Yayın tarihine göre
Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları
6.179 kayıt · 12 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 39 / 62
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-110083İstismar yok | Adobe Experience Manager | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · adobe experience manager 6.5 · CWE-89 | Yüksek7,1 | — | %0,3 | 13 Eki 2026 |
28İzleyin | CVE-2026-110084İstismar yok | Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)adobe · adobe experience manager 6.5 · CWE-91 | Yüksek7,1 | — | %0,4 | 13 Eki 2026 |
35İzleyin | CVE-2026-16753İstismar yok | Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated admlowcoder · lowcoder · CWE-639 | Yüksek8,8 | — | %0,1 | 13 Eki 2026 |
40Planlayın | CVE-2026-48382İstismar yok | Adobe Experience Manager | Incorrect Authorization (CWE-863)adobe · adobe experience manager as a cloud service · CWE-863 | Kritik10,0 | — | %0,8 | 13 Eki 2026 |
40Planlayın | CVE-2026-48383İstismar yok | Adobe Experience Manager | Incorrect Authorization (CWE-863)adobe · adobe experience manager as a cloud service · CWE-863 | Kritik10,0 | — | %0,8 | 13 Eki 2026 |
29İzleyin | CVE-2026-55601İstismar yok | MultiTail: Shell injection in execute-on-match command handlingfolkertvanheusden · multitail · CWE-78 | Yüksek7,3 | — | %0,2 | 13 Eki 2026 |
37İzleyin | CVE-2026-63146İstismar yok | Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.phpomnispace · agora project · CWE-94 | Kritik9,3 | — | %0,6 | 13 Eki 2026 |
36İzleyin | CVE-2026-63149İstismar yok | Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()omnispace · agora project · CWE-330 | Kritik9,1 | — | %0,3 | 13 Eki 2026 |
34İzleyin | CVE-2026-63152İstismar yok | Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilteromnispace · agora project · CWE-89 | Yüksek8,6 | — | %0,3 | 13 Eki 2026 |
34İzleyin | CVE-2026-63153İstismar yok | Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations()omnispace · agora project · CWE-639 | Yüksek8,6 | — | %0,2 | 13 Eki 2026 |
34İzleyin | CVE-2026-63154İstismar yok | Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]omnispace · agora project · CWE-89 | Yüksek8,7 | — | %0,4 | 13 Eki 2026 |
36İzleyin | CVE-2026-63158İstismar yok | Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookiesomnispace · agora project · CWE-836 | Kritik9,1 | — | %0,4 | 13 Eki 2026 |
36İzleyin | CVE-2026-63159İstismar yok | Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeoveromnispace · agora project · CWE-640 | Kritik9,1 | — | %0,3 | 13 Eki 2026 |
36İzleyin | CVE-2026-63160İstismar yok | Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storageomnispace · agora project · CWE-522 | Kritik9,1 | — | %0,3 | 13 Eki 2026 |
34İzleyin | CVE-2026-63161İstismar yok | Omnispace Agora Project < 26.10.0 Session Fixation via Authenticationomnispace · agora project · CWE-384 | Yüksek8,6 | — | %0,3 | 13 Eki 2026 |
34İzleyin | CVE-2026-63162İstismar yok | Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameteromnispace · agora project · CWE-22 | Yüksek8,7 | — | %0,7 | 13 Eki 2026 |
34İzleyin | CVE-2026-63163İstismar yok | Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownloadomnispace · agora project · CWE-639 | Yüksek8,7 | — | %0,3 | 13 Eki 2026 |
34İzleyin | CVE-2026-63165İstismar yok | Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameteromnispace · agora project · CWE-89 | Yüksek8,6 | — | %0,3 | 13 Eki 2026 |
28İzleyin | CVE-2026-63172İstismar yok | Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Editomnispace · agora project · CWE-862 | Yüksek7,1 | — | %0,2 | 13 Eki 2026 |
34İzleyin | CVE-2026-63174İstismar yok | Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectListomnispace · agora project · CWE-862 | Yüksek8,6 | — | %0,2 | 13 Eki 2026 |
35İzleyin | CVE-2026-70098İstismar yok | Visual Studio Code Remote Code Execution Vulnerabilitymicrosoft · visual studio code · CWE-862 | Yüksek8,8 | — | %0,4 | 13 Eki 2026 |
39İzleyin | CVE-2026-75732İstismar yok | Adobe Experience Manager | Incorrect Authorization (CWE-863)adobe · adobe experience manager 6.5 lts · CWE-863 | Kritik9,9 | — | %0,5 | 13 Eki 2026 |
37İzleyin | CVE-2026-83662İstismar yok | Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)adobe · adobe experience manager as a cloud service · CWE-79 | Kritik9,3 | — | %0,7 | 13 Eki 2026 |
32İzleyin | CVE-2026-86016İstismar yok | VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltrationvnotex · vnote · CWE-79 | Yüksek8,2 | — | %0,2 | 13 Eki 2026 |
28İzleyin | CVE-2026-86022İstismar yok | VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handlingvnotex · vnote · CWE-78 | Yüksek7,0 | — | %0,1 | 13 Eki 2026 |
38İzleyin | CVE-2026-90531İstismar yok | Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)adobe · adobe experience manager as a cloud service · CWE-611 | Kritik9,6 | — | %0,4 | 13 Eki 2026 |
40Planlayın | CVE-2026-90532İstismar yok | Adobe Experience Manager | Incorrect Authorization (CWE-863)adobe · adobe experience manager as a cloud service · CWE-863 | Kritik10,0 | — | %0,6 | 13 Eki 2026 |
31İzleyin | CVE-2026-100111İstismar yok | Photoshop Desktop | Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
31İzleyin | CVE-2026-100112İstismar yok | Photoshop Desktop | Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
31İzleyin | CVE-2026-100127İstismar yok | Bridge | Out-of-bounds Write (CWE-787)adobe · adobe bridge · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
31İzleyin | CVE-2026-100128İstismar yok | Bridge | Out-of-bounds Write (CWE-787)adobe · adobe bridge · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
31İzleyin | CVE-2026-100129İstismar yok | Bridge | Out-of-bounds Write (CWE-787)adobe · adobe bridge · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
34İzleyin | CVE-2026-101294İstismar yok | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic stepibm · websphere application server - liberty · CWE-325 | Yüksek8,7 | — | %0,2 | 13 Eki 2026 |
31İzleyin | CVE-2026-103821İstismar yok | Substance3D - Designer | Out-of-bounds Write (CWE-787)adobe · substance 3d designer · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
31İzleyin | CVE-2026-104346İstismar yok | Photoshop Desktop | Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
31İzleyin | CVE-2026-104347İstismar yok | Photoshop Desktop | Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
31İzleyin | CVE-2026-104348İstismar yok | Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)adobe · photoshop · CWE-122 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
21İzleyin | CVE-2026-104587Kavram kanıtı | blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability.CWE-79 | Orta5,4 | — | %0,2 | 13 Eki 2026 |
30İzleyin | CVE-2026-105442İstismar yok | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted dataibm · websphere application server · CWE-502 | Yüksek7,5 | — | %0,3 | 13 Eki 2026 |
32İzleyin | CVE-2026-105443İstismar yok | IBM WebSphere Application Server Liberty is affected by an improper access controlibm · websphere application server - liberty · CWE-284 | Yüksek8,2 | — | %0,2 | 13 Eki 2026 |
34İzleyin | CVE-2026-105897İstismar yok | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)adobe · coldfusion · CWE-918 | Yüksek8,6 | — | %0,4 | 13 Eki 2026 |
32İzleyin | CVE-2026-105898İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek8,2 | — | %0,1 | 13 Eki 2026 |
40Planlayın | CVE-2026-105899İstismar yok | ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)adobe · coldfusion · CWE-434 | Kritik10,0 | — | %0,5 | 13 Eki 2026 |
30İzleyin | CVE-2026-105900İstismar yok | ColdFusion | Improper Input Validation (CWE-20)adobe · coldfusion · CWE-20 | Yüksek7,5 | — | %0,5 | 13 Eki 2026 |
35İzleyin | CVE-2026-105901İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek8,8 | — | %0,1 | 13 Eki 2026 |
39İzleyin | CVE-2026-105903İstismar yok | ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · coldfusion · CWE-94 | Kritik9,9 | — | %0,5 | 13 Eki 2026 |
30İzleyin | CVE-2026-105994İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek7,7 | — | %0,3 | 13 Eki 2026 |
35İzleyin | CVE-2026-106089İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek8,8 | — | %0,1 | 13 Eki 2026 |
35İzleyin | CVE-2026-106090İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek8,8 | — | %0,1 | 13 Eki 2026 |
39İzleyin | CVE-2026-106612İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Kritik9,9 | — | %0,4 | 13 Eki 2026 |
35İzleyin | CVE-2026-106613İstismar yok | ColdFusion | Improper Input Validation (CWE-20)adobe · coldfusion · CWE-20 | Yüksek8,8 | — | %0,8 | 13 Eki 2026 |
31İzleyin | CVE-2026-106614İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
35İzleyin | CVE-2026-106615İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek8,8 | — | %0,1 | 13 Eki 2026 |
34İzleyin | CVE-2026-106616İstismar yok | ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)adobe · coldfusion · CWE-611 | Yüksek8,6 | — | %0,5 | 13 Eki 2026 |
35İzleyin | CVE-2026-106617İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek8,8 | — | %0,1 | 13 Eki 2026 |
35İzleyin | CVE-2026-106618İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek8,8 | — | %0,1 | 13 Eki 2026 |
36İzleyin | CVE-2026-106619İstismar yok | ColdFusion | Improper Input Validation (CWE-20)adobe · coldfusion · CWE-20 | Kritik9,0 | — | %0,6 | 13 Eki 2026 |
38İzleyin | CVE-2026-106620İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Kritik9,6 | — | %0,3 | 13 Eki 2026 |
36İzleyin | CVE-2026-106621İstismar yok | ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · coldfusion · CWE-94 | Kritik9,1 | — | %0,6 | 13 Eki 2026 |
40Planlayın | CVE-2026-106622İstismar yok | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)adobe · coldfusion · CWE-918 | Kritik10,0 | — | %0,6 | 13 Eki 2026 |
30İzleyin | CVE-2026-106623İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek7,5 | — | %0,4 | 13 Eki 2026 |
40Planlayın | CVE-2026-106624İstismar yok | ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · coldfusion · CWE-94 | Kritik10,0 | — | %1,0 | 13 Eki 2026 |
30İzleyin | CVE-2026-34633İstismar yok | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)adobe · coldfusion · CWE-918 | Yüksek7,7 | — | %0,7 | 13 Eki 2026 |
34İzleyin | CVE-2026-34634İstismar yok | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)adobe · coldfusion · CWE-918 | Yüksek8,6 | — | %0,6 | 13 Eki 2026 |
37İzleyin | CVE-2026-49950İstismar yok | Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Poolxorbitsai · xoscar · CWE-502 | Kritik9,3 | — | %0,6 | 13 Eki 2026 |
28İzleyin | CVE-2026-62840İstismar yok | Linux Kernel Elevation of Privilege Vulnerabilitymicrosoft · linux 3p (third party) distros · CWE-367 | Yüksek7,0 | — | %0,1 | 13 Eki 2026 |
35İzleyin | CVE-2026-65674İstismar yok | Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · microsoft sql server 2019 (gdr) · CWE-502 | Yüksek8,8 | — | %0,8 | 13 Eki 2026 |
34İzleyin | CVE-2026-67625İstismar yok | Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-122 | Yüksek8,5 | — | %0,3 | 13 Eki 2026 |
34İzleyin | CVE-2026-68883İstismar yok | Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-122 | Yüksek8,5 | — | %0,3 | 13 Eki 2026 |
33İzleyin | CVE-2026-71385İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Yüksek8,4 | — | %0,4 | 13 Eki 2026 |
30İzleyin | CVE-2026-75748İstismar yok | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)adobe · coldfusion · CWE-918 | Yüksek7,6 | — | %0,5 | 13 Eki 2026 |
38İzleyin | CVE-2026-75994İstismar yok | ColdFusion | Incorrect Authorization (CWE-863)adobe · coldfusion · CWE-863 | Kritik9,6 | — | %0,3 | 13 Eki 2026 |
33İzleyin | CVE-2026-75995İstismar yok | ColdFusion | Improper Input Validation (CWE-20)adobe · coldfusion · CWE-20 | Yüksek8,4 | — | %0,3 | 13 Eki 2026 |
30İzleyin | CVE-2026-75996İstismar yok | ColdFusion | Uncontrolled Resource Consumption (CWE-400)adobe · coldfusion · CWE-400 | Yüksek7,5 | — | %0,8 | 13 Eki 2026 |
28İzleyin | CVE-2026-76001İstismar yok | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)adobe · coldfusion · CWE-918 | Yüksek7,1 | — | %0,5 | 13 Eki 2026 |
31İzleyin | CVE-2026-83661İstismar yok | Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)adobe · photoshop · CWE-190 | Yüksek7,8 | — | %0,2 | 13 Eki 2026 |
31İzleyin | CVE-2026-83965İstismar yok | Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121)adobe · substance 3d sampler · CWE-121 | Yüksek7,8 | — | %0,2 | 13 Eki 2026 |
31İzleyin | CVE-2026-83966İstismar yok | Substance3D - Sampler | Out-of-bounds Write (CWE-787)adobe · substance 3d sampler · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
28İzleyin | CVE-2026-85876İstismar yok | Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · microsoft sql server 2019 (gdr) · CWE-416 | Yüksek7,0 | — | %0,1 | 13 Eki 2026 |
34İzleyin | CVE-2026-85886İstismar yok | Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-122 | Yüksek8,5 | — | %0,4 | 13 Eki 2026 |
30İzleyin | CVE-2026-85888İstismar yok | Microsoft SQL Server Information Disclosure Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-125 | Yüksek7,7 | — | %0,5 | 13 Eki 2026 |
28İzleyin | CVE-2026-85919İstismar yok | Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · microsoft sql server 2019 (gdr) · CWE-122 | Yüksek7,0 | — | %0,1 | 13 Eki 2026 |
30İzleyin | CVE-2026-88081İstismar yok | Microsoft SQL Server Information Disclosure Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-125 | Yüksek7,7 | — | %0,5 | 13 Eki 2026 |
28İzleyin | CVE-2026-88082İstismar yok | Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · microsoft sql server 2019 (gdr) · CWE-122 | Yüksek7,0 | — | %0,1 | 13 Eki 2026 |
30İzleyin | CVE-2026-88083İstismar yok | Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · microsoft sql server 2022 (cu 26) · CWE-121 | Yüksek7,5 | — | %0,3 | 13 Eki 2026 |
28İzleyin | CVE-2026-88088İstismar yok | Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · microsoft sql server 2019 (gdr) · CWE-190 | Yüksek7,0 | — | %0,1 | 13 Eki 2026 |
37İzleyin | CVE-2026-90530İstismar yok | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · coldfusion 2025 · CWE-22 | Kritik9,3 | — | %0,2 | 13 Eki 2026 |
36İzleyin | CVE-2026-93895İstismar yok | IBM WebSphere Application Server Liberty Improper Access Controlibm · websphere application server - liberty · CWE-284 | Kritik9,1 | — | %0,4 | 13 Eki 2026 |
32İzleyin | CVE-2026-93905İstismar yok | IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted dataibm · websphere application server - liberty · CWE-502 | Yüksek8,2 | — | %0,3 | 13 Eki 2026 |
36İzleyin | CVE-2026-93909İstismar yok | IBM WebSphere Application Server Liberty is affected by an authentication bypassibm · websphere application server - liberty · CWE-384 | Kritik9,1 | — | %0,3 | 13 Eki 2026 |
35İzleyin | CVE-2026-94512İstismar yok | SQL Server Remote Code Execution Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-122 | Yüksek8,8 | — | %0,4 | 13 Eki 2026 |
31İzleyin | CVE-2026-95635İstismar yok | Photoshop Desktop | Double Free (CWE-415)adobe · photoshop · CWE-415 | Yüksek7,8 | — | %0,2 | 13 Eki 2026 |
31İzleyin | CVE-2026-95636İstismar yok | Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)adobe · photoshop · CWE-190 | Yüksek7,8 | — | %0,2 | 13 Eki 2026 |
31İzleyin | CVE-2026-95637İstismar yok | Photoshop Desktop | Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
31İzleyin | CVE-2026-95638İstismar yok | Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)adobe · photoshop · CWE-122 | Yüksek7,8 | — | %0,2 | 13 Eki 2026 |
34İzleyin | CVE-2026-95639İstismar yok | Photoshop Desktop | Incorrect Authorization (CWE-863)adobe · photoshop · CWE-863 | Yüksek8,6 | — | %0,2 | 13 Eki 2026 |
31İzleyin | CVE-2026-95641İstismar yok | Photoshop Desktop | Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
29İzleyin | CVE-2026-95695İstismar yok | IBM WebSphere Application Server Liberty Incorrect Authorizationibm · websphere application server - liberty · CWE-863 | Yüksek7,4 | — | %0,3 | 13 Eki 2026 |
31İzleyin | CVE-2026-96521İstismar yok | Photoshop Desktop | Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
31İzleyin | CVE-2026-96522İstismar yok | Photoshop Desktop | Out-of-bounds Write (CWE-787)adobe · photoshop · CWE-787 | Yüksek7,8 | — | %0,1 | 13 Eki 2026 |
- CVE-2026-11008328İzleyin
Adobe Experience Manager | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
YüksekCVSS 7,1İstismar yokEPSS %0adobe · adobe experience manager 6.513 Eki 2026
- CVE-2026-11008428İzleyin
Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)
YüksekCVSS 7,1İstismar yokEPSS %0adobe · adobe experience manager 6.513 Eki 2026
- CVE-2026-1675335İzleyin
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated adm
YüksekCVSS 8,8İstismar yokEPSS %0lowcoder · lowcoder13 Eki 2026
- CVE-2026-4838240Planlayın
Adobe Experience Manager | Incorrect Authorization (CWE-863)
KritikCVSS 10,0İstismar yokEPSS %0adobe · adobe experience manager as a cloud service13 Eki 2026
- CVE-2026-4838340Planlayın
Adobe Experience Manager | Incorrect Authorization (CWE-863)
KritikCVSS 10,0İstismar yokEPSS %0adobe · adobe experience manager as a cloud service13 Eki 2026
- CVE-2026-5560129İzleyin
MultiTail: Shell injection in execute-on-match command handling
YüksekCVSS 7,3İstismar yokEPSS %0folkertvanheusden · multitail13 Eki 2026
- CVE-2026-6314637İzleyin
Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php
KritikCVSS 9,3İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6314936İzleyin
Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()
KritikCVSS 9,1İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6315234İzleyin
Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter
YüksekCVSS 8,6İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6315334İzleyin
Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations()
YüksekCVSS 8,6İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6315434İzleyin
Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]
YüksekCVSS 8,7İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6315836İzleyin
Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies
KritikCVSS 9,1İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6315936İzleyin
Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover
KritikCVSS 9,1İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6316036İzleyin
Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage
KritikCVSS 9,1İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6316134İzleyin
Omnispace Agora Project < 26.10.0 Session Fixation via Authentication
YüksekCVSS 8,6İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6316234İzleyin
Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter
YüksekCVSS 8,7İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6316334İzleyin
Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownload
YüksekCVSS 8,7İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6316534İzleyin
Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameter
YüksekCVSS 8,6İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6317228İzleyin
Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Edit
YüksekCVSS 7,1İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-6317434İzleyin
Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList
YüksekCVSS 8,6İstismar yokEPSS %0omnispace · agora project13 Eki 2026
- CVE-2026-7009835İzleyin
Visual Studio Code Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · visual studio code13 Eki 2026
- CVE-2026-7573239İzleyin
Adobe Experience Manager | Incorrect Authorization (CWE-863)
KritikCVSS 9,9İstismar yokEPSS %0adobe · adobe experience manager 6.5 lts13 Eki 2026
- CVE-2026-8366237İzleyin
Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
KritikCVSS 9,3İstismar yokEPSS %0adobe · adobe experience manager as a cloud service13 Eki 2026
- CVE-2026-8601632İzleyin
VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration
YüksekCVSS 8,2İstismar yokEPSS %0vnotex · vnote13 Eki 2026
- CVE-2026-8602228İzleyin
VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling
YüksekCVSS 7,0İstismar yokEPSS %0vnotex · vnote13 Eki 2026
- CVE-2026-9053138İzleyin
Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
KritikCVSS 9,6İstismar yokEPSS %0adobe · adobe experience manager as a cloud service13 Eki 2026
- CVE-2026-9053240Planlayın
Adobe Experience Manager | Incorrect Authorization (CWE-863)
KritikCVSS 10,0İstismar yokEPSS %0adobe · adobe experience manager as a cloud service13 Eki 2026
- CVE-2026-10011131İzleyin
Photoshop Desktop | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-10011231İzleyin
Photoshop Desktop | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-10012731İzleyin
Bridge | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · adobe bridge13 Eki 2026
- CVE-2026-10012831İzleyin
Bridge | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · adobe bridge13 Eki 2026
- CVE-2026-10012931İzleyin
Bridge | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · adobe bridge13 Eki 2026
- CVE-2026-10129434İzleyin
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step
YüksekCVSS 8,7İstismar yokEPSS %0ibm · websphere application server - liberty13 Eki 2026
- CVE-2026-10382131İzleyin
Substance3D - Designer | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · substance 3d designer13 Eki 2026
- CVE-2026-10434631İzleyin
Photoshop Desktop | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-10434731İzleyin
Photoshop Desktop | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-10434831İzleyin
Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-10458721İzleyin
blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability.
OrtaCVSS 5,4Kavram kanıtıEPSS %013 Eki 2026
- CVE-2026-10544230İzleyin
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data
YüksekCVSS 7,5İstismar yokEPSS %0ibm · websphere application server13 Eki 2026
- CVE-2026-10544332İzleyin
IBM WebSphere Application Server Liberty is affected by an improper access control
YüksekCVSS 8,2İstismar yokEPSS %0ibm · websphere application server - liberty13 Eki 2026
- CVE-2026-10589734İzleyin
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10589832İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 8,2İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10589940Planlayın
ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
KritikCVSS 10,0İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10590030İzleyin
ColdFusion | Improper Input Validation (CWE-20)
YüksekCVSS 7,5İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10590135İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 8,8İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10590339İzleyin
ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
KritikCVSS 9,9İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10599430İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 7,7İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10608935İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 8,8İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10609035İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 8,8İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10661239İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
KritikCVSS 9,9İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10661335İzleyin
ColdFusion | Improper Input Validation (CWE-20)
YüksekCVSS 8,8İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10661431İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10661535İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 8,8İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10661634İzleyin
ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10661735İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 8,8İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10661835İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 8,8İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10661936İzleyin
ColdFusion | Improper Input Validation (CWE-20)
KritikCVSS 9,0İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10662038İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
KritikCVSS 9,6İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10662136İzleyin
ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
KritikCVSS 9,1İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10662240Planlayın
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
KritikCVSS 10,0İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10662330İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 7,5İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-10662440Planlayın
ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
KritikCVSS 10,0İstismar yokEPSS %1adobe · coldfusion13 Eki 2026
- CVE-2026-3463330İzleyin
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
YüksekCVSS 7,7İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-3463434İzleyin
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-4995037İzleyin
Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool
KritikCVSS 9,3İstismar yokEPSS %0xorbitsai · xoscar13 Eki 2026
- CVE-2026-6284028İzleyin
Linux Kernel Elevation of Privilege Vulnerability
YüksekCVSS 7,0İstismar yokEPSS %0microsoft · linux 3p (third party) distros13 Eki 2026
- CVE-2026-6567435İzleyin
Microsoft SQL Server Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · microsoft sql server 2019 (gdr)13 Eki 2026
- CVE-2026-6762534İzleyin
Microsoft SQL Server Remote Code Execution Vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0microsoft · microsoft sql server 2017 (gdr)13 Eki 2026
- CVE-2026-6888334İzleyin
Microsoft SQL Server Elevation of Privilege Vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0microsoft · microsoft sql server 2017 (gdr)13 Eki 2026
- CVE-2026-7138533İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
YüksekCVSS 8,4İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-7574830İzleyin
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
YüksekCVSS 7,6İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-7599438İzleyin
ColdFusion | Incorrect Authorization (CWE-863)
KritikCVSS 9,6İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-7599533İzleyin
ColdFusion | Improper Input Validation (CWE-20)
YüksekCVSS 8,4İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-7599630İzleyin
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
YüksekCVSS 7,5İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-7600128İzleyin
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
YüksekCVSS 7,1İstismar yokEPSS %0adobe · coldfusion13 Eki 2026
- CVE-2026-8366131İzleyin
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-8396531İzleyin
Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · substance 3d sampler13 Eki 2026
- CVE-2026-8396631İzleyin
Substance3D - Sampler | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · substance 3d sampler13 Eki 2026
- CVE-2026-8587628İzleyin
Microsoft SQL Server Elevation of Privilege Vulnerability
YüksekCVSS 7,0İstismar yokEPSS %0microsoft · microsoft sql server 2019 (gdr)13 Eki 2026
- CVE-2026-8588634İzleyin
Microsoft SQL Server Remote Code Execution Vulnerability
YüksekCVSS 8,5İstismar yokEPSS %0microsoft · microsoft sql server 2017 (gdr)13 Eki 2026
- CVE-2026-8588830İzleyin
Microsoft SQL Server Information Disclosure Vulnerability
YüksekCVSS 7,7İstismar yokEPSS %0microsoft · microsoft sql server 2017 (gdr)13 Eki 2026
- CVE-2026-8591928İzleyin
Microsoft SQL Server Elevation of Privilege Vulnerability
YüksekCVSS 7,0İstismar yokEPSS %0microsoft · microsoft sql server 2019 (gdr)13 Eki 2026
- CVE-2026-8808130İzleyin
Microsoft SQL Server Information Disclosure Vulnerability
YüksekCVSS 7,7İstismar yokEPSS %0microsoft · microsoft sql server 2017 (gdr)13 Eki 2026
- CVE-2026-8808228İzleyin
Microsoft SQL Server Elevation of Privilege Vulnerability
YüksekCVSS 7,0İstismar yokEPSS %0microsoft · microsoft sql server 2019 (gdr)13 Eki 2026
- CVE-2026-8808330İzleyin
Microsoft SQL Server Remote Code Execution Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0microsoft · microsoft sql server 2022 (cu 26)13 Eki 2026
- CVE-2026-8808828İzleyin
Microsoft SQL Server Elevation of Privilege Vulnerability
YüksekCVSS 7,0İstismar yokEPSS %0microsoft · microsoft sql server 2019 (gdr)13 Eki 2026
- CVE-2026-9053037İzleyin
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
KritikCVSS 9,3İstismar yokEPSS %0adobe · coldfusion 202513 Eki 2026
- CVE-2026-9389536İzleyin
IBM WebSphere Application Server Liberty Improper Access Control
KritikCVSS 9,1İstismar yokEPSS %0ibm · websphere application server - liberty13 Eki 2026
- CVE-2026-9390532İzleyin
IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data
YüksekCVSS 8,2İstismar yokEPSS %0ibm · websphere application server - liberty13 Eki 2026
- CVE-2026-9390936İzleyin
IBM WebSphere Application Server Liberty is affected by an authentication bypass
KritikCVSS 9,1İstismar yokEPSS %0ibm · websphere application server - liberty13 Eki 2026
- CVE-2026-9451235İzleyin
SQL Server Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · microsoft sql server 2017 (gdr)13 Eki 2026
- CVE-2026-9563531İzleyin
Photoshop Desktop | Double Free (CWE-415)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-9563631İzleyin
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-9563731İzleyin
Photoshop Desktop | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-9563831İzleyin
Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-9563934İzleyin
Photoshop Desktop | Incorrect Authorization (CWE-863)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-9564131İzleyin
Photoshop Desktop | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-9569529İzleyin
IBM WebSphere Application Server Liberty Incorrect Authorization
YüksekCVSS 7,4İstismar yokEPSS %0ibm · websphere application server - liberty13 Eki 2026
- CVE-2026-9652131İzleyin
Photoshop Desktop | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026
- CVE-2026-9652231İzleyin
Photoshop Desktop | Out-of-bounds Write (CWE-787)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · photoshop13 Eki 2026