Yayın tarihine göre
Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları
8.744 kayıt · 21 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 15 / 88
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-94581İstismar yok | An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thrbroadcom · fabric operating system · CWE-78 | Yüksek8,5 | — | %1,4 | 8 Eki 2026 |
30İzleyin | CVE-2026-94585İstismar yok | An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXGbroadcom · fabric operating system · CWE-288 | Yüksek7,7 | — | %0,1 | 8 Eki 2026 |
34İzleyin | CVE-2026-94586İstismar yok | A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operationbroadcom · fabric operating system · CWE-78 | Yüksek8,5 | — | %1,4 | 8 Eki 2026 |
30İzleyin | CVE-2026-103309İstismar yok | GPTranslate < 2.34.14 - Unauthenticated Stored XSS via REST API Translation Storageunknown · gptranslate · CWE-79 | Yüksek7,5 | — | %0,2 | 8 Eki 2026 |
39İzleyin | CVE-2026-103646İstismar yok | Ultimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' Parameterunknown · ultimate multisite · CWE-287 | Kritik9,8 | — | %0,3 | 8 Eki 2026 |
39İzleyin | CVE-2026-103692İstismar yok | Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Callunknown · frontend dashboard · CWE-269 | Kritik9,8 | — | %0,2 | 8 Eki 2026 |
37İzleyin | CVE-2026-107459İstismar yok | Openfind｜SecuShare Pro - OS Command Injectionopenfind · secushare pro · CWE-78 | Kritik9,3 | — | %1,4 | 8 Eki 2026 |
32İzleyin | CVE-2026-5047İstismar yok | A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files.broadcom · brocade sannav · CWE-922 | Yüksek8,2 | — | %0,1 | 8 Eki 2026 |
40Planlayın | CVE-2026-85097Kavram kanıtı | Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameterbricksforge · bricksforge · CWE-434 | Kritik9,8 | — | %3,2 | 8 Eki 2026 |
34İzleyin | CVE-2026-85421İstismar yok | A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0.broadcom · brocade active support connectivity gateway · CWE-306 | Yüksek8,7 | — | %0,2 | 8 Eki 2026 |
33İzleyin | CVE-2026-85422İstismar yok | A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the softwarbroadcom · brocade active support connectivity gateway · CWE-798 | Yüksek8,4 | — | %0,1 | 8 Eki 2026 |
34İzleyin | CVE-2026-85423İstismar yok | A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0.broadcom · brocade active support connectivity gateway · CWE-306 | Yüksek8,6 | — | %0,2 | 8 Eki 2026 |
34İzleyin | CVE-2026-85486İstismar yok | Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation.broadcom · brocade active support connectivity gateway · CWE-95 | Yüksek8,6 | — | %0,2 | 8 Eki 2026 |
34İzleyin | CVE-2026-85487İstismar yok | A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0.broadcom · brocade active support connectivity gateway · CWE-22 | Yüksek8,6 | — | %0,2 | 8 Eki 2026 |
28İzleyin | CVE-2026-85488İstismar yok | Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer.broadcom · brocade active support connectivity gateway · CWE-798 | Yüksek7,0 | — | %0,0 | 8 Eki 2026 |
34İzleyin | CVE-2026-85489İstismar yok | An authentication flaw exists in the Brocade ASCG administrative management service component.broadcom · brocade active support connectivity gateway · CWE-306 | Yüksek8,7 | — | %0,2 | 8 Eki 2026 |
30İzleyin | CVE-2026-85490İstismar yok | When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitibroadcom · brocade active support connectivity gateway · CWE-22 | Yüksek7,7 | — | %0,3 | 8 Eki 2026 |
34İzleyin | CVE-2026-87424İstismar yok | A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentbroadcom · brocade active support connectivity gateway · CWE-321 | Yüksek8,6 | — | %0,1 | 8 Eki 2026 |
30İzleyin | CVE-2026-87425İstismar yok | An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0.broadcom · brocade active support connectivity gateway · CWE-295 | Yüksek7,6 | — | %0,0 | 8 Eki 2026 |
33İzleyin | CVE-2026-87428İstismar yok | In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extbroadcom · brocade active support connectivity gateway · CWE-522 | Yüksek8,4 | — | %0,0 | 8 Eki 2026 |
34İzleyin | CVE-2026-93699İstismar yok | Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.webpros · wp toolkit · CWE-88 | Yüksek8,5 | — | %0,1 | 8 Eki 2026 |
38İzleyin | CVE-2026-105110İstismar yok | Iskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI Parameteriskratel · innbox · CWE-78 | Kritik9,3 | — | %3,0 | 8 Eki 2026 |
40Planlayın | CVE-2026-12260İstismar yok | SQL injection in the NetBoard CRM demo platformnetboard crm · netboard crm demo platform · CWE-89 | Kritik10,0 | — | %0,2 | 8 Eki 2026 |
32İzleyin | CVE-2026-66084İstismar yok | Apache DolphinScheduler: Project Authorization Bypass in the Task Definition with-upstream Endpointapache software foundation · apache dolphinscheduler · CWE-863 | Yüksek8,1 | — | %0,3 | 8 Eki 2026 |
32İzleyin | CVE-2026-66087İstismar yok | Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint Endpointapache software foundation · apache dolphinscheduler · CWE-863 | Yüksek8,1 | — | %0,2 | 8 Eki 2026 |
28İzleyin | CVE-2026-71183İstismar yok | Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwordsapache software foundation · apache dolphinscheduler · CWE-863 | Yüksek7,1 | — | %0,2 | 8 Eki 2026 |
28İzleyin | CVE-2026-71895İstismar yok | Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentialsapache software foundation · apache dolphinscheduler · CWE-862 | Yüksek7,1 | — | %0,2 | 8 Eki 2026 |
28İzleyin | CVE-2026-107503İstismar yok | In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including eclipse ditto · ditto explorer ui · CWE-15 | Yüksek7,1 | — | %0,2 | 8 Eki 2026 |
36İzleyin | CVE-2026-107510İstismar yok | Authenticated argument injection in NIOS command line leading to privilege escalationinfoblox · nios · CWE-88 | Kritik9,1 | — | %0,2 | 8 Eki 2026 |
31İzleyin | CVE-2026-103010İstismar yok | Heap-based Buffer Overflow in hMailServerprogressive robot ltd · hmailserver · CWE-122 | Yüksek7,8 | — | %0,1 | 8 Eki 2026 |
32İzleyin | CVE-2026-103647İstismar yok | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in hMailServerprogressive robot ltd · hmailserver · CWE-79 | Yüksek8,0 | — | %0,2 | 8 Eki 2026 |
30İzleyin | CVE-2026-103649İstismar yok | Synchronous Access of Remote Resource without Timeout in hMailServerprogressive robot ltd · hmailserver · CWE-1088 | Yüksek7,5 | — | %0,2 | 8 Eki 2026 |
31İzleyin | CVE-2026-104658İstismar yok | Reliance on Untrusted Inputs in a Security Decision in hMailServerprogressive robot ltd · hmailserver · CWE-807 | Yüksek7,8 | — | %0,1 | 8 Eki 2026 |
30İzleyin | CVE-2026-104659İstismar yok | Origin Validation Error in hMailServerprogressive robot ltd · hmailserver · CWE-346 | Yüksek7,5 | — | %0,1 | 8 Eki 2026 |
31İzleyin | CVE-2026-104660İstismar yok | Missing Authorization in hMailServerprogressive robot ltd · hmailserver · CWE-862 | Yüksek7,8 | — | %0,1 | 8 Eki 2026 |
29İzleyin | CVE-2026-104704İstismar yok | Cleartext Transmission of Sensitive Information in hMailServerprogressive robot ltd · hmailserver · CWE-319 | Yüksek7,4 | — | %0,1 | 8 Eki 2026 |
31İzleyin | CVE-2026-107573İstismar yok | Incorrect Default Permissions in hMailServerprogressive robot ltd · hmailserver · CWE-276 | Yüksek7,8 | — | %0,1 | 8 Eki 2026 |
30İzleyin | CVE-2026-107574İstismar yok | Inefficient Algorithmic Complexity in hMailServerprogressive robot ltd · hmailserver · CWE-407 | Yüksek7,5 | — | %0,4 | 8 Eki 2026 |
30İzleyin | CVE-2026-107576İstismar yok | Inefficient Algorithmic Complexity in hMailServerprogressive robot ltd · hmailserver · CWE-407 | Yüksek7,5 | — | %0,4 | 8 Eki 2026 |
30İzleyin | CVE-2026-107577İstismar yok | Loop with Unreachable Exit Condition ('Infinite Loop') in hMailServerprogressive robot ltd · hmailserver · CWE-835 | Yüksek7,5 | — | %0,4 | 8 Eki 2026 |
30İzleyin | CVE-2026-107579İstismar yok | Inefficient Algorithmic Complexity in hMailServerprogressive robot ltd · hmailserver · CWE-407 | Yüksek7,5 | — | %0,3 | 8 Eki 2026 |
29İzleyin | CVE-2026-107584İstismar yok | Not Failing Securely ('Failing Open') in hMailServerprogressive robot ltd · hmailserver · CWE-636 | Yüksek7,4 | — | %0,1 | 8 Eki 2026 |
35İzleyin | CVE-2026-19083İstismar yok | IDOR in AKIN Software's OctoCloudakin software computer import-export industry and trade co. ltd. · octocloud · CWE-639 | Yüksek8,8 | — | %0,2 | 8 Eki 2026 |
39İzleyin | CVE-2026-92555Kavram kanıtı | Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panelakin software computer import-export industry and trade co. ltd. · akinsoft wolvox control panel · CWE-201 | Kritik9,8 | — | %0,3 | 8 Eki 2026 |
34İzleyin | CVE-2026-102784İstismar yok | Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0balbooa.com · gridbox extension for joomla · CWE-352 | Yüksek8,7 | — | %0,1 | 8 Eki 2026 |
30İzleyin | CVE-2026-105076İstismar yok | WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerabilityappsbd · vitepos · CWE-89 | Yüksek7,6 | — | %0,2 | 8 Eki 2026 |
28İzleyin | CVE-2026-106611İstismar yok | WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerabilitywpmu dev · forminator · CWE-352 | Yüksek7,1 | — | %0,1 | 8 Eki 2026 |
30İzleyin | CVE-2026-16169İstismar yok | IBM DataPower Gateway Denial of Serviceibm · datapower gateway · CWE-400 | Yüksek7,5 | — | %0,3 | 8 Eki 2026 |
30İzleyin | CVE-2026-16170İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Yüksek7,5 | — | %0,3 | 8 Eki 2026 |
30İzleyin | CVE-2026-16176İstismar yok | IBM DataPower Gateway Denial of Serviceibm · datapower gateway · CWE-770 | Yüksek7,5 | — | %0,3 | 8 Eki 2026 |
30İzleyin | CVE-2026-16178İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Yüksek7,5 | — | %0,3 | 8 Eki 2026 |
30İzleyin | CVE-2026-16179İstismar yok | IBM DataPower Gateway Buffer Underwriteibm · datapower gateway · CWE-124 | Yüksek7,5 | — | %0,3 | 8 Eki 2026 |
29İzleyin | CVE-2026-16181İstismar yok | IBM DataPower Gateway Improper Authorizationibm · datapower gateway · CWE-285 | Yüksek7,4 | — | %0,3 | 8 Eki 2026 |
39İzleyin | CVE-2026-16340İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Kritik9,8 | — | %0,4 | 8 Eki 2026 |
36İzleyin | CVE-2026-19218İstismar yok | Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezztaakin software computer import-export industry and trade co. ltd. · myrezzta · CWE-640 | Kritik9,1 | — | %0,2 | 8 Eki 2026 |
34İzleyin | CVE-2026-44031İstismar yok | Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of serviceoffis · dcmtk · CWE-674 | Yüksek8,7 | — | %0,3 | 8 Eki 2026 |
35İzleyin | CVE-2026-62142İstismar yok | WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerabilitymelapress · wp 2fa · CWE-352 | Yüksek8,8 | — | %0,1 | 8 Eki 2026 |
28İzleyin | CVE-2026-66479İstismar yok | WordPress WPComplete plugin <= 2.9.5.6 - CSRF to Stored XSS vulnerabilityliquid web / stellarwp · wpcomplete · CWE-352 | Yüksek7,1 | — | %0,0 | 8 Eki 2026 |
37İzleyin | CVE-2026-103663Kavram kanıtı | Path Traversal leading to Remote Code Execution in Ollamaollama · ollama · CWE-23 | Kritik9,4 | — | %0,7 | 8 Eki 2026 |
28İzleyin | CVE-2026-107611İstismar yok | Out-of-bounds read in TightVNC Viewer ZRLE palette decodingglavsoft · tightvnc · CWE-125 | Yüksek7,1 | — | %0,2 | 8 Eki 2026 |
31İzleyin | CVE-2026-107612İstismar yok | World-accessible IPC shared memory with predictable name in TightVNC Serverglavsoft · tightvnc · CWE-338 | Yüksek7,8 | — | %0,1 | 8 Eki 2026 |
31İzleyin | CVE-2026-107615İstismar yok | DLL search order hijacking via screenhooks libraries in TightVNC Serverglavsoft · tightvnc · CWE-427 | Yüksek7,8 | — | %0,1 | 8 Eki 2026 |
37İzleyin | CVE-2026-14990İstismar yok | IBM DataPower Gateway affected by cross-site scriptingibm · datapower gateway 10.6.0 · CWE-79 | Kritik9,3 | — | %0,3 | 8 Eki 2026 |
39İzleyin | CVE-2026-14991İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Kritik9,8 | — | %0,4 | 8 Eki 2026 |
39İzleyin | CVE-2026-15762İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Kritik9,8 | — | %0,5 | 8 Eki 2026 |
32İzleyin | CVE-2026-15781İstismar yok | IBM DataPower Gateway Buffer Overflowibm · datapower gateway · CWE-121 | Yüksek8,0 | — | %0,3 | 8 Eki 2026 |
32İzleyin | CVE-2026-15784İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Yüksek8,1 | — | %0,3 | 8 Eki 2026 |
30İzleyin | CVE-2026-15819İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Yüksek7,5 | — | %0,3 | 8 Eki 2026 |
30İzleyin | CVE-2026-15822İstismar yok | IBM DataPower Gateway Denial of Serviceibm · datapower gateway · CWE-405 | Yüksek7,5 | — | %0,3 | 8 Eki 2026 |
32İzleyin | CVE-2026-15824İstismar yok | IBM DataPower Gateway Denial of Serviceibm · datapower gateway · CWE-787 | Yüksek8,2 | — | %0,3 | 8 Eki 2026 |
30İzleyin | CVE-2026-16111İstismar yok | IBM DataPower Gateway Type Confusionibm · datapower gateway · CWE-843 | Yüksek7,5 | — | %0,2 | 8 Eki 2026 |
34İzleyin | CVE-2026-16159İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Yüksek8,6 | — | %0,2 | 8 Eki 2026 |
30İzleyin | CVE-2026-16161İstismar yok | IBM DataPower Gateway Out-of-bounds Readibm · datapower gateway · CWE-125 | Yüksek7,5 | — | %0,3 | 8 Eki 2026 |
34İzleyin | CVE-2026-16163İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Yüksek8,6 | — | %0,2 | 8 Eki 2026 |
30İzleyin | CVE-2026-16164İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Yüksek7,5 | — | %0,3 | 8 Eki 2026 |
30İzleyin | CVE-2026-16165İstismar yok | IBM DataPower Gateway NULL Pointer Dereferenceibm · datapower gateway · CWE-476 | Yüksek7,5 | — | %0,3 | 8 Eki 2026 |
30İzleyin | CVE-2026-16167İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Yüksek7,5 | — | %0,3 | 8 Eki 2026 |
29İzleyin | CVE-2026-91844İstismar yok | Remote Code Execution via Unrestricted File Upload in İzometri Informatics' eimzamipi̇zometri it services domestic and foreign trade co. ltd. · eimzamip · CWE-434 | Yüksek7,3 | — | %0,1 | 8 Eki 2026 |
34İzleyin | CVE-2026-105830İstismar yok | league/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParserthephpleague · commonmark · CWE-400 | Yüksek8,7 | — | %0,3 | 8 Eki 2026 |
33İzleyin | CVE-2026-105833İstismar yok | EspoCRM before 10.0.5 IDOR via PersonalAccount Service Exposes IMAP Passwordsespocrm · espocrm · CWE-522 | Yüksek8,3 | — | %0,2 | 8 Eki 2026 |
30İzleyin | CVE-2026-107286İstismar yok | Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends earlypydantic · pydantic ai · CWE-772 | Yüksek7,5 | — | %0,4 | 8 Eki 2026 |
30İzleyin | CVE-2026-107589İstismar yok | Authentication Bypass by Spoofing in Jacamar CIjacamar ci · jacamar ci · CWE-290 | Yüksek7,5 | — | %0,1 | 8 Eki 2026 |
19İzleyin | CVE-2026-107604İstismar yok | Keycloak-services: keycloak-services: view-clients role allows retrieval of active client secrets via installation provider endpointsred hat · red hat build of keycloak · CWE-200 | Orta4,9 | — | %0,2 | 8 Eki 2026 |
17İzleyin | CVE-2026-107623İstismar yok | Keycloak-services: keycloak-services: oidc dcr read-modify-write silently disables offline token revocationred hat · red hat build of keycloak · CWE-862 | Orta4,3 | — | %0,1 | 8 Eki 2026 |
28İzleyin | CVE-2026-107636İstismar yok | pH7Builder before 18.5.1 Payment Bypass via Payment Module MainControllerph7software · ph7builder · CWE-472 | Yüksek7,1 | — | %0,3 | 8 Eki 2026 |
30İzleyin | CVE-2026-107638İstismar yok | pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.phpph7software · ph7builder · CWE-307 | Yüksek7,6 | — | %0,3 | 8 Eki 2026 |
34İzleyin | CVE-2026-107639İstismar yok | ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filenameilias-elearning e.v. · ilias · CWE-88 | Yüksek8,7 | — | %0,6 | 8 Eki 2026 |
37İzleyin | CVE-2026-107640İstismar yok | Integrics Enswitch 3.13 through 4.4 Authentication Bypass via Password Reset APIintegrics · enswitch · CWE-640 | Kritik9,3 | — | %0,3 | 8 Eki 2026 |
39İzleyin | CVE-2026-14269İstismar yok | IBM DataPower Gateway Buffer Overflowibm · datapower gateway · CWE-122 | Kritik9,8 | — | %0,4 | 8 Eki 2026 |
32İzleyin | CVE-2026-14496İstismar yok | IBM DataPower Gateway Out-of-bounds Readibm · datapower gateway · CWE-125 | Yüksek8,2 | — | %0,2 | 8 Eki 2026 |
32İzleyin | CVE-2026-14497İstismar yok | IBM DataPower Gateway Improper Verification of Cryptographic Signatureibm · datapower gateway · CWE-347 | Yüksek8,1 | — | %0,5 | 8 Eki 2026 |
39İzleyin | CVE-2026-14502İstismar yok | IBM DataPower Gateway Improper Authenticationibm · datapower gateway · CWE-287 | Kritik9,8 | — | %0,3 | 8 Eki 2026 |
30İzleyin | CVE-2026-14507İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Yüksek7,7 | — | %0,2 | 8 Eki 2026 |
36İzleyin | CVE-2026-14508İstismar yok | IBM DataPower Gateway Use After Freeibm · datapower gateway · CWE-416 | Kritik9,1 | — | %0,2 | 8 Eki 2026 |
39İzleyin | CVE-2026-14888İstismar yok | IBM DataPower Gateway Buffer Overflowibm · datapower gateway · CWE-122 | Kritik9,8 | — | %0,3 | 8 Eki 2026 |
32İzleyin | CVE-2026-14905İstismar yok | IBM DataPower Gateway XXEibm · datapower gateway · CWE-611 | Yüksek8,2 | — | %0,3 | 8 Eki 2026 |
39İzleyin | CVE-2026-14988İstismar yok | IBM DataPower Gateway Out-of-bounds Readibm · datapower gateway · CWE-125 | Kritik9,8 | — | %0,2 | 8 Eki 2026 |
39İzleyin | CVE-2026-14992İstismar yok | IBM DataPower Gateway Out-of-bounds Writeibm · datapower gateway · CWE-787 | Kritik9,8 | — | %0,3 | 8 Eki 2026 |
30İzleyin | CVE-2026-14999İstismar yok | IBM DataPower Gateway Improper Verification of Cryptographic Signatureibm · datapower gateway · CWE-347 | Yüksek7,5 | — | %0,1 | 8 Eki 2026 |
30İzleyin | CVE-2026-93017İstismar yok | Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-readerred hat · red hat openshift container platform 4 · CWE-269 | Yüksek7,7 | — | %0,4 | 8 Eki 2026 |
- CVE-2026-9458134İzleyin
An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thr
YüksekCVSS 8,5İstismar yokEPSS %1broadcom · fabric operating system8 Eki 2026
- CVE-2026-9458530İzleyin
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG
YüksekCVSS 7,7İstismar yokEPSS %0broadcom · fabric operating system8 Eki 2026
- CVE-2026-9458634İzleyin
A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operation
YüksekCVSS 8,5İstismar yokEPSS %1broadcom · fabric operating system8 Eki 2026
- CVE-2026-10330930İzleyin
GPTranslate < 2.34.14 - Unauthenticated Stored XSS via REST API Translation Storage
YüksekCVSS 7,5İstismar yokEPSS %0unknown · gptranslate8 Eki 2026
- CVE-2026-10364639İzleyin
Ultimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' Parameter
KritikCVSS 9,8İstismar yokEPSS %0unknown · ultimate multisite8 Eki 2026
- CVE-2026-10369239İzleyin
Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call
KritikCVSS 9,8İstismar yokEPSS %0unknown · frontend dashboard8 Eki 2026
- CVE-2026-10745937İzleyin
Openfind｜SecuShare Pro - OS Command Injection
KritikCVSS 9,3İstismar yokEPSS %1openfind · secushare pro8 Eki 2026
- CVE-2026-504732İzleyin
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files.
YüksekCVSS 8,2İstismar yokEPSS %0broadcom · brocade sannav8 Eki 2026
- CVE-2026-8509740Planlayın
Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
KritikCVSS 9,8Kavram kanıtıEPSS %3bricksforge · bricksforge8 Eki 2026
- CVE-2026-8542134İzleyin
A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0.
YüksekCVSS 8,7İstismar yokEPSS %0broadcom · brocade active support connectivity gateway8 Eki 2026
- CVE-2026-8542233İzleyin
A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the softwar
YüksekCVSS 8,4İstismar yokEPSS %0broadcom · brocade active support connectivity gateway8 Eki 2026
- CVE-2026-8542334İzleyin
A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0.
YüksekCVSS 8,6İstismar yokEPSS %0broadcom · brocade active support connectivity gateway8 Eki 2026
- CVE-2026-8548634İzleyin
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation.
YüksekCVSS 8,6İstismar yokEPSS %0broadcom · brocade active support connectivity gateway8 Eki 2026
- CVE-2026-8548734İzleyin
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0.
YüksekCVSS 8,6İstismar yokEPSS %0broadcom · brocade active support connectivity gateway8 Eki 2026
- CVE-2026-8548828İzleyin
Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer.
YüksekCVSS 7,0İstismar yokEPSS %0broadcom · brocade active support connectivity gateway8 Eki 2026
- CVE-2026-8548934İzleyin
An authentication flaw exists in the Brocade ASCG administrative management service component.
YüksekCVSS 8,7İstismar yokEPSS %0broadcom · brocade active support connectivity gateway8 Eki 2026
- CVE-2026-8549030İzleyin
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to saniti
YüksekCVSS 7,7İstismar yokEPSS %0broadcom · brocade active support connectivity gateway8 Eki 2026
- CVE-2026-8742434İzleyin
A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authent
YüksekCVSS 8,6İstismar yokEPSS %0broadcom · brocade active support connectivity gateway8 Eki 2026
- CVE-2026-8742530İzleyin
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0.
YüksekCVSS 7,6İstismar yokEPSS %0broadcom · brocade active support connectivity gateway8 Eki 2026
- CVE-2026-8742833İzleyin
In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can ext
YüksekCVSS 8,4İstismar yokEPSS %0broadcom · brocade active support connectivity gateway8 Eki 2026
- CVE-2026-9369934İzleyin
Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.
YüksekCVSS 8,5İstismar yokEPSS %0webpros · wp toolkit8 Eki 2026
- CVE-2026-10511038İzleyin
Iskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI Parameter
KritikCVSS 9,3İstismar yokEPSS %3iskratel · innbox8 Eki 2026
- CVE-2026-1226040Planlayın
SQL injection in the NetBoard CRM demo platform
KritikCVSS 10,0İstismar yokEPSS %0netboard crm · netboard crm demo platform8 Eki 2026
- CVE-2026-6608432İzleyin
Apache DolphinScheduler: Project Authorization Bypass in the Task Definition with-upstream Endpoint
YüksekCVSS 8,1İstismar yokEPSS %0apache software foundation · apache dolphinscheduler8 Eki 2026
- CVE-2026-6608732İzleyin
Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint Endpoint
YüksekCVSS 8,1İstismar yokEPSS %0apache software foundation · apache dolphinscheduler8 Eki 2026
- CVE-2026-7118328İzleyin
Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwords
YüksekCVSS 7,1İstismar yokEPSS %0apache software foundation · apache dolphinscheduler8 Eki 2026
- CVE-2026-7189528İzleyin
Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials
YüksekCVSS 7,1İstismar yokEPSS %0apache software foundation · apache dolphinscheduler8 Eki 2026
- CVE-2026-10750328İzleyin
In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including
YüksekCVSS 7,1İstismar yokEPSS %0eclipse ditto · ditto explorer ui8 Eki 2026
- CVE-2026-10751036İzleyin
Authenticated argument injection in NIOS command line leading to privilege escalation
KritikCVSS 9,1İstismar yokEPSS %0infoblox · nios8 Eki 2026
- CVE-2026-10301031İzleyin
Heap-based Buffer Overflow in hMailServer
YüksekCVSS 7,8İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-10364732İzleyin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in hMailServer
YüksekCVSS 8,0İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-10364930İzleyin
Synchronous Access of Remote Resource without Timeout in hMailServer
YüksekCVSS 7,5İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-10465831İzleyin
Reliance on Untrusted Inputs in a Security Decision in hMailServer
YüksekCVSS 7,8İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-10465930İzleyin
Origin Validation Error in hMailServer
YüksekCVSS 7,5İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-10466031İzleyin
Missing Authorization in hMailServer
YüksekCVSS 7,8İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-10470429İzleyin
Cleartext Transmission of Sensitive Information in hMailServer
YüksekCVSS 7,4İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-10757331İzleyin
Incorrect Default Permissions in hMailServer
YüksekCVSS 7,8İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-10757430İzleyin
Inefficient Algorithmic Complexity in hMailServer
YüksekCVSS 7,5İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-10757630İzleyin
Inefficient Algorithmic Complexity in hMailServer
YüksekCVSS 7,5İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-10757730İzleyin
Loop with Unreachable Exit Condition ('Infinite Loop') in hMailServer
YüksekCVSS 7,5İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-10757930İzleyin
Inefficient Algorithmic Complexity in hMailServer
YüksekCVSS 7,5İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-10758429İzleyin
Not Failing Securely ('Failing Open') in hMailServer
YüksekCVSS 7,4İstismar yokEPSS %0progressive robot ltd · hmailserver8 Eki 2026
- CVE-2026-1908335İzleyin
IDOR in AKIN Software's OctoCloud
YüksekCVSS 8,8İstismar yokEPSS %0akin software computer import-export industry and trade co. ltd. · octocloud8 Eki 2026
- CVE-2026-9255539İzleyin
Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel
KritikCVSS 9,8Kavram kanıtıEPSS %0akin software computer import-export industry and trade co. ltd. · akinsoft wolvox control panel8 Eki 2026
- CVE-2026-10278434İzleyin
Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0
YüksekCVSS 8,7İstismar yokEPSS %0balbooa.com · gridbox extension for joomla8 Eki 2026
- CVE-2026-10507630İzleyin
WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0appsbd · vitepos8 Eki 2026
- CVE-2026-10661128İzleyin
WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wpmu dev · forminator8 Eki 2026
- CVE-2026-1616930İzleyin
IBM DataPower Gateway Denial of Service
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1617030İzleyin
IBM DataPower Gateway Out-of-bounds Write
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1617630İzleyin
IBM DataPower Gateway Denial of Service
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1617830İzleyin
IBM DataPower Gateway Out-of-bounds Write
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1617930İzleyin
IBM DataPower Gateway Buffer Underwrite
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1618129İzleyin
IBM DataPower Gateway Improper Authorization
YüksekCVSS 7,4İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1634039İzleyin
IBM DataPower Gateway Out-of-bounds Write
KritikCVSS 9,8İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1921836İzleyin
Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezzta
KritikCVSS 9,1İstismar yokEPSS %0akin software computer import-export industry and trade co. ltd. · myrezzta8 Eki 2026
- CVE-2026-4403134İzleyin
Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service
YüksekCVSS 8,7İstismar yokEPSS %0offis · dcmtk8 Eki 2026
- CVE-2026-6214235İzleyin
WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0melapress · wp 2fa8 Eki 2026
- CVE-2026-6647928İzleyin
WordPress WPComplete plugin <= 2.9.5.6 - CSRF to Stored XSS vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0liquid web / stellarwp · wpcomplete8 Eki 2026
- CVE-2026-10366337İzleyin
Path Traversal leading to Remote Code Execution in Ollama
KritikCVSS 9,4Kavram kanıtıEPSS %0ollama · ollama8 Eki 2026
- CVE-2026-10761128İzleyin
Out-of-bounds read in TightVNC Viewer ZRLE palette decoding
YüksekCVSS 7,1İstismar yokEPSS %0glavsoft · tightvnc8 Eki 2026
- CVE-2026-10761231İzleyin
World-accessible IPC shared memory with predictable name in TightVNC Server
YüksekCVSS 7,8İstismar yokEPSS %0glavsoft · tightvnc8 Eki 2026
- CVE-2026-10761531İzleyin
DLL search order hijacking via screenhooks libraries in TightVNC Server
YüksekCVSS 7,8İstismar yokEPSS %0glavsoft · tightvnc8 Eki 2026
- CVE-2026-1499037İzleyin
IBM DataPower Gateway affected by cross-site scripting
KritikCVSS 9,3İstismar yokEPSS %0ibm · datapower gateway 10.6.08 Eki 2026
- CVE-2026-1499139İzleyin
IBM DataPower Gateway Out-of-bounds Write
KritikCVSS 9,8İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1576239İzleyin
IBM DataPower Gateway Out-of-bounds Write
KritikCVSS 9,8İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1578132İzleyin
IBM DataPower Gateway Buffer Overflow
YüksekCVSS 8,0İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1578432İzleyin
IBM DataPower Gateway Out-of-bounds Write
YüksekCVSS 8,1İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1581930İzleyin
IBM DataPower Gateway Out-of-bounds Write
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1582230İzleyin
IBM DataPower Gateway Denial of Service
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1582432İzleyin
IBM DataPower Gateway Denial of Service
YüksekCVSS 8,2İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1611130İzleyin
IBM DataPower Gateway Type Confusion
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1615934İzleyin
IBM DataPower Gateway Out-of-bounds Write
YüksekCVSS 8,6İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1616130İzleyin
IBM DataPower Gateway Out-of-bounds Read
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1616334İzleyin
IBM DataPower Gateway Out-of-bounds Write
YüksekCVSS 8,6İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1616430İzleyin
IBM DataPower Gateway Out-of-bounds Write
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1616530İzleyin
IBM DataPower Gateway NULL Pointer Dereference
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1616730İzleyin
IBM DataPower Gateway Out-of-bounds Write
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-9184429İzleyin
Remote Code Execution via Unrestricted File Upload in İzometri Informatics' eimzamip
YüksekCVSS 7,3İstismar yokEPSS %0i̇zometri it services domestic and foreign trade co. ltd. · eimzamip8 Eki 2026
- CVE-2026-10583034İzleyin
league/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParser
YüksekCVSS 8,7İstismar yokEPSS %0thephpleague · commonmark8 Eki 2026
- CVE-2026-10583333İzleyin
EspoCRM before 10.0.5 IDOR via PersonalAccount Service Exposes IMAP Passwords
YüksekCVSS 8,3İstismar yokEPSS %0espocrm · espocrm8 Eki 2026
- CVE-2026-10728630İzleyin
Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early
YüksekCVSS 7,5İstismar yokEPSS %0pydantic · pydantic ai8 Eki 2026
- CVE-2026-10758930İzleyin
Authentication Bypass by Spoofing in Jacamar CI
YüksekCVSS 7,5İstismar yokEPSS %0jacamar ci · jacamar ci8 Eki 2026
- CVE-2026-10760419İzleyin
Keycloak-services: keycloak-services: view-clients role allows retrieval of active client secrets via installation provider endpoints
OrtaCVSS 4,9İstismar yokEPSS %0red hat · red hat build of keycloak8 Eki 2026
- CVE-2026-10762317İzleyin
Keycloak-services: keycloak-services: oidc dcr read-modify-write silently disables offline token revocation
OrtaCVSS 4,3İstismar yokEPSS %0red hat · red hat build of keycloak8 Eki 2026
- CVE-2026-10763628İzleyin
pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController
YüksekCVSS 7,1İstismar yokEPSS %0ph7software · ph7builder8 Eki 2026
- CVE-2026-10763830İzleyin
pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.php
YüksekCVSS 7,6İstismar yokEPSS %0ph7software · ph7builder8 Eki 2026
- CVE-2026-10763934İzleyin
ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename
YüksekCVSS 8,7İstismar yokEPSS %0ilias-elearning e.v. · ilias8 Eki 2026
- CVE-2026-10764037İzleyin
Integrics Enswitch 3.13 through 4.4 Authentication Bypass via Password Reset API
KritikCVSS 9,3İstismar yokEPSS %0integrics · enswitch8 Eki 2026
- CVE-2026-1426939İzleyin
IBM DataPower Gateway Buffer Overflow
KritikCVSS 9,8İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1449632İzleyin
IBM DataPower Gateway Out-of-bounds Read
YüksekCVSS 8,2İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1449732İzleyin
IBM DataPower Gateway Improper Verification of Cryptographic Signature
YüksekCVSS 8,1İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1450239İzleyin
IBM DataPower Gateway Improper Authentication
KritikCVSS 9,8İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1450730İzleyin
IBM DataPower Gateway Out-of-bounds Write
YüksekCVSS 7,7İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1450836İzleyin
IBM DataPower Gateway Use After Free
KritikCVSS 9,1İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1488839İzleyin
IBM DataPower Gateway Buffer Overflow
KritikCVSS 9,8İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1490532İzleyin
IBM DataPower Gateway XXE
YüksekCVSS 8,2İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1498839İzleyin
IBM DataPower Gateway Out-of-bounds Read
KritikCVSS 9,8İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1499239İzleyin
IBM DataPower Gateway Out-of-bounds Write
KritikCVSS 9,8İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-1499930İzleyin
IBM DataPower Gateway Improper Verification of Cryptographic Signature
YüksekCVSS 7,5İstismar yokEPSS %0ibm · datapower gateway8 Eki 2026
- CVE-2026-9301730İzleyin
Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader
YüksekCVSS 7,7İstismar yokEPSS %0red hat · red hat openshift container platform 48 Eki 2026