İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

6.290 kayıt · 12 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 14 / 63

  • CVE-2026-76453
    35İzleyin

    Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76454
    36İzleyin

    Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability

    KritikCVSS 9,1İstismar yokEPSS %0

    cisco · cisco license on-prem7 Eki 2026

  • CVE-2026-76455
    39İzleyin

    Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities

    KritikCVSS 9,8İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76456
    34İzleyin

    Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Input Validation Vulnerabilities

    YüksekCVSS 8,6İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76457
    34İzleyin

    Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Read Vulnerabilities

    YüksekCVSS 8,6İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76458
    34İzleyin

    Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Handling of Exceptional Conditions Vulnerabilities

    YüksekCVSS 8,6İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76459
    39İzleyin

    Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities

    KritikCVSS 9,8İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76463
    35İzleyin

    Cisco Meraki Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    cisco · cisco campus gateway software7 Eki 2026

  • CVE-2026-76464
    38İzleyin

    Cisco Meraki Hardening Release October 2026 - Buffer Management Vulnerabilities

    KritikCVSS 9,6İstismar yokEPSS %0

    cisco · cisco campus gateway software7 Eki 2026

  • CVE-2026-76465
    39İzleyin

    Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76467
    30İzleyin

    Cisco Meraki Software Hardening Release - Resource Lifetime Management Vulnerabilities

    YüksekCVSS 7,5İstismar yokEPSS %0

    cisco · cisco campus gateway software7 Eki 2026

  • CVE-2026-76468
    32İzleyin

    Cisco Meraki Hardening Release - Input Validation Vulnerabilities

    YüksekCVSS 8,2İstismar yokEPSS %0

    cisco · cisco campus gateway software7 Eki 2026

  • CVE-2026-76469
    29İzleyin

    Cisco Meraki Security Hardening Release: October 2026 Insufficient Control Flow Management Vulnerabilities

    YüksekCVSS 7,4İstismar yokEPSS %0

    cisco · cisco campus gateway software7 Eki 2026

  • CVE-2026-76470
    35İzleyin

    Cisco Meraki Hardening Release - Incorrect Calculation Vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    cisco · cisco campus gateway software7 Eki 2026

  • CVE-2026-76471
    39İzleyin

    Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76472
    35İzleyin

    Cisco Meraki Security Hardening Release October 2026 - Improper Neutralization of Special Elements Vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    cisco · cisco campus gateway software7 Eki 2026

  • CVE-2026-76480
    39İzleyin

    Cisco License On-Prem Security Hardening Release

    KritikCVSS 9,8İstismar yokEPSS %0

    cisco · cisco license on-prem7 Eki 2026

  • CVE-2026-76482
    40Planlayın

    Cisco License On-Prem Security Hardening Release

    KritikCVSS 10,0İstismar yokEPSS %0

    cisco · cisco license on-prem7 Eki 2026

  • CVE-2026-76483
    36İzleyin

    Cisco License On-Prem Security Hardening Release

    KritikCVSS 9,1İstismar yokEPSS %0

    cisco · cisco license on-prem7 Eki 2026

  • CVE-2026-76484
    35İzleyin

    Cisco License On-Prem Security Hardening Release

    YüksekCVSS 8,8İstismar yokEPSS %0

    cisco · cisco license on-prem7 Eki 2026

  • CVE-2026-76485
    39İzleyin

    Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76486
    39İzleyin

    Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-76488
    26İzleyin

    Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    cisco · cisco application policy infrastructure controller (apic)7 Eki 2026

  • CVE-2026-76498
    39İzleyin

    Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities

    KritikCVSS 9,8İstismar yokEPSS %0

    cisco · cisco application policy infrastructure controller (apic)7 Eki 2026

  • CVE-2026-76499
    39İzleyin

    Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities

    KritikCVSS 9,8İstismar yokEPSS %0

    cisco · cisco application policy infrastructure controller (apic)7 Eki 2026

  • CVE-2026-76500
    39İzleyin

    Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities

    KritikCVSS 9,8İstismar yokEPSS %0

    cisco · cisco application policy infrastructure controller (apic)7 Eki 2026

  • CVE-2026-76501
    39İzleyin

    Cisco Nexus 9000 Series Switches SRv6 OAM (NGOAM) Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    cisco · cisco nx-os software7 Eki 2026

  • CVE-2026-92543
    30İzleyin

    Docker Engine insecure-registry fallback via malicious DNS responses

    YüksekCVSS 7,6İstismar yokEPSS %0

    docker · docker engine7 Eki 2026

  • CVE-2026-94662
    28İzleyin

    WordPress Unlimited Elements For Elementor plugin <= 2.0.19 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    unlimited elements · unlimited elements for elementor (free widgets, addons, templates)7 Eki 2026

  • CVE-2026-94670
    28İzleyin

    WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    everest forms · everest forms7 Eki 2026

  • CVE-2026-95534
    35İzleyin

    WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    unlimited elements · unlimited elements for elementor (free widgets, addons, templates)7 Eki 2026

  • CVE-2026-95595
    28İzleyin

    WordPress Disable and Remove Google Fonts | GDPR & DSGVO friendly plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    fontsplugin · disable and remove google fonts | gdpr & dsgvo friendly7 Eki 2026

  • CVE-2026-95605
    37İzleyin

    WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    passionate programmer peter · wp data access7 Eki 2026

  • CVE-2026-95606
    39İzleyin

    WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    liquid web / stellarwp · the events calendar7 Eki 2026

  • CVE-2026-107211
    34İzleyin

    Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic

    YüksekCVSS 8,7İstismar yokEPSS %0

    excelize · excelize7 Eki 2026

  • CVE-2026-107212
    30İzleyin

    Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days

    YüksekCVSS 7,5İstismar yokEPSS %0

    excelize · excelize7 Eki 2026

  • CVE-2026-107213
    34İzleyin

    Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element

    YüksekCVSS 8,7İstismar yokEPSS %0

    excelize · excelize7 Eki 2026

  • CVE-2026-107214
    30İzleyin

    Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks

    YüksekCVSS 7,5İstismar yokEPSS %0

    excelize · excelize7 Eki 2026

  • CVE-2026-107215
    30İzleyin

    Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS

    YüksekCVSS 7,5İstismar yokEPSS %0

    excelize · excelize7 Eki 2026

  • CVE-2026-107216
    30İzleyin

    Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

    YüksekCVSS 7,5İstismar yokEPSS %0

    excelize · excelize7 Eki 2026

  • CVE-2026-56851
    30İzleyin

    Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

    YüksekCVSS 7,5İstismar yokEPSS %0

    golang.org/x/text · golang.org/x/text/secure/precis7 Eki 2026

  • CVE-2026-96335
    30İzleyin

    WordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpmu dev · forminator7 Eki 2026

  • CVE-2026-103371
    30İzleyin

    Apache Geode: Management REST API: Insertion of Sensitive Information into Log File

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache software foundation · apache geode7 Eki 2026

  • CVE-2026-106164
    29İzleyin

    Infinite Loop in Telerik Document Processing XLS Import

    YüksekCVSS 7,3İstismar yokEPSS %0

    progress software · telerik document processing libraries7 Eki 2026

  • CVE-2026-107217
    30İzleyin

    Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows

    YüksekCVSS 7,5İstismar yokEPSS %0

    excelize · excelize7 Eki 2026

  • CVE-2026-107219
    30İzleyin

    Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile

    YüksekCVSS 7,5İstismar yokEPSS %0

    excelize · excelize7 Eki 2026

  • CVE-2026-107223
    28İzleyin

    Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the proces

    YüksekCVSS 7,1İstismar yokEPSS %0

    excelize · excelize7 Eki 2026

  • CVE-2026-107161
    30İzleyin

    Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat enterprise linux 107 Eki 2026

  • CVE-2026-34499
    34İzleyin

    Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable.

    YüksekCVSS 8,5İstismar yokEPSS %0

    johnson controls · advms7 Eki 2026

  • CVE-2026-97714
    32İzleyin

    Denial of service vulnerability in Secure Access

    YüksekCVSS 8,2İstismar yokEPSS %0

    absolute security · secure access7 Eki 2026

  • CVE-2026-97715
    28İzleyin

    Denial of Service in Absolute Secure Access

    YüksekCVSS 7,1İstismar yokEPSS %0

    absolute security · secure access7 Eki 2026

  • CVE-2026-97716
    34İzleyin

    Denial of Service in Absolute Secure Access

    YüksekCVSS 8,7İstismar yokEPSS %0

    absolute security · secure access7 Eki 2026

  • CVE-2026-107227
    30İzleyin

    AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled

    YüksekCVSS 7,5İstismar yokEPSS %0

    asynchttpclient · async-http-client7 Eki 2026

  • CVE-2026-76265
    26İzleyin

    Improper Access Control through REST API Endpoints in Splunk Secure Gateway

    OrtaCVSS 6,5İstismar yokEPSS %0

    splunk · splunk7 Eki 2026

  • CVE-2026-76266
    30İzleyin

    Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise

    YüksekCVSS 7,7İstismar yokEPSS %0

    splunk · splunk7 Eki 2026

  • CVE-2026-76268
    39İzleyin

    Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    splunk · splunk7 Eki 2026

  • CVE-2026-76281
    21İzleyin

    Improper Access Control in Splunk Enterprise

    OrtaCVSS 5,3İstismar yokEPSS %0

    splunk · splunk7 Eki 2026

  • CVE-2026-76282
    35İzleyin

    Improper Control of a Resource Through its Lifetime in Splunk Enterprise

    YüksekCVSS 8,8İstismar yokEPSS %0

    splunk · splunk7 Eki 2026

  • CVE-2026-76283
    30İzleyin

    Protection Mechanism Failure in Splunk Enterprise

    YüksekCVSS 7,6İstismar yokEPSS %0

    splunk · splunk7 Eki 2026

  • CVE-2026-76284
    39İzleyin

    Improper Neutralization in Splunk Enterprise

    KritikCVSS 9,8İstismar yokEPSS %0

    splunk · splunk7 Eki 2026

  • CVE-2026-76285
    39İzleyin

    Improper Adherence to Coding Standards in Splunk Enterprise

    KritikCVSS 9,8İstismar yokEPSS %0

    splunk · splunk7 Eki 2026

  • CVE-2026-105816
    32İzleyin

    Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

    YüksekCVSS 8,0İstismar yokEPSS %0

    hashicorp · vault7 Eki 2026

  • CVE-2026-107230
    29İzleyin

    AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins

    YüksekCVSS 7,4İstismar yokEPSS %0

    asynchttpclient · async-http-client7 Eki 2026

  • CVE-2026-107231
    34İzleyin

    AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext

    YüksekCVSS 8,7İstismar yokEPSS %0

    asynchttpclient · async-http-client7 Eki 2026

  • CVE-2026-107232
    30İzleyin

    AsyncHttpClient: Origin credentials sent in cleartext to a proxy that rejects the CONNECT

    YüksekCVSS 7,5İstismar yokEPSS %0

    asynchttpclient · async-http-client7 Eki 2026

  • CVE-2026-107279
    35İzleyin

    AsyncHttpClient: Digest mutual authentication is switched off by a peer offering qop=auth-int

    YüksekCVSS 8,8İstismar yokEPSS %0

    asynchttpclient · async-http-client7 Eki 2026

  • CVE-2026-107281
    30İzleyin

    AsyncHttpClient: Connection pool key omits the authenticated principal, so an NTLM or Negotiate connection is reused across identities

    YüksekCVSS 7,6İstismar yokEPSS %0

    asynchttpclient · async-http-client7 Eki 2026

  • CVE-2026-107282
    37İzleyin

    AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host

    KritikCVSS 9,4İstismar yokEPSS %0

    asynchttpclient · async-http-client7 Eki 2026

  • CVE-2026-89322
    28İzleyin

    Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions

    YüksekCVSS 7,2İstismar yokEPSS %0

    hashicorp · vault7 Eki 2026

  • CVE-2026-87679
    34İzleyin

    When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings in

    YüksekCVSS 8,5İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87680
    35İzleyin

    A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated u

    YüksekCVSS 8,5İstismar yokEPSS %1

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87681
    28İzleyin

    An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before

    YüksekCVSS 7,1İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-102488
    34İzleyin

    In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obta

    YüksekCVSS 8,7İstismar yokEPSS %0

    octopus deploy · octopus server8 Eki 2026

  • CVE-2026-82627
    30İzleyin

    Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Inject

    YüksekCVSS 7,5İstismar yokEPSS %0

    uncannyowl · uncanny automator – ai + automation for wordpress | ai agent, ai page builder, free ai usage included8 Eki 2026

  • CVE-2026-87682
    34İzleyin

    Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS version

    YüksekCVSS 8,6İstismar yokEPSS %1

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87683
    34İzleyin

    Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.

    YüksekCVSS 8,6İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87659
    28İzleyin

    A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1.

    YüksekCVSS 7,1İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87671
    28İzleyin

    An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1.

    YüksekCVSS 7,1İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87684
    34İzleyin

    A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1.

    YüksekCVSS 8,7İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-94578
    30İzleyin

    Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Account

    YüksekCVSS 7,5İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87660
    28İzleyin

    An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS ve

    YüksekCVSS 7,0İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87666
    35İzleyin

    An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.

    YüksekCVSS 8,6İstismar yokEPSS %2

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87667
    33İzleyin

    An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d

    YüksekCVSS 8,4İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87673
    29İzleyin

    An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d an

    YüksekCVSS 7,0İstismar yokEPSS %1

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87674
    34İzleyin

    A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 throug

    YüksekCVSS 8,5İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87675
    29İzleyin

    An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.

    YüksekCVSS 7,3İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87685
    33İzleyin

    An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.

    YüksekCVSS 8,4İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87687
    34İzleyin

    An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.

    YüksekCVSS 8,5İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87688
    34İzleyin

    An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management

    YüksekCVSS 8,5İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-17196
    35İzleyin

    Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute

    YüksekCVSS 8,8İstismar yokEPSS %0

    webrehab · super forms – drag & drop form builder8 Eki 2026

  • CVE-2026-17609
    36İzleyin

    Super Forms <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter

    KritikCVSS 9,1İstismar yokEPSS %0

    webrehab · super forms – drag & drop form builder8 Eki 2026

  • CVE-2026-87662
    28İzleyin

    Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter str

    YüksekCVSS 7,0İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87663
    28İzleyin

    An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versio

    YüksekCVSS 7,1İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-87664
    34İzleyin

    A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1

    YüksekCVSS 8,5İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-94577
    29İzleyin

    A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric

    YüksekCVSS 7,3İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-94581
    34İzleyin

    An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thr

    YüksekCVSS 8,5İstismar yokEPSS %1

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-94585
    30İzleyin

    An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG

    YüksekCVSS 7,7İstismar yokEPSS %0

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-94586
    34İzleyin

    A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operation

    YüksekCVSS 8,5İstismar yokEPSS %1

    broadcom · fabric operating system8 Eki 2026

  • CVE-2026-103309
    30İzleyin

    GPTranslate < 2.34.14 - Unauthenticated Stored XSS via REST API Translation Storage

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · gptranslate8 Eki 2026

  • CVE-2026-103646
    39İzleyin

    Ultimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' Parameter

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · ultimate multisite8 Eki 2026