İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

5.300 kayıt · 12 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 13 / 53

  • CVE-2026-97680
    33İzleyin

    Langflow OSS is affected by multiple vulnerabilities

    YüksekCVSS 8,3İstismar yokEPSS %0

    langflow · langflow7 Eki 2026

  • CVE-2026-102478
    34İzleyin

    In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing access

    YüksekCVSS 8,7İstismar yokEPSS %0

    octopus deploy · octopus server7 Eki 2026

  • CVE-2026-105324
    36İzleyin

    An HTTP header injection vulnerability was found in the ADM

    KritikCVSS 9,2İstismar yokEPSS %0

    asustor inc. · adm7 Eki 2026

  • CVE-2026-106471
    32İzleyin

    Candlepin: candlepin: broken object-level authorization via verifyauthorizationfilter multi-@verify hasaccess latching

    YüksekCVSS 8,1İstismar yokEPSS %0

    red hat · red hat satellite 67 Eki 2026

  • CVE-2026-16528
    33İzleyin

    Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credent

    YüksekCVSS 8,4İstismar yokEPSS %0

    asus · router7 Eki 2026

  • CVE-2026-19386
    37İzleyin

    A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configu

    KritikCVSS 9,3İstismar yokEPSS %0

    asus · router7 Eki 2026

  • CVE-2026-19396
    30İzleyin

    A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an u

    YüksekCVSS 7,7İstismar yokEPSS %0

    asus · router7 Eki 2026

  • CVE-2026-14911
    37İzleyin

    Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a remote attacker to read

    KritikCVSS 9,3İstismar yokEPSS %0

    asus · router7 Eki 2026

  • CVE-2026-16516
    36İzleyin

    wolfSSH ECDSA host key curve not validated against negotiated algorithm

    KritikCVSS 9,0İstismar yokEPSS %0

    wolfssh · wolfssh7 Eki 2026

  • CVE-2026-83540
    30İzleyin

    wolfSSHd on Windows race condition leading to logon token reused across connections

    YüksekCVSS 7,7İstismar yokEPSS %0

    wolfssh · wolfssh7 Eki 2026

  • CVE-2026-19572
    37İzleyin

    FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    flexera · flexnet publisher7 Eki 2026

  • CVE-2026-102173
    28İzleyin

    Kirki – Freeform Page Builder, Website Builder & Customizer <= 6.3.1 - Unauthenticated Stored Cross-Site Scripting via Registration Metadata

    YüksekCVSS 7,2İstismar yokEPSS %0

    themeum · kirki – freeform page builder, website builder & customizer7 Eki 2026

  • CVE-2026-59346
    37İzleyin

    VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    vmware · vmware workstation7 Eki 2026

  • CVE-2026-59347
    32İzleyin

    VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    vmware · vmware workstation7 Eki 2026

  • CVE-2026-104677
    28İzleyin

    WP Coder 4.0 - 4.5.1 - Editor+ RCE via Global PHP

    YüksekCVSS 7,2İstismar yokEPSS %0

    unknown · wp coder7 Eki 2026

  • CVE-2026-105316
    28İzleyin

    Magee Shortcodes <= 2.1.1 - Reflected XSS via live_preview and magee_create_shortcode Actions

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · magee shortcodes7 Eki 2026

  • CVE-2026-82211
    32İzleyin

    Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Completion and Order Key Disclosure

    YüksekCVSS 8,2İstismar yokEPSS %0

    unknown · nexi xpay build7 Eki 2026

  • CVE-2026-82212
    30İzleyin

    Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · nexi xpay build7 Eki 2026

  • CVE-2026-87782
    35İzleyin

    Koinonia Link 1.1.2 - 1.1.4 - Subscriber+ Privilege Escalation to Administrator

    YüksekCVSS 8,8İstismar yokEPSS %0

    unknown · koinonia link7 Eki 2026

  • CVE-2026-87971
    28İzleyin

    If-So Dynamic Content 1.4.4 - 1.10.1 - Reflected XSS via 'message' Parameter

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · if-so dynamic content7 Eki 2026

  • CVE-2026-97188
    35İzleyin

    String Locator < 2.6.8 - Unauthenticated PHP Object Injection via Database Editor

    YüksekCVSS 8,8İstismar yokEPSS %0

    unknown · string locator7 Eki 2026

  • CVE-2025-64393
    37İzleyin

    This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.

    KritikCVSS 9,4İstismar yokEPSS %0

    veeam · backup and replication7 Eki 2026

  • CVE-2026-102782
    37İzleyin

    Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    ordasoft.com · ordasoft simple membership extension for joomla7 Eki 2026

  • CVE-2026-103416
    37İzleyin

    Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message

    KritikCVSS 9,3İstismar yokEPSS %0

    eclipse foundation · eclipse threadx - netx duo7 Eki 2026

  • CVE-2026-107102
    37İzleyin

    Account Takeover Vulnerability in Manacle Technologies ERP System

    KritikCVSS 9,3İstismar yokEPSS %0

    manacle technologies · multi-tenant erp system7 Eki 2026

  • CVE-2026-107103
    37İzleyin

    SQL Injection Vulnerability in Manacle Technologies ERP System

    KritikCVSS 9,3İstismar yokEPSS %0

    manacle technologies · multi-tenant erp system7 Eki 2026

  • CVE-2026-107104
    37İzleyin

    Unsafe Deserialization Vulnerability in Manacle Technologies ERP System

    KritikCVSS 9,3İstismar yokEPSS %0

    manacle technologies · multi-tenant erp system7 Eki 2026

  • CVE-2026-15894
    35İzleyin

    Bluetooth Mesh solicitation PDU stack buffer overflow via oversized advertisement

    YüksekCVSS 8,8İstismar yokEPSS %0

    zephyrproject · zephyr7 Eki 2026

  • CVE-2026-19186
    32İzleyin

    Integer underflow in IEEE 802.15.4 frame decryption leads to out-of-bounds read and write

    YüksekCVSS 8,1İstismar yokEPSS %0

    zephyrproject · zephyr7 Eki 2026

  • CVE-2026-58069
    33İzleyin

    This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provide

    YüksekCVSS 8,3İstismar yokEPSS %0

    veeam · backup and replication7 Eki 2026

  • CVE-2026-5703
    28İzleyin

    Path Traversal in Satel Iberia SenNet Datalogger Serie 200

    YüksekCVSS 7,1İstismar yokEPSS %0

    satel iberia · sennet datalogger serie 2007 Eki 2026

  • CVE-2026-89417
    28İzleyin

    OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. <= 6.3.10 - Unauthenticated Stored Cross-Site Scripting via 's' Search Parameter in comments-atom Feed

    YüksekCVSS 7,2İstismar yokEPSS %0

    daanvandenbergh · omgf | gdpr/dsgvo compliant, faster google fonts. easy.7 Eki 2026

  • CVE-2026-97720
    36İzleyin

    Apache Impala: Impala Executor Webserver Auth Bypass

    KritikCVSS 9,1İstismar yokEPSS %0

    apache software foundation · apache impala7 Eki 2026

  • CVE-2026-105192
    39İzleyin

    LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    lmcache · lmcache7 Eki 2026

  • CVE-2026-42720
    30İzleyin

    WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    sarah giles · dynamic user directory7 Eki 2026

  • CVE-2026-42721
    30İzleyin

    WordPress affiliate-toolkit plugin <= 3.9.1 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    servit software solutions · affiliate-toolkit7 Eki 2026

  • CVE-2026-103668
    35İzleyin

    An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an

    YüksekCVSS 8,8İstismar yokEPSS %0

    six apart ltd. · movable type cloud edition7 Eki 2026

  • CVE-2026-42713
    30İzleyin

    WordPress Post title marquee scroll plugin <= 9.9 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    gopiplus · post title marquee scroll7 Eki 2026

  • CVE-2026-42714
    30İzleyin

    WordPress Pix por Piggly (para Woocommerce) plugin <= 2.1.2 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    piggly dev · pix por piggly (para woocommerce)7 Eki 2026

  • CVE-2026-92531
    30İzleyin

    Improper Neutralization of Special Elements used in an OS Command in BugTracker.NET

    YüksekCVSS 7,5İstismar yokEPSS %0

    bugtracker.net · bugtracker.net7 Eki 2026

  • CVE-2026-92532
    30İzleyin

    Unrestricted Upload of File with Dangerous Type in BugTracker.NET

    YüksekCVSS 7,5İstismar yokEPSS %0

    bugtracker.net · bugtracker.net7 Eki 2026

  • CVE-2026-92533
    28İzleyin

    Path Traversal in BugTracker.NET

    YüksekCVSS 7,1İstismar yokEPSS %0

    bugtracker.net · bugtracker.net7 Eki 2026

  • CVE-2026-96408
    37İzleyin

    A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbit

    KritikCVSS 9,3İstismar yokEPSS %0

    six apart ltd. · movable type cloud edition7 Eki 2026

  • CVE-2026-106056
    30İzleyin

    Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting

    YüksekCVSS 7,7İstismar yokEPSS %1

    rundeck · rundeck7 Eki 2026

  • CVE-2026-106057
    34İzleyin

    patool before 4.0.6 OS Command Injection on Windows via shell_quote_nt

    YüksekCVSS 8,5İstismar yokEPSS %0

    wummel · patool7 Eki 2026

  • CVE-2026-106058
    30İzleyin

    GitAhead through 2.7.1 OS Command Injection via Git Filter Filenames

    YüksekCVSS 7,7İstismar yokEPSS %1

    gitahead · gitahead7 Eki 2026

  • CVE-2026-106059
    34İzleyin

    GitAhead through 2.7.1 on macOS Command Injection via Show in Finder AppleScript

    YüksekCVSS 8,7İstismar yokEPSS %1

    gitahead · gitahead7 Eki 2026

  • CVE-2026-107159
    28İzleyin

    MiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX Header

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    miniupnp project · miniupnpd7 Eki 2026

  • CVE-2026-42708
    30İzleyin

    WordPress WP Post Author plugin <= 4.0.0 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    af themes · wp post author7 Eki 2026

  • CVE-2026-42710
    30İzleyin

    WordPress Slider by 10Web plugin <= 1.2.63 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    10web · slider by 10web7 Eki 2026

  • CVE-2026-102255
    40Planlayın

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path.

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    sonicwall · sma10007 Eki 2026

  • CVE-2026-102256
    31İzleyin

    Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi

    YüksekCVSS 7,8İstismar yokEPSS %0

    sonicwall · sma10007 Eki 2026

  • CVE-2026-103435
    30İzleyin

    Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code

    YüksekCVSS 7,7İstismar yokEPSS %0

    anthropic · @anthropic-ai/claude-code7 Eki 2026

  • CVE-2026-105138
    28İzleyin

    Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API

    YüksekCVSS 7,1İstismar yokEPSS %0

    obot-platform · obot7 Eki 2026

  • CVE-2026-107162
    30İzleyin

    Express Gateway through 1.16.11 OAuth 2.0 Refresh Token Validation Bypass

    YüksekCVSS 7,6İstismar yokEPSS %0

    expressgateway · express-gateway7 Eki 2026

  • CVE-2026-107177
    29İzleyin

    Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokens

    YüksekCVSS 7,4İstismar yokEPSS %0

    expressgateway · express-gateway7 Eki 2026

  • CVE-2026-107180
    28İzleyin

    MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances

    YüksekCVSS 7,1İstismar yokEPSS %0

    misp · misp7 Eki 2026

  • CVE-2026-102257
    28İzleyin

    A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the

    YüksekCVSS 7,2İstismar yokEPSS %0

    sonicwall · sma10007 Eki 2026

  • CVE-2026-107181
    34İzleyin

    Telegram Desktop before 7.2.9 IPC Record Injection File Exfiltration via interpret: Scheme

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    telegram · telegram desktop7 Eki 2026

  • CVE-2026-107183
    36İzleyin

    llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parser

    KritikCVSS 9,2İstismar yokEPSS %0

    ggml-org · llama.cpp7 Eki 2026

  • CVE-2026-107194
    36İzleyin

    Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially

    KritikCVSS 9,2İstismar yokEPSS %0

    sungrow · isolarcloud7 Eki 2026

  • CVE-2026-42616
    31İzleyin

    In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfsca

    YüksekCVSS 7,8İstismar yokEPSS %0

    tuxera · ntfs-3g7 Eki 2026

  • CVE-2026-42617
    28İzleyin

    In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corrupt heap memory in th

    YüksekCVSS 7,1İstismar yokEPSS %0

    tuxera · ntfs-3g7 Eki 2026

  • CVE-2026-42618
    28İzleyin

    In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of

    YüksekCVSS 7,1İstismar yokEPSS %0

    tuxera · ntfs-3g7 Eki 2026

  • CVE-2026-43976
    28İzleyin

    wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)

    YüksekCVSS 7,1İstismar yokEPSS %0

    wger-project · wger7 Eki 2026

  • CVE-2026-46434
    28İzleyin

    wger: Trainer Privilege Escalation - Improper Privilege Management

    YüksekCVSS 7,1İstismar yokEPSS %0

    wger-project · wger7 Eki 2026

  • CVE-2026-46569
    30İzleyin

    In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt

    YüksekCVSS 7,7İstismar yokEPSS %0

    tuxera · ntfs-3g7 Eki 2026

  • CVE-2026-46572
    29İzleyin

    In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt hea

    YüksekCVSS 7,4İstismar yokEPSS %0

    tuxera · ntfs-3g7 Eki 2026

  • CVE-2025-70516
    36İzleyin

    The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless user

    KritikCVSS 9,1İstismar yokEPSS %0

    7 Eki 2026

  • CVE-2025-70517
    35İzleyin

    The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing r

    YüksekCVSS 8,8İstismar yokEPSS %0

    7 Eki 2026

  • CVE-2025-70518
    40Planlayın

    The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely.

    KritikCVSS 10,0İstismar yokEPSS %0

    7 Eki 2026

  • CVE-2025-70520
    39İzleyin

    The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless user

    KritikCVSS 9,8İstismar yokEPSS %0

    7 Eki 2026

  • CVE-2025-70521
    39İzleyin

    The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely.

    KritikCVSS 9,8İstismar yokEPSS %0

    7 Eki 2026

  • CVE-2025-70522
    35İzleyin

    The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing r

    YüksekCVSS 8,8İstismar yokEPSS %0

    7 Eki 2026

  • CVE-2026-106510
    30İzleyin

    Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml

    YüksekCVSS 7,7İstismar yokEPSS %0

    linuxfoundation · backstage plugin-techdocs-node7 Eki 2026

  • CVE-2026-106556
    30İzleyin

    Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization

    YüksekCVSS 7,7İstismar yokEPSS %0

    linuxfoundation · backstage7 Eki 2026

  • CVE-2026-106558
    35İzleyin

    Backstage: Improper validation of TechDocs MkDocs configuration

    YüksekCVSS 8,8İstismar yokEPSS %0

    linuxfoundation · backstage plugin-techdocs-node7 Eki 2026

  • CVE-2026-107202
    36İzleyin

    A command injection vulnerability exists in the h-ui (version v0.0.25 and below) administrative API due to improper validation of the listen

    KritikCVSS 9,1İstismar yokEPSS %0

    jonssonyan · h-ui7 Eki 2026

  • CVE-2026-46570
    32İzleyin

    In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt

    YüksekCVSS 8,1İstismar yokEPSS %0

    tuxera · ntfs-3g7 Eki 2026

  • CVE-2026-77214
    33İzleyin

    libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer

    YüksekCVSS 8,3İstismar yokEPSS %0

    libexpat · libexpat7 Eki 2026

  • CVE-2026-107204
    37İzleyin

    LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint

    KritikCVSS 9,3İstismar yokEPSS %0

    lmcache · lmcache7 Eki 2026

  • CVE-2026-107205
    35İzleyin

    LMCache through 0.5.5 Missing Authentication in MP Coordinator Fleet Control API

    YüksekCVSS 8,8İstismar yokEPSS %0

    lmcache · lmcache7 Eki 2026

  • CVE-2026-107206
    35İzleyin

    LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API

    YüksekCVSS 8,8İstismar yokEPSS %0

    lmcache · lmcache7 Eki 2026

  • CVE-2026-107270
    28İzleyin

    Gophish through 0.12.1 Object Takeover via Client-Supplied ID on API Create Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    gophish · gophish7 Eki 2026

  • CVE-2026-92414
    37İzleyin

    Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens

    KritikCVSS 9,3İstismar yokEPSS %0

    apache · jackrabbit7 Eki 2026

  • CVE-2026-106557
    30İzleyin

    Backstage: Improper input validation in TechDocs Markdown extension configuration

    YüksekCVSS 7,7İstismar yokEPSS %0

    backstage · backstage7 Eki 2026

  • CVE-2026-20032
    17İzleyin

    Cisco NX-OS Software Python Sandbox Escape Vulnerability

    OrtaCVSS 4,4İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-20038
    23İzleyin

    Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerability

    OrtaCVSS 5,8İstismar yokEPSS %0

    cisco · cisco nx-os system software in aci mode7 Eki 2026

  • CVE-2026-20173
    23İzleyin

    Cisco NX-OS Software Denial of Service Vulnerability

    OrtaCVSS 5,8İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-20328
    36İzleyin

    Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability

    KritikCVSS 9,1İstismar yokEPSS %0

    cisco · cisco license on-prem7 Eki 2026

  • CVE-2026-20362
    28İzleyin

    Cisco Finesse Server-Side Request Forgery Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    cisco · cisco finesse7 Eki 2026

  • CVE-2026-62176
    36İzleyin

    PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

    KritikCVSS 9,1İstismar yokEPSS %0

    mervinpraison · praisonai7 Eki 2026

  • CVE-2026-62251
    32İzleyin

    Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query

    YüksekCVSS 8,1İstismar yokEPSS %0

    sipcapture · homer7 Eki 2026

  • CVE-2026-62252
    39İzleyin

    Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login

    KritikCVSS 9,8İstismar yokEPSS %0

    sipcapture · homer7 Eki 2026

  • CVE-2026-62253
    39İzleyin

    Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)

    KritikCVSS 9,8İstismar yokEPSS %0

    sipcapture · homer7 Eki 2026

  • CVE-2026-76453
    35İzleyin

    Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76454
    36İzleyin

    Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability

    KritikCVSS 9,1İstismar yokEPSS %0

    cisco · cisco license on-prem7 Eki 2026

  • CVE-2026-76455
    39İzleyin

    Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities

    KritikCVSS 9,8İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76456
    34İzleyin

    Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Input Validation Vulnerabilities

    YüksekCVSS 8,6İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76457
    34İzleyin

    Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Read Vulnerabilities

    YüksekCVSS 8,6İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026