İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

6.189 kayıt · 12 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 25 / 62

  • CVE-2026-109638
    28İzleyin

    Frappe ERPNext before 15.110.0 SQL Injection via Missing Input Validation

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109639
    28İzleyin

    Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requests

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109640
    28İzleyin

    Frappe ERPNext before 16.22.0 Missing Authorization Allows Unauthorized Record Modification

    YüksekCVSS 7,2İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109643
    28İzleyin

    Frappe ERPNext before 15.111.0 Missing Authorization Exposes Project Data

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109644
    28İzleyin

    Frappe ERPNext before 15.119.0 Unauthorized Access to Valuation Data

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109645
    28İzleyin

    Frappe ERPNext before 15.119.0 Unauthorized Record Creation via Missing Authorization

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109646
    28İzleyin

    Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109647
    28İzleyin

    Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109648
    28İzleyin

    Frappe ERPNext before 15.106.0 SQL Injection via Missing Input Validation

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109649
    28İzleyin

    Frappe ERPNext before 15.102.0 SQL Injection via Unvalidated Endpoint Requests

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109650
    28İzleyin

    Frappe ERPNext before 15.112.0 Missing Authorization Exposes Personal Data

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109652
    34İzleyin

    Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fields

    YüksekCVSS 8,7İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109653
    34İzleyin

    Frappe ERPNext before 15.119.0 Stored XSS Leading to Account Takeover

    YüksekCVSS 8,5İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109655
    28İzleyin

    Frappe ERPNext before 15.115.0 Missing Authorization in Inventory Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109656
    28İzleyin

    Frappe ERPNext before 15.118.2 Unauthorized Item Master Data Access

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109658
    28İzleyin

    Frappe ERPNext before 15.115.0 Missing Authorization on Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109659
    28İzleyin

    Frappe ERPNext before 15.113.0 Missing Authorization Exposes Financial Data

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109660
    28İzleyin

    Frappe ERPNext before 15.112.0 Missing Authorization in Production Record Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109661
    28İzleyin

    Frappe ERPNext before 15.116.0 Missing Authorization Exposes Financial Data

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109663
    28İzleyin

    Frappe ERPNext before 15.113.0 SQL Injection via Unvalidated Endpoint Parameters

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109666
    28İzleyin

    Frappe ERPNext before 15.110.0 Missing Authorization in Inventory Record Endpoints

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109667
    34İzleyin

    Frappe ERPNext before 15.111.0 Privilege Escalation via Unauthorized Record Creation

    YüksekCVSS 8,7İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109671
    34İzleyin

    Frappe ERPNext before 15.113.0 Stored XSS via Profile Field in Portal Pages

    YüksekCVSS 8,5İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109672
    28İzleyin

    Frappe ERPNext before 15.118.0 Missing Authorization Exposes Financial Data

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109673
    34İzleyin

    Frappe ERPNext before 16.12.0 Stored XSS via Crafted Record Names

    YüksekCVSS 8,5İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-109674
    28İzleyin

    Frappe ERPNext before 16.6.0 SQL Injection via Missing Input Validation

    YüksekCVSS 7,1İstismar yokEPSS %0

    frappe · erpnext12 Eki 2026

  • CVE-2026-17475
    28İzleyin

    IBM Planning Analytics Local is affected by security vulnerabilities

    YüksekCVSS 7,1İstismar yokEPSS %0

    ibm · planning analytics12 Eki 2026

  • CVE-2026-19620
    35İzleyin

    IBM Planning Analytics Local is affected by security vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · planning analytics12 Eki 2026

  • CVE-2026-19622
    39İzleyin

    IBM Planning Analytics Local is affected by security vulnerabilities

    KritikCVSS 9,8İstismar yokEPSS %0

    ibm · planning analytics12 Eki 2026

  • CVE-2026-19627
    32İzleyin

    IBM Planning Analytics Local is affected by security vulnerabilities

    YüksekCVSS 8,2İstismar yokEPSS %0

    ibm · planning analytics12 Eki 2026

  • CVE-2026-75061
    30İzleyin

    IBM Planning Analytics Local is affected by security vulnerabilities

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · planning analytics12 Eki 2026

  • CVE-2026-75095
    30İzleyin

    IBM Aspera Enterprise Webapps Denial of Service

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · aspera enterprise webapps12 Eki 2026

  • CVE-2026-75782
    31İzleyin

    IBM Aspera Enterprise Webapps Untrusted Search Path

    YüksekCVSS 7,8İstismar yokEPSS %0

    ibm · aspera enterprise webapps12 Eki 2026

  • CVE-2026-82096
    35İzleyin

    DataStage on Cloud Pak for Data Command Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data12 Eki 2026

  • CVE-2026-82101
    38İzleyin

    DataStage on Cloud Pak for Data Path Traversal

    KritikCVSS 9,6İstismar yokEPSS %0

    ibm · datastage on cloud pak for data12 Eki 2026

  • CVE-2026-82108
    35İzleyin

    DataStage on Cloud Pak for Data Code Injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    ibm · datastage on cloud pak for data12 Eki 2026

  • CVE-2026-82110
    39İzleyin

    DataStage on Cloud Pak for Data Path Traversal

    KritikCVSS 9,9İstismar yokEPSS %0

    ibm · datastage on cloud pak for data12 Eki 2026

  • CVE-2026-84418
    29İzleyin

    DataStage on Cloud Pak for Data Improper Certificate Validation

    YüksekCVSS 7,4İstismar yokEPSS %0

    ibm · datastage on cloud pak for data12 Eki 2026

  • CVE-2026-85457
    32İzleyin

    IBM Planning Analytics Local is affected by security vulnerabilities

    YüksekCVSS 8,1İstismar yokEPSS %0

    ibm · planning analytics12 Eki 2026

  • CVE-2026-93891
    30İzleyin

    Security Vulnerability identified in IBM TRIRIGA - XXE

    YüksekCVSS 7,6İstismar yokEPSS %0

    ibm · tririga application platform12 Eki 2026

  • CVE-2026-93892
    32İzleyin

    Security Vulnerability identified in IBM TRIRIGA - Information Disclosure in Admin Console

    YüksekCVSS 8,1İstismar yokEPSS %0

    ibm · tririga application platform12 Eki 2026

  • CVE-2026-81858
    32İzleyin

    IBM i is Affected By A Denial of Service Vulnerability in Host Servers

    YüksekCVSS 8,1İstismar yokEPSS %0

    ibm · i13 Eki 2026

  • CVE-2026-96119
    39İzleyin

    IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI

    KritikCVSS 9,9İstismar yokEPSS %0

    ibm · i13 Eki 2026

  • CVE-2026-58249
    30İzleyin

    Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    sap_se · sap netweaver and sap web dispatcher (internet communication manager)13 Eki 2026

  • CVE-2026-87689
    39İzleyin

    Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints

    KritikCVSS 9,8İstismar yokEPSS %0

    rapid7 · metasploit framework13 Eki 2026

  • CVE-2026-89107
    39İzleyin

    Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)

    KritikCVSS 9,9İstismar yokEPSS %0

    sap_se · sap s/4hana (manage substitution/validation rules)13 Eki 2026

  • CVE-2026-89108
    36İzleyin

    Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)

    KritikCVSS 9,1İstismar yokEPSS %0

    sap_se · sap manufacturing integration and intelligence (configuration service)13 Eki 2026

  • CVE-2026-89110
    39İzleyin

    Broken Access Control in SAP NetWeaver Visual Composer

    KritikCVSS 9,9İstismar yokEPSS %0

    sap_se · sap netweaver visual composer13 Eki 2026

  • CVE-2026-89111
    40Planlayın

    OAuth2 SSRF vulnerability in SAP Cloud SDK for Python

    KritikCVSS 10,0İstismar yokEPSS %0

    sap_se · sap cloud13 Eki 2026

  • CVE-2026-89113
    35İzleyin

    SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)

    YüksekCVSS 8,8İstismar yokEPSS %0

    sap_se · sap commerce cloud (ootb code)13 Eki 2026

  • CVE-2026-89120
    28İzleyin

    Missing authorization check in SAP ABAP Platform

    YüksekCVSS 7,1İstismar yokEPSS %0

    sap_se · sap abap platform13 Eki 2026

  • CVE-2026-14814
    32İzleyin

    Permissive Regular Expression in GitLab

    YüksekCVSS 8,2İstismar yokEPSS %0

    gitlab · gitlab13 Eki 2026

  • CVE-2026-16301
    34İzleyin

    Incorrect Authorization in GitLab

    YüksekCVSS 8,5İstismar yokEPSS %0

    gitlab · gitlab13 Eki 2026

  • CVE-2026-35001
    28İzleyin

    OpenS100 S-102 Parser Integer Overflow Heap Buffer Overflow

    YüksekCVSS 7,1İstismar yokEPSS %0

    opens100 project · opens10013 Eki 2026

  • CVE-2026-81839
    30İzleyin

    Incorrect Authorization in GitLab

    YüksekCVSS 7,7İstismar yokEPSS %0

    gitlab · gitlab13 Eki 2026

  • CVE-2026-92883
    34İzleyin

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    YüksekCVSS 8,7İstismar yokEPSS %0

    gitlab · gitlab13 Eki 2026

  • CVE-2026-96893
    29İzleyin

    Improper Neutralization of Input Used for LLM Prompting in GitLab

    YüksekCVSS 7,3İstismar yokEPSS %0

    gitlab · gitlab13 Eki 2026

  • CVE-2026-97229
    40Planlayın

    Integer Overflow or Wraparound in GitLab

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    gitlab · gitlab13 Eki 2026

  • CVE-2026-109758
    37İzleyin

    Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized acc

    KritikCVSS 9,3İstismar yokEPSS %0

    perforce · helix authentication service13 Eki 2026

  • CVE-2026-108971
    34İzleyin

    D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification

    YüksekCVSS 8,6İstismar yokEPSS %0

    d-link · dcs-930l13 Eki 2026

  • CVE-2026-103316
    28İzleyin

    The macOS version of the DigiD app is not signed with Hardened Runtime

    YüksekCVSS 7,1İstismar yokEPSS %0

    logius · digid for macos13 Eki 2026

  • CVE-2026-75826
    34İzleyin

    Teltonika Command Injection in Backup function

    YüksekCVSS 8,5İstismar yokEPSS %0

    teltonika networks · rutos13 Eki 2026

  • CVE-2026-102007
    28İzleyin

    Bit integrations <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback

    YüksekCVSS 7,2İstismar yokEPSS %0

    bitpressadmin · bit integrations – form integration, webhook, spreadsheets, crm, lms & email automation13 Eki 2026

  • CVE-2026-102562
    28İzleyin

    AcyMailing <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting via 'customField[]' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    acyba · acymailing – an ultimate newsletter plugin and marketing automation solution for wordpress13 Eki 2026

  • CVE-2026-103418
    35İzleyin

    Universal XSS via the HTML language attribute in Translation Services

    YüksekCVSS 8,8İstismar yokEPSS %0

    mozilla · firefox for ios13 Eki 2026

  • CVE-2026-109108
    35İzleyin

    Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection

    YüksekCVSS 8,6İstismar yokEPSS %2

    wavlink · wl-wn530be1-a13 Eki 2026

  • CVE-2026-109109
    37İzleyin

    Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow

    KritikCVSS 9,3İstismar yokEPSS %0

    wavlink · wl-wn530be1-a13 Eki 2026

  • CVE-2026-101020
    34İzleyin

    An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +.

    YüksekCVSS 8,5İstismar yokEPSS %0

    hammock corporation · assetview13 Eki 2026

  • CVE-2026-108179
    30İzleyin

    WordPress WOLF plugin <= 1.1.1 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    pluginus.net · wolf13 Eki 2026

  • CVE-2026-109110
    38İzleyin

    Wavlink WL-WN592AX6 wmapd system os command injection

    KritikCVSS 9,3İstismar yokEPSS %2

    wavlink · wl-wn592ax613 Eki 2026

  • CVE-2026-109687
    30İzleyin

    WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    link whisper inc · link whisper free13 Eki 2026

  • CVE-2026-13138
    34İzleyin

    Improper Authorization in Divasoft Software's Biletiva Ticketing Platform

    YüksekCVSS 8,6İstismar yokEPSS %0

    divasoft software and e-commerce inc. · biletiva ticketing platform13 Eki 2026

  • CVE-2026-89309
    40Planlayın

    Missing Authentication Vulnerability in JTL-WMS

    KritikCVSS 10,0İstismar yokEPSS %0

    tbc · tbc13 Eki 2026

  • CVE-2026-102073
    35İzleyin

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (

    YüksekCVSS 8,8İstismar yokEPSS %0

    siemens · apogee mbc (ppc) (bacnet)13 Eki 2026

  • CVE-2026-102074
    34İzleyin

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (

    YüksekCVSS 8,7İstismar yokEPSS %0

    siemens · apogee mbc (ppc) (bacnet)13 Eki 2026

  • CVE-2026-102075
    34İzleyin

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (

    YüksekCVSS 8,7İstismar yokEPSS %0

    siemens · apogee mbc (ppc) (bacnet)13 Eki 2026

  • CVE-2026-102076
    34İzleyin

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (

    YüksekCVSS 8,7İstismar yokEPSS %0

    siemens · apogee mbc (ppc) (bacnet)13 Eki 2026

  • CVE-2026-44415
    35İzleyin

    Affected systems do not properly restrict access to internal APIs and paths for authenticated users.

    YüksekCVSS 8,9İstismar yokEPSS %0

    siemens · industrial edge device kit - arm64 v1.1013 Eki 2026

  • CVE-2026-59241
    34İzleyin

    A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC

    YüksekCVSS 8,7İstismar yokEPSS %0

    siemens · simatic wincc v7.513 Eki 2026

  • CVE-2026-63350
    37İzleyin

    Affected devices do not properly restrict executable content contained in imported trace files.

    KritikCVSS 9,4İstismar yokEPSS %0

    siemens · simatic drive controller cpu 1504d tf13 Eki 2026

  • CVE-2026-63353
    37İzleyin

    Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.

    KritikCVSS 9,4İstismar yokEPSS %0

    siemens · simatic drive controller cpu 1504d tf13 Eki 2026

  • CVE-2026-63354
    37İzleyin

    Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the T

    KritikCVSS 9,4İstismar yokEPSS %0

    siemens · simatic drive controller cpu 1504d tf13 Eki 2026

  • CVE-2026-72895
    33İzleyin

    A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC I

    YüksekCVSS 8,4İstismar yokEPSS %0

    siemens · simatic ipc bx-21a13 Eki 2026

  • CVE-2026-78556
    30İzleyin

    A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9).

    YüksekCVSS 7,6İstismar yokEPSS %0

    siemens · industrial edge app publisher13 Eki 2026

  • CVE-2026-78557
    30İzleyin

    A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9).

    YüksekCVSS 7,7İstismar yokEPSS %0

    siemens · industrial edge app publisher13 Eki 2026

  • CVE-2026-85114
    34İzleyin

    A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61).

    YüksekCVSS 8,7İstismar yokEPSS %0

    siemens · .net client library for simatic s7 webserver api13 Eki 2026

  • CVE-2026-89196
    34İzleyin

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    YüksekCVSS 8,7İstismar yokEPSS %0

    siemens · ruggedcom crossbow13 Eki 2026

  • CVE-2026-89197
    34İzleyin

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    YüksekCVSS 8,7İstismar yokEPSS %0

    siemens · ruggedcom crossbow13 Eki 2026

  • CVE-2026-89198
    34İzleyin

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    YüksekCVSS 8,7İstismar yokEPSS %0

    siemens · ruggedcom crossbow13 Eki 2026

  • CVE-2026-89199
    34İzleyin

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    YüksekCVSS 8,7İstismar yokEPSS %0

    siemens · ruggedcom crossbow13 Eki 2026

  • CVE-2026-89200
    33İzleyin

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    YüksekCVSS 8,4İstismar yokEPSS %0

    siemens · ruggedcom crossbow13 Eki 2026

  • CVE-2026-89201
    30İzleyin

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    YüksekCVSS 7,7İstismar yokEPSS %0

    siemens · ruggedcom crossbow13 Eki 2026

  • CVE-2026-89202
    28İzleyin

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    YüksekCVSS 7,1İstismar yokEPSS %0

    siemens · ruggedcom crossbow13 Eki 2026

  • CVE-2026-109157
    34İzleyin

    TRENDnet TEW-432BRP formTcpipSetup stack-based overflow

    YüksekCVSS 8,6İstismar yokEPSS %0

    trendnet · tew-432brp13 Eki 2026

  • CVE-2026-109832
    30İzleyin

    Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)

    YüksekCVSS 7,5İstismar yokEPSS %0

    red hat · red hat enterprise linux 1013 Eki 2026

  • CVE-2026-63316
    34İzleyin

    SQL Injection in Payload CMS

    YüksekCVSS 8,7İstismar yokEPSS %0

    payload · payload cms13 Eki 2026

  • CVE-2026-109704
    35İzleyin

    Privilege escalation in the Application Update component

    YüksekCVSS 8,8İstismar yokEPSS %0

    mozilla · firefox13 Eki 2026

  • CVE-2026-109705
    38İzleyin

    Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component

    KritikCVSS 9,6İstismar yokEPSS %0

    mozilla · firefox13 Eki 2026

  • CVE-2026-109707
    38İzleyin

    Sandbox escape due to use-after-free in the Networking component

    KritikCVSS 9,6İstismar yokEPSS %0

    mozilla · firefox13 Eki 2026

  • CVE-2026-109708
    38İzleyin

    Sandbox escape due to incorrect boundary conditions in the Networking component

    KritikCVSS 9,6İstismar yokEPSS %0

    mozilla · firefox13 Eki 2026