İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

5.871 kayıt · 12 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 4 / 59

  • CVE-2026-85493
    34İzleyin

    Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME)

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-85494
    34İzleyin

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and bina

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-86325
    37İzleyin

    A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface.

    KritikCVSS 9,4İstismar yokEPSS %0

    moxa · mgate mb3170 series2 Eki 2026

  • CVE-2026-86326
    34İzleyin

    An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify th

    YüksekCVSS 8,6İstismar yokEPSS %0

    moxa · mgate mb3170 series2 Eki 2026

  • CVE-2026-91135
    36İzleyin

    Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)

    KritikCVSS 9,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-91137
    34İzleyin

    Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-93925
    34İzleyin

    Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-93926
    34İzleyin

    Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94633
    34İzleyin

    Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94642
    34İzleyin

    Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94644
    32İzleyin

    Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94645
    32İzleyin

    Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94650
    32İzleyin

    Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94651
    32İzleyin

    Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-96990
    32İzleyin

    Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-104410
    34İzleyin

    SiYuan before 3.8.5 Information Disclosure via /api/export/preview

    YüksekCVSS 8,7İstismar yokEPSS %0

    siyuan-note · siyuan2 Eki 2026

  • CVE-2026-104411
    34İzleyin

    Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

    YüksekCVSS 8,5İstismar yokEPSS %0

    tryghost · ghost2 Eki 2026

  • CVE-2026-104413
    34İzleyin

    Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images

    YüksekCVSS 8,5İstismar yokEPSS %0

    tryghost · ghost2 Eki 2026

  • CVE-2026-104414
    34İzleyin

    Ghost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo Responses

    YüksekCVSS 8,6İstismar yokEPSS %0

    tryghost · ghost2 Eki 2026

  • CVE-2026-104416
    30İzleyin

    Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API

    YüksekCVSS 7,7İstismar yokEPSS %0

    tryghost · ghost2 Eki 2026

  • CVE-2026-104418
    34İzleyin

    Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files

    YüksekCVSS 8,6İstismar yokEPSS %0

    tryghost · ghost2 Eki 2026

  • CVE-2026-104422
    34İzleyin

    Zebra before 6.3.0 Block Sync Denial of Service via Coinbase scriptSig Rewrite

    YüksekCVSS 8,7İstismar yokEPSS %0

    zcashfoundation · zebra2 Eki 2026

  • CVE-2026-104423
    34İzleyin

    Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification

    YüksekCVSS 8,7İstismar yokEPSS %0

    zcashfoundation · zebra2 Eki 2026

  • CVE-2026-104426
    32İzleyin

    Zebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value Check

    YüksekCVSS 8,2İstismar yokEPSS %0

    zcashfoundation · zebra2 Eki 2026

  • CVE-2026-104427
    32İzleyin

    Zebra before 6.1.0 Chain Stall via Stale parent_error_map Entry

    YüksekCVSS 8,2İstismar yokEPSS %0

    zcashfoundation · zebra2 Eki 2026

  • CVE-2026-104430
    34İzleyin

    Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount

    YüksekCVSS 8,7İstismar yokEPSS %0

    zcashfoundation · zebra2 Eki 2026

  • CVE-2026-104431
    34İzleyin

    Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification

    YüksekCVSS 8,7İstismar yokEPSS %0

    zcashfoundation · zebra2 Eki 2026

  • CVE-2026-104434
    28İzleyin

    Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC

    YüksekCVSS 7,1İstismar yokEPSS %0

    zcashfoundation · zebra2 Eki 2026

  • CVE-2026-104435
    33İzleyin

    Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output

    YüksekCVSS 8,3İstismar yokEPSS %0

    zcashfoundation · zebra2 Eki 2026

  • CVE-2026-104437
    33İzleyin

    Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling

    YüksekCVSS 8,3İstismar yokEPSS %0

    zcashfoundation · zebra2 Eki 2026

  • CVE-2026-104438
    34İzleyin

    YesWiki before 4.6.7 Information Disclosure via listpagestag and includepages Actions

    YüksekCVSS 8,7İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104439
    28İzleyin

    YesWiki before 4.6.7 User Enumeration via Lost-Password Flow

    YüksekCVSS 7,1İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104440
    27İzleyin

    YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameter

    OrtaCVSS 6,9İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104441
    27İzleyin

    YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action

    OrtaCVSS 6,9İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104443
    28İzleyin

    YesWiki before 4.6.7 Scope Bypass via Triples Delete API

    YüksekCVSS 7,2İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104444
    28İzleyin

    YesWiki before 4.6.7 Authorization Bypass via Comments API editComment

    YüksekCVSS 7,1İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104445
    35İzleyin

    YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor Spoofing

    YüksekCVSS 8,8İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104446
    27İzleyin

    YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler

    OrtaCVSS 6,9İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104447
    28İzleyin

    YesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateAction

    YüksekCVSS 7,1İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104448
    28İzleyin

    YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage Handler

    YüksekCVSS 7,2İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104449
    33İzleyin

    YesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_fiche

    YüksekCVSS 8,3İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104450
    32İzleyin

    YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Action

    YüksekCVSS 8,2İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104456
    28İzleyin

    YesWiki before 4.6.7 Second-Order SQL Injection via ACL Username

    YüksekCVSS 7,2İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104457
    35İzleyin

    YesWiki before 4.6.7 SQL Injection via filtertags filterN parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104458
    33İzleyin

    YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition Addresses

    YüksekCVSS 8,3İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104460
    34İzleyin

    YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearch

    YüksekCVSS 8,7İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104462
    35İzleyin

    YesWiki before 4.6.7 SQL Injection via nuagetag tags parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104463
    33İzleyin

    YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inbox

    YüksekCVSS 8,3İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104464
    35İzleyin

    YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104467
    36İzleyin

    YesWiki before 4.6.7 Authorization Bypass via Public API Mode

    KritikCVSS 9,2İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104469
    30İzleyin

    YesWiki before 4.6.7 Session Fixation via Login in AuthController.php

    YüksekCVSS 7,6İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104471
    34İzleyin

    YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import

    YüksekCVSS 8,6İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-104472
    34İzleyin

    YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler

    YüksekCVSS 8,7İstismar yokEPSS %0

    yeswiki · yeswiki2 Eki 2026

  • CVE-2026-61373
    34İzleyin

    Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-82458
    34İzleyin

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-82459
    32İzleyin

    Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-86535
    34İzleyin

    Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-86537
    34İzleyin

    Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-87117
    34İzleyin

    Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-90440
    32İzleyin

    Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94636
    32İzleyin

    Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94637
    32İzleyin

    Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94646
    34İzleyin

    Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers)

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94648
    32İzleyin

    Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94653
    32İzleyin

    Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-96288
    32İzleyin

    Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-96292
    32İzleyin

    Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-96294
    34İzleyin

    Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-104610
    37İzleyin

    Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow

    KritikCVSS 9,3İstismar yokEPSS %0

    tenda · hg72 Eki 2026

  • CVE-2026-104611
    34İzleyin

    Tenda AC9 POST Request fast_setting_internet_set stack-based overflow

    YüksekCVSS 8,5İstismar yokEPSS %0

    tenda · ac92 Eki 2026

  • CVE-2026-104733
    29İzleyin

    User Impersonation/Authorization Bypass in XMPP Server ejabberd

    YüksekCVSS 7,4İstismar yokEPSS %0

    processone · ejabberd2 Eki 2026

  • CVE-2026-61374
    28İzleyin

    Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit

    YüksekCVSS 7,1İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-63772
    34İzleyin

    Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-66055
    32İzleyin

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the config

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-66081
    34İzleyin

    Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-66837
    34İzleyin

    Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-66858
    34İzleyin

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Pe

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-66859
    34İzleyin

    Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-83632
    36İzleyin

    Apache Thrift: C++ THttpTransport grows its line buffer without bound

    KritikCVSS 9,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-83663
    34İzleyin

    Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go)

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-83745
    34İzleyin

    Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-85476
    32İzleyin

    Apache Thrift: c_glib `read_all` spins when the underlying read returns 0

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94654
    32İzleyin

    Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94655
    32İzleyin

    Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94656
    32İzleyin

    Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94657
    32İzleyin

    Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-94658
    34İzleyin

    Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic)

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-96277
    34İzleyin

    Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-96286
    32İzleyin

    Apache Thrift: Perl servers end `serve()` when serving one connection fails

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-96287
    32İzleyin

    Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-96289
    32İzleyin

    Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard

    YüksekCVSS 8,2İstismar yokEPSS %0

    apache software foundation · apache thrift2 Eki 2026

  • CVE-2026-19652
    39İzleyin

    Divi Membership <= 2.2.0 - Unauthenticated Privilege Escalation via 'form_id' Parameter

    KritikCVSS 9,8İstismar yokEPSS %0

    diviengine · divi membership2 Eki 2026

  • CVE-2026-85215
    28İzleyin

    SQL Injection in GG Soft's Paperwork

    YüksekCVSS 7,1İstismar yokEPSS %0

    gg soft software services inc. · paperwork2 Eki 2026

  • CVE-2026-93875
    28İzleyin

    JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    crocoblock · jetappointment2 Eki 2026

  • CVE-2026-94422
    34İzleyin

    xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

    YüksekCVSS 8,7İstismar yokEPSS %0

    fedora · fedora2 Eki 2026

  • CVE-2026-104026
    31İzleyin

    In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs.

    YüksekCVSS 7,8İstismar yokEPSS %0

    meta platforms, inc · sapling scm2 Eki 2026

  • CVE-2026-90970
    39İzleyin

    Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    gitlab · gitlab ai gateway2 Eki 2026

  • CVE-2026-103622
    35İzleyin

    Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome2 Eki 2026

  • CVE-2026-103623
    35İzleyin

    Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome2 Eki 2026

  • CVE-2026-103624
    33İzleyin

    Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the r

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome2 Eki 2026