android Client Applicationhewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,8	—	%0,2	6 Eki 2026
39İzleyin	CVE-2026-79798İstismar yok	Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interfacehewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-89 SQL enjeksiyonu	Kritik9,9	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-79799İstismar yok	Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interfacehewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-79 Girişsiz RCE XSS	Yüksek8,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-79800İstismar yok	Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Managerhewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-22 RCE Yol geçişi	Yüksek8,8	—	%0,6	6 Eki 2026
39İzleyin	CVE-2026-79801İstismar yok	Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agenthewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-353 Girişsiz RCE	Kritik9,8	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-79802İstismar yok	Command Injection Vulnerability in the ClearPass Policy Manager Client Softwarehewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-77 Girişsiz RCE Komut enjeksiyonu	Yüksek8,8	—	%1,1	6 Eki 2026
35İzleyin	CVE-2026-79803İstismar yok	Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager APIhewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-77 RCE Komut enjeksiyonu	Yüksek8,8	—	%0,7	6 Eki 2026
39İzleyin	CVE-2026-79805İstismar yok	Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Managerhewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-22 Kimlik doğrulamasız Yol geçişi	Kritik9,8	—	%0,4	6 Eki 2026
31İzleyin	CVE-2026-79806İstismar yok	Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agenthewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-269 Yerel yetki yükseltme	Yüksek7,8	—	%0,0	6 Eki 2026
31İzleyin	CVE-2026-79807İstismar yok	Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Softwarehewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-347 Yerel yetki yükseltme Zayıf kripto	Yüksek7,8	—	%0,0	6 Eki 2026
31İzleyin	CVE-2026-79808İstismar yok	Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agenthewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-120 RCE Yerel yetki yükseltme Bellek hatası	Yüksek7,8	—	%0,1	6 Eki 2026
29İzleyin	CVE-2026-79809İstismar yok	Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypasshewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,3	—	%0,3	6 Eki 2026
28İzleyin	CVE-2026-79810İstismar yok	Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Managerhewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-94 RCE	Yüksek7,2	—	%0,5	6 Eki 2026
28İzleyin	CVE-2026-79811İstismar yok	Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager APIhewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-89 RCE SQL enjeksiyonu	Yüksek7,2	—	%0,2	6 Eki 2026
28İzleyin	CVE-2026-79960İstismar yok	Gitea deploy key pushes acting as the repository ownergitea · gitea · CWE-863 Erişim denetimi (IDOR)	Yüksek7,1	—	%0,2	6 Eki 2026
32İzleyin	CVE-2026-89430İstismar yok	Gitea push mirror SSRF and forced writes to internal Git hostsgitea · gitea · CWE-367 SSRF Yarış durumu	Yüksek8,1	—	%0,1	6 Eki 2026
32İzleyin	CVE-2026-94114İstismar yok	Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoningapache software foundation · apache commons bcel · CWE-386 Kimlik doğrulamasız	Yüksek8,2	—	%0,2	6 Eki 2026
39İzleyin	CVE-2026-94205İstismar yok	Gitea fork workflow approval bypass through maintainer-triggered eventsgitea · gitea · CWE-441 Kimlik doğrulamasız	Kritik9,8	—	%0,3	6 Eki 2026
36İzleyin	CVE-2026-95106İstismar yok	Gitea review and execution mismatch through duplicate tree entriesgitea · gitea · CWE-706 Kimlik doğrulamasız	Kritik9,1	—	%0,2	6 Eki 2026
30İzleyin	CVE-2026-96399İstismar yok	Gitea denial of service through external issue tracker patternsgitea · gitea · CWE-125 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Yüksek7,5	—	%0,3	6 Eki 2026
32İzleyin	CVE-2026-96404İstismar yok	Gitea installer authentication bypass for existing accountsgitea · gitea · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,1	—	%0,4	6 Eki 2026
30İzleyin	CVE-2026-96580İstismar yok	Gitea Actions memory exhaustion through large static matricesgitea · gitea · CWE-400 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,3	6 Eki 2026
31İzleyin	CVE-2026-101258İstismar yok	Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-freered hat · red hat enterprise linux 10 · CWE-787 RCE Bellek hatası	Yüksek7,8	—	%0,1	6 Eki 2026
28İzleyin	CVE-2026-105811İstismar yok	Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWSaws · qnabot-on-aws · CWE-639 Erişim denetimi (IDOR)	Yüksek7,1	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-105812İstismar yok	Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent importaws · bedrock-agentcore-starter-toolkit · CWE-94 RCE	Yüksek8,8	—	%0,2	6 Eki 2026
31İzleyin	CVE-2026-106062İstismar yok	Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface filered hat · red hat enterprise linux 10 · CWE-119 RCE Bellek hatası	Yüksek7,8	—	%0,1	6 Eki 2026
30İzleyin	CVE-2026-106455İstismar yok	Backstage: Improper validation of MkDocs plugin configuration in TechDocslinuxfoundation · backstage plugin-techdocs-node · CWE-918 SSRF	Yüksek7,7	—	%0,3	6 Eki 2026
27İzleyin	CVE-2026-106457İstismar yok	Backstage: Insufficient audience validation in the Cloudflare Access auth providerbackstage · backstage · CWE-287 Kimlik doğrulama atlatma	Orta6,8	—	%0,2	6 Eki 2026
34İzleyin	CVE-2026-106459İstismar yok	Backstage: Improper input validation in Sentry scaffolder actionslinuxfoundation · backstage/plugin-scaffolder-backend-module-sentry · CWE-200 Bilgi sızıntısı	Yüksek8,5	—	%0,2	6 Eki 2026
34İzleyin	CVE-2026-106486İstismar yok	Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actionsbackstage · backstage · CWE-22 Yol geçişi	Yüksek8,5	—	%0,3	6 Eki 2026
32İzleyin	CVE-2026-106488İstismar yok	Backstage: Improper authentication in the OIDC providerbackstage · backstage · CWE-287 Kimlik doğrulama atlatma	Yüksek8,1	—	%0,2	6 Eki 2026
30İzleyin	CVE-2026-106492İstismar yok	Backstage: Improper preservation of access restrictions during service credential delegationbackstage · backstage · CWE-269	Yüksek7,6	—	%0,2	6 Eki 2026
17İzleyin	CVE-2026-106494İstismar yok	Backstage: Improper input validation in cloud storage URL readersbackstage · backstage · CWE-22 Yol geçişi	Orta4,4	—	%0,2	6 Eki 2026
34İzleyin	CVE-2026-106547İstismar yok	HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadatathe hdf group · hdf5 · CWE-122 RCE Bellek hatası	Yüksek8,5	—	%0,1	6 Eki 2026
30İzleyin	CVE-2026-106550İstismar yok	Mozilla's Node-convict (version 6.2.2 and later) is vulnerable to a Denial of Service vulnerability caused by incomplete prototype‑pollutionmozilla · node-convict · CWE-400 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,2	6 Eki 2026
30İzleyin	CVE-2026-106553İstismar yok	In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.openbsd · openssh · CWE-669 Kimlik doğrulamasız	Yüksek7,5	—	%0,1	6 Eki 2026
30İzleyin	CVE-2026-106555İstismar yok	In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.openbsd · openssh · CWE-669 Kimlik doğrulamasız	Yüksek7,5	—	%0,1	6 Eki 2026
30İzleyin	CVE-2026-43598İstismar yok	Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent aamd · amd instinct™ mi210 · CWE-822 RCE	Yüksek7,7	—	%0,4	6 Eki 2026
36İzleyin	CVE-2026-101023İstismar yok	Gitea OAuth2 refresh token grant accepts access tokensgitea · gitea · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,1	—	%0,3	6 Eki 2026
32İzleyin	CVE-2026-105267İstismar yok	Gitea tag delete route deletes releases without release permissiongitea · gitea · CWE-732	Yüksek8,1	—	%0,3	6 Eki 2026
30İzleyin	CVE-2026-106498İstismar yok	Backstage: Improper URL validation in catalog entity placeholder resolutionlinuxfoundation · backstage plugin-catalog-backend · CWE-863 Erişim denetimi (IDOR)	Yüksek7,7	—	%0,3	6 Eki 2026
34İzleyin	CVE-2026-106500İstismar yok	Backstage: Improper task state validation in Scaffolder backendlinuxfoundation · backstage/plugin-scaffolder-backend · CWE-59	Yüksek8,5	—	%0,3	6 Eki 2026
38İzleyin	CVE-2026-106501İstismar yok	Backstage: Sensitive information exposure in Scaffolderlinuxfoundation · backstage/plugin-scaffolder-backend · CWE-200 Bilgi sızıntısı	Kritik9,6	—	%0,4	6 Eki 2026
32İzleyin	CVE-2026-106503İstismar yok	Backstage: Scaffolder action input authorization bypasslinuxfoundation · backstage/plugin-scaffolder-backend · CWE-178	Yüksek8,1	—	%0,3	6 Eki 2026
34İzleyin	CVE-2026-106505İstismar yok	Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backendlinuxfoundation · backstage plugin-techdocs-node · CWE-426 RCE	Yüksek8,5	—	%0,3	6 Eki 2026
35İzleyin	CVE-2026-106509İstismar yok	Backstage: Improper validation of MkDocs theme configuration in TechDocslinuxfoundation · backstage plugin-techdocs-node · CWE-94 RCE	Yüksek8,8	—	%0,3	6 Eki 2026
31İzleyin	CVE-2026-65142İstismar yok	NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data.nvidia · model-optimizer · CWE-502 Deserializasyon	Yüksek7,8	—	%0,2	6 Eki 2026
28İzleyin	CVE-2026-86684İstismar yok	Gitea push mirror local path check uses the repository ownergitea · gitea · CWE-863 Erişim denetimi (IDOR)	Yüksek7,1	—	%0,1	6 Eki 2026
35İzleyin	CVE-2026-104335Kavram kanıtı	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-284 RCE Erişim denetimi (IDOR)	Yüksek8,8	—	%0,5	7 Eki 2026
31İzleyin	CVE-2026-106583İstismar yok	In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.openbsd · openssh · CWE-99	Yüksek7,8	—	%0,1	7 Eki 2026
39İzleyin	CVE-2026-104334İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-94 Girişsiz RCE	Kritik9,8	—	%0,6	7 Eki 2026
35İzleyin	CVE-2026-88962İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,8	7 Eki 2026
35İzleyin	CVE-2026-93443İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,6	7 Eki 2026
35İzleyin	CVE-2026-93445İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,7	7 Eki 2026
30İzleyin	CVE-2026-93447İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-502 Deserializasyon	Yüksek7,5	—	%0,4	7 Eki 2026
35İzleyin	CVE-2026-93449İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,6	7 Eki 2026
60Bu hafta	CVE-2026-93674Silahlaştırılmış	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-94 Girişsiz RCE	Kritik9,8	—	%2,6	7 Eki 2026
39İzleyin	CVE-2026-93675İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-440 Girişsiz RCE	Kritik9,8	—	%0,7	7 Eki 2026
30İzleyin	CVE-2026-93678İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-639 Erişim denetimi (IDOR)	Yüksek7,6	—	%0,4	7 Eki 2026
35İzleyin	CVE-2026-97655İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,5	7 Eki 2026
35İzleyin	CVE-2026-97673İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-693 RCE	Yüksek8,8	—	%0,4	7 Eki 2026
32İzleyin	CVE-2026-97674İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-94 RCE	Yüksek8,1	—	%0,3	7 Eki 2026
35İzleyin	CVE-2026-97676İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,5	7 Eki 2026
35İzleyin	CVE-2026-97678İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-693 RCE	Yüksek8,8	—	%0,4	7 Eki 2026
35İzleyin	CVE-2026-97679İstismar yok	Langflow OSS is affected by multiple vulnerabilitieslangflow · langflow · CWE-94 RCE	Yüksek8,8	—	%0,4	7 Eki 2026

CVE-2026-102165
30İzleyin
Security Advisory 0198
YüksekCVSS 7,7İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
arista networks · wi-fi access points6 Eki 2026
CVE-2026-102167
36İzleyin
Security Advisory 0197
KritikCVSS 9,0İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
arista networks · wi-fi access points6 Eki 2026
CVE-2026-102168
28İzleyin
Security Advisory 0194
YüksekCVSS 7,1İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
arista networks · wi-fi access points6 Eki 2026
CVE-2026-102169
28İzleyin
Security Advisory 0194
YüksekCVSS 7,1İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
arista networks · wi-fi access points6 Eki 2026
CVE-2026-102406
35İzleyin
Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
elastic · kibana6 Eki 2026
CVE-2026-103007
28İzleyin
Incorrect Authorization in Elasticsearch Leading to Privilege Escalation
YüksekCVSS 7,2İstismar yokEPSS %0
- Erişim denetimi (IDOR)
elastic · elasticsearch6 Eki 2026
CVE-2026-103009
28İzleyin
Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure
YüksekCVSS 7,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
elastic · elasticsearch6 Eki 2026
CVE-2026-103059
36İzleyin
Gitea built-in SSH server authentication bypass through key case folding
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
gitea · gitea6 Eki 2026
CVE-2026-103504
32İzleyin
Gitea API team demotion not applied to unit permissions
YüksekCVSS 8,1İstismar yokEPSS %0
gitea · gitea6 Eki 2026
CVE-2026-103670
30İzleyin
Gitea trusted workflow cancellation by unapproved fork runs
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
gitea · gitea6 Eki 2026
CVE-2026-104048
32İzleyin
Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
YüksekCVSS 8,1İstismar yokEPSS %0
fedoraproject · sssd6 Eki 2026
CVE-2026-104626
35İzleyin
Gitea fork workflow job revival through later approval
YüksekCVSS 8,8İstismar yokEPSS %0
gitea · gitea6 Eki 2026
CVE-2026-104632
35İzleyin
Gitea fork workflow approval bypass through cancel and rerun
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
gitea · gitea6 Eki 2026
CVE-2026-104636
30İzleyin
Gitea SSRF through Git HTTP redirects in mirrors and fetches
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
gitea · gitea6 Eki 2026
CVE-2026-106445
36İzleyin
Handlebars: JavaScript Injection via Own Property Check Bypass
KritikCVSS 9,2Kavram kanıtıEPSS %0
- Kimlik doğrulamasız
handlebars-lang · handlebars.js6 Eki 2026
CVE-2026-106446
39İzleyin
Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
handlebars-lang · handlebars.js6 Eki 2026
CVE-2026-106447
34İzleyin
StableLib: Stack exhaustion denial of service via deeply nested CBOR arrays, maps, or tags
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
stablelib · stablelib6 Eki 2026
CVE-2026-106448
35İzleyin
StableLib: Prototype poisoning via `__proto__` map keys in CBOR decoding
YüksekCVSS 8,9İstismar yokEPSS %0
- Kimlik doğrulamasız
- Prototype pollution
stablelib · stablelib6 Eki 2026
CVE-2026-106451
29İzleyin
yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user
YüksekCVSS 7,3İstismar yokEPSS %0
- Yarış durumu
yawkat · lz4-java6 Eki 2026
CVE-2026-70357
30İzleyin
Gitea repository migration SSRF through DNS rebinding
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
gitea · gitea6 Eki 2026
CVE-2026-73278
39İzleyin
Gitea WebAuthn bypass during OAuth and OIDC sign-in
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
gitea · gitea6 Eki 2026
CVE-2026-76742
39İzleyin
Authentication Bypass in the Web Management Interface of AOS-S
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
hewlett packard enterprise (hpe) · aos-switch (aos-s)6 Eki 2026
CVE-2026-76743
39İzleyin
Authentication Bypass Vulnerability in the Management Interface of AOS-S
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
hewlett packard enterprise (hpe) · aos-switch (aos-s)6 Eki 2026
CVE-2026-76744
39İzleyin
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
hewlett packard enterprise (hpe) · aos-switch (aos-s)6 Eki 2026
CVE-2026-76745
38İzleyin
Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S
KritikCVSS 9,6İstismar yokEPSS %0
- Girişsiz RCE
- Bellek hatası
hewlett packard enterprise (hpe) · aos-switch (aos-s)6 Eki 2026
CVE-2026-76746
37İzleyin
Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-S
KritikCVSS 9,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
hewlett packard enterprise (hpe) · aos-switch (aos-s)6 Eki 2026
CVE-2026-76747
36İzleyin
Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
hewlett packard enterprise (hpe) · aos-switch (aos-s)6 Eki 2026
CVE-2026-76748
35İzleyin
Authenticated Privilege Escalation Vulnerability in the API of AOS-S
YüksekCVSS 8,8İstismar yokEPSS %0
hewlett packard enterprise (hpe) · aos-switch (aos-s)6 Eki 2026
CVE-2026-76750
39İzleyin
Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
- Deserializasyon
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-76751
39İzleyin
Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-76752
39İzleyin
Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-76753
39İzleyin
Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-76754
39İzleyin
Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
- SQL enjeksiyonu
- Komut enjeksiyonu
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79794
36İzleyin
Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
KritikCVSS 9,1İstismar yokEPSS %0
- SQL enjeksiyonu
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79796
39İzleyin
Authentication Bypass Vulnerabilities in ClearPass Policy Manager
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79797
35İzleyin
Improper Access Control in HPE Networking ClearPass Android Client Application
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79798
39İzleyin
Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface
KritikCVSS 9,9İstismar yokEPSS %0
- SQL enjeksiyonu
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79799
35İzleyin
Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface
YüksekCVSS 8,8İstismar yokEPSS %0
- Girişsiz RCE
- XSS
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79800
35İzleyin
Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Yol geçişi
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79801
39İzleyin
Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79802
35İzleyin
Command Injection Vulnerability in the ClearPass Policy Manager Client Software
YüksekCVSS 8,8İstismar yokEPSS %1
- Girişsiz RCE
- Komut enjeksiyonu
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79803
35İzleyin
Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79805
39İzleyin
Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79806
31İzleyin
Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79807
31İzleyin
Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
- Zayıf kripto
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79808
31İzleyin
Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
- Bellek hatası
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79809
29İzleyin
Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass
YüksekCVSS 7,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79810
28İzleyin
Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager
YüksekCVSS 7,2İstismar yokEPSS %0
- RCE
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79811
28İzleyin
Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API
YüksekCVSS 7,2İstismar yokEPSS %0
- RCE
- SQL enjeksiyonu
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)6 Eki 2026
CVE-2026-79960
28İzleyin
Gitea deploy key pushes acting as the repository owner
YüksekCVSS 7,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
gitea · gitea6 Eki 2026
CVE-2026-89430
32İzleyin
Gitea push mirror SSRF and forced writes to internal Git hosts
YüksekCVSS 8,1İstismar yokEPSS %0
- SSRF
- Yarış durumu
gitea · gitea6 Eki 2026
CVE-2026-94114
32İzleyin
Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
apache software foundation · apache commons bcel6 Eki 2026
CVE-2026-94205
39İzleyin
Gitea fork workflow approval bypass through maintainer-triggered events
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
gitea · gitea6 Eki 2026
CVE-2026-95106
36İzleyin
Gitea review and execution mismatch through duplicate tree entries
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
gitea · gitea6 Eki 2026
CVE-2026-96399
30İzleyin
Gitea denial of service through external issue tracker patterns
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Bellek hatası
- Hizmet dışı bırakma
gitea · gitea6 Eki 2026
CVE-2026-96404
32İzleyin
Gitea installer authentication bypass for existing accounts
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
gitea · gitea6 Eki 2026
CVE-2026-96580
30İzleyin
Gitea Actions memory exhaustion through large static matrices
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
gitea · gitea6 Eki 2026
CVE-2026-101258
31İzleyin
Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
red hat · red hat enterprise linux 106 Eki 2026
CVE-2026-105811
28İzleyin
Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
YüksekCVSS 7,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
aws · qnabot-on-aws6 Eki 2026
CVE-2026-105812
35İzleyin
Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
aws · bedrock-agentcore-starter-toolkit6 Eki 2026
CVE-2026-106062
31İzleyin
Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
red hat · red hat enterprise linux 106 Eki 2026
CVE-2026-106455
30İzleyin
Backstage: Improper validation of MkDocs plugin configuration in TechDocs
YüksekCVSS 7,7İstismar yokEPSS %0
- SSRF
linuxfoundation · backstage plugin-techdocs-node6 Eki 2026
CVE-2026-106457
27İzleyin
Backstage: Insufficient audience validation in the Cloudflare Access auth provider
OrtaCVSS 6,8İstismar yokEPSS %0
- Kimlik doğrulama atlatma
backstage · backstage6 Eki 2026
CVE-2026-106459
34İzleyin
Backstage: Improper input validation in Sentry scaffolder actions
YüksekCVSS 8,5İstismar yokEPSS %0
- Bilgi sızıntısı
linuxfoundation · backstage/plugin-scaffolder-backend-module-sentry6 Eki 2026
CVE-2026-106486
34İzleyin
Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions
YüksekCVSS 8,5İstismar yokEPSS %0
- Yol geçişi
backstage · backstage6 Eki 2026
CVE-2026-106488
32İzleyin
Backstage: Improper authentication in the OIDC provider
YüksekCVSS 8,1İstismar yokEPSS %0
- Kimlik doğrulama atlatma
backstage · backstage6 Eki 2026
CVE-2026-106492
30İzleyin
Backstage: Improper preservation of access restrictions during service credential delegation
YüksekCVSS 7,6İstismar yokEPSS %0
backstage · backstage6 Eki 2026
CVE-2026-106494
17İzleyin
Backstage: Improper input validation in cloud storage URL readers
OrtaCVSS 4,4İstismar yokEPSS %0
- Yol geçişi
backstage · backstage6 Eki 2026
CVE-2026-106547
34İzleyin
HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata
YüksekCVSS 8,5İstismar yokEPSS %0
- RCE
- Bellek hatası
the hdf group · hdf56 Eki 2026
CVE-2026-106550
30İzleyin
Mozilla's Node-convict (version 6.2.2 and later) is vulnerable to a Denial of Service vulnerability caused by incomplete prototype‑pollution
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
mozilla · node-convict6 Eki 2026
CVE-2026-106553
30İzleyin
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
openbsd · openssh6 Eki 2026
CVE-2026-106555
30İzleyin
In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
openbsd · openssh6 Eki 2026
CVE-2026-43598
30İzleyin
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent a
YüksekCVSS 7,7İstismar yokEPSS %0
- RCE
amd · amd instinct™ mi2106 Eki 2026
CVE-2026-101023
36İzleyin
Gitea OAuth2 refresh token grant accepts access tokens
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
gitea · gitea6 Eki 2026
CVE-2026-105267
32İzleyin
Gitea tag delete route deletes releases without release permission
YüksekCVSS 8,1İstismar yokEPSS %0
gitea · gitea6 Eki 2026
CVE-2026-106498
30İzleyin
Backstage: Improper URL validation in catalog entity placeholder resolution
YüksekCVSS 7,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
linuxfoundation · backstage plugin-catalog-backend6 Eki 2026
CVE-2026-106500
34İzleyin
Backstage: Improper task state validation in Scaffolder backend
YüksekCVSS 8,5İstismar yokEPSS %0
linuxfoundation · backstage/plugin-scaffolder-backend6 Eki 2026
CVE-2026-106501
38İzleyin
Backstage: Sensitive information exposure in Scaffolder
KritikCVSS 9,6İstismar yokEPSS %0
- Bilgi sızıntısı
linuxfoundation · backstage/plugin-scaffolder-backend6 Eki 2026
CVE-2026-106503
32İzleyin
Backstage: Scaffolder action input authorization bypass
YüksekCVSS 8,1İstismar yokEPSS %0
linuxfoundation · backstage/plugin-scaffolder-backend6 Eki 2026
CVE-2026-106505
34İzleyin
Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend
YüksekCVSS 8,5İstismar yokEPSS %0
- RCE
linuxfoundation · backstage plugin-techdocs-node6 Eki 2026
CVE-2026-106509
35İzleyin
Backstage: Improper validation of MkDocs theme configuration in TechDocs
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
linuxfoundation · backstage plugin-techdocs-node6 Eki 2026
CVE-2026-65142
31İzleyin
NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data.
YüksekCVSS 7,8İstismar yokEPSS %0
- Deserializasyon
nvidia · model-optimizer6 Eki 2026
CVE-2026-86684
28İzleyin
Gitea push mirror local path check uses the repository owner
YüksekCVSS 7,1İstismar yokEPSS %0
- Erişim denetimi (IDOR)
gitea · gitea6 Eki 2026
CVE-2026-104335
35İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 8,8Kavram kanıtıEPSS %0
- RCE
- Erişim denetimi (IDOR)
langflow · langflow7 Eki 2026
CVE-2026-106583
31İzleyin
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
YüksekCVSS 7,8İstismar yokEPSS %0
openbsd · openssh7 Eki 2026
CVE-2026-104334
39İzleyin
Langflow OSS is affected by multiple vulnerabilities
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
langflow · langflow7 Eki 2026
CVE-2026-88962
35İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow7 Eki 2026
CVE-2026-93443
35İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow7 Eki 2026
CVE-2026-93445
35İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow7 Eki 2026
CVE-2026-93447
30İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 7,5İstismar yokEPSS %0
- Deserializasyon
langflow · langflow7 Eki 2026
CVE-2026-93449
35İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow7 Eki 2026
CVE-2026-93674
60Bu hafta
Langflow OSS is affected by multiple vulnerabilities
KritikCVSS 9,8SilahlaştırılmışEPSS %2
- Girişsiz RCE
langflow · langflow7 Eki 2026
CVE-2026-93675
39İzleyin
Langflow OSS is affected by multiple vulnerabilities
KritikCVSS 9,8İstismar yokEPSS %0
- Girişsiz RCE
langflow · langflow7 Eki 2026
CVE-2026-93678
30İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 7,6İstismar yokEPSS %0
- Erişim denetimi (IDOR)
langflow · langflow7 Eki 2026
CVE-2026-97655
35İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow7 Eki 2026
CVE-2026-97673
35İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow7 Eki 2026
CVE-2026-97674
32İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 8,1İstismar yokEPSS %0
- RCE
langflow · langflow7 Eki 2026
CVE-2026-97676
35İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow7 Eki 2026
CVE-2026-97678
35İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow7 Eki 2026
CVE-2026-97679
35İzleyin
Langflow OSS is affected by multiple vulnerabilities
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
langflow · langflow7 Eki 2026