İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

6.608 kayıt · 12 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 40 / 67

  • CVE-2026-85876
    28İzleyin

    Microsoft SQL Server Elevation of Privilege Vulnerability

    YüksekCVSS 7,0İstismar yokEPSS %0

    microsoft · microsoft sql server 2019 (gdr)13 Eki 2026

  • CVE-2026-85886
    34İzleyin

    Microsoft SQL Server Remote Code Execution Vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    microsoft · microsoft sql server 2017 (gdr)13 Eki 2026

  • CVE-2026-85888
    30İzleyin

    Microsoft SQL Server Information Disclosure Vulnerability

    YüksekCVSS 7,7İstismar yokEPSS %0

    microsoft · microsoft sql server 2017 (gdr)13 Eki 2026

  • CVE-2026-85919
    28İzleyin

    Microsoft SQL Server Elevation of Privilege Vulnerability

    YüksekCVSS 7,0İstismar yokEPSS %0

    microsoft · microsoft sql server 2019 (gdr)13 Eki 2026

  • CVE-2026-88081
    30İzleyin

    Microsoft SQL Server Information Disclosure Vulnerability

    YüksekCVSS 7,7İstismar yokEPSS %0

    microsoft · microsoft sql server 2017 (gdr)13 Eki 2026

  • CVE-2026-88082
    28İzleyin

    Microsoft SQL Server Elevation of Privilege Vulnerability

    YüksekCVSS 7,0İstismar yokEPSS %0

    microsoft · microsoft sql server 2019 (gdr)13 Eki 2026

  • CVE-2026-88083
    30İzleyin

    Microsoft SQL Server Remote Code Execution Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    microsoft · microsoft sql server 2022 (cu 26)13 Eki 2026

  • CVE-2026-88088
    28İzleyin

    Microsoft SQL Server Elevation of Privilege Vulnerability

    YüksekCVSS 7,0İstismar yokEPSS %0

    microsoft · microsoft sql server 2019 (gdr)13 Eki 2026

  • CVE-2026-90530
    37İzleyin

    ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    KritikCVSS 9,3İstismar yokEPSS %0

    adobe · coldfusion 202513 Eki 2026

  • CVE-2026-93895
    36İzleyin

    IBM WebSphere Application Server Liberty Improper Access Control

    KritikCVSS 9,1İstismar yokEPSS %0

    ibm · websphere application server13 Eki 2026

  • CVE-2026-93905
    32İzleyin

    IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data

    YüksekCVSS 8,2İstismar yokEPSS %0

    ibm · websphere application server13 Eki 2026

  • CVE-2026-93909
    36İzleyin

    IBM WebSphere Application Server Liberty is affected by an authentication bypass

    KritikCVSS 9,1İstismar yokEPSS %0

    ibm · websphere application server13 Eki 2026

  • CVE-2026-94512
    35İzleyin

    SQL Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    microsoft · microsoft sql server 2017 (gdr)13 Eki 2026

  • CVE-2026-95635
    31İzleyin

    Photoshop Desktop | Double Free (CWE-415)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · photoshop13 Eki 2026

  • CVE-2026-95636
    31İzleyin

    Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · photoshop13 Eki 2026

  • CVE-2026-95637
    31İzleyin

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · photoshop13 Eki 2026

  • CVE-2026-95638
    31İzleyin

    Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · photoshop13 Eki 2026

  • CVE-2026-95639
    34İzleyin

    Photoshop Desktop | Incorrect Authorization (CWE-863)

    YüksekCVSS 8,6İstismar yokEPSS %0

    adobe · photoshop13 Eki 2026

  • CVE-2026-95641
    31İzleyin

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · photoshop13 Eki 2026

  • CVE-2026-95695
    36İzleyin

    IBM WebSphere Application Server Liberty Incorrect Authorization

    KritikCVSS 9,1İstismar yokEPSS %0

    ibm · websphere application server13 Eki 2026

  • CVE-2026-95696
    30İzleyin

    IBM WebSphere Application Server Liberty Denial of Service

    YüksekCVSS 7,5İstismar yokEPSS %0

    ibm · websphere application server13 Eki 2026

  • CVE-2026-96521
    31İzleyin

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · photoshop13 Eki 2026

  • CVE-2026-96522
    31İzleyin

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · photoshop13 Eki 2026

  • CVE-2026-96523
    31İzleyin

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · photoshop13 Eki 2026

  • CVE-2026-96956
    32İzleyin

    SQL Server Elevation of Privilege Vulnerability

    YüksekCVSS 8,0İstismar yokEPSS %0

    microsoft · microsoft sql server 2017 (gdr)13 Eki 2026

  • CVE-2026-97312
    31İzleyin

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · photoshop13 Eki 2026

  • CVE-2026-100113
    30İzleyin

    CAI Content Credentials | Improper Input Validation (CWE-20)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100114
    30İzleyin

    CAI Content Credentials | Improper Access Control (CWE-284)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100115
    30İzleyin

    CAI Content Credentials | Improper Access Control (CWE-284)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100117
    30İzleyin

    CAI Content Credentials | Improper Input Validation (CWE-20)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100118
    30İzleyin

    CAI Content Credentials | Improper Certificate Validation (CWE-295)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100119
    30İzleyin

    CAI Content Credentials | Improper Input Validation (CWE-20)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100120
    30İzleyin

    CAI Content Credentials | Improper Input Validation (CWE-20)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100121
    30İzleyin

    CAI Content Credentials | Improper Certificate Validation (CWE-295)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100122
    30İzleyin

    CAI Content Credentials | Improper Certificate Validation (CWE-295)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100123
    30İzleyin

    CAI Content Credentials | Improper Certificate Validation (CWE-295)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100124
    30İzleyin

    CAI Content Credentials | Improper Input Validation (CWE-20)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100135
    30İzleyin

    CAI Content Credentials | Improper Input Validation (CWE-20)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100136
    30İzleyin

    CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100137
    30İzleyin

    CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100138
    30İzleyin

    CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-100139
    30İzleyin

    CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-103296
    30İzleyin

    CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-103297
    30İzleyin

    CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-104345
    30İzleyin

    CAI Content Credentials | Improper Input Validation (CWE-20)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-105902
    30İzleyin

    CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-106627
    30İzleyin

    CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-110136
    38İzleyin

    Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110137
    35İzleyin

    Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110138
    33İzleyin

    Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110139
    35İzleyin

    Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110140
    35İzleyin

    Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110142
    38İzleyin

    Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110144
    34İzleyin

    Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitr

    YüksekCVSS 8,6İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110145
    33İzleyin

    Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to ex

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110147
    35İzleyin

    Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110148
    35İzleyin

    Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110149
    38İzleyin

    Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox vi

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110151
    35İzleyin

    Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110152
    38İzleyin

    Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary co

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110153
    35İzleyin

    Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110154
    35İzleyin

    Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110155
    35İzleyin

    Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110156
    33İzleyin

    Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110157
    35İzleyin

    Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110158
    33İzleyin

    Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to ex

    YüksekCVSS 8,3İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110159
    38İzleyin

    Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sa

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110161
    38İzleyin

    Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox vi

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110162
    35İzleyin

    Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110163
    35İzleyin

    Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110164
    35İzleyin

    Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the san

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110165
    38İzleyin

    Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code

    KritikCVSS 9,6İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110166
    35İzleyin

    Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110167
    35İzleyin

    Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110168
    35İzleyin

    Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110169
    35İzleyin

    Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110171
    35İzleyin

    Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-110172
    35İzleyin

    Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    YüksekCVSS 8,8İstismar yokEPSS %0

    google · chrome13 Eki 2026

  • CVE-2026-77206
    30İzleyin

    IKEv2 pre-authentication Null Pointer Dereference in EAP code

    YüksekCVSS 7,5İstismar yokEPSS %0

    the libreswan project · libreswan13 Eki 2026

  • CVE-2026-77207
    30İzleyin

    Null Pointer Dereference in PKCS#7 bundle with no certificates

    YüksekCVSS 7,5İstismar yokEPSS %0

    the libreswan project · libreswan13 Eki 2026

  • CVE-2026-84790
    30İzleyin

    OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field

    YüksekCVSS 7,6İstismar yokEPSS %0

    openvpn · openvpn13 Eki 2026

  • CVE-2026-94453
    30İzleyin

    IKEv2 Use-After-Free bug when using IKE-over-TCP

    YüksekCVSS 7,5İstismar yokEPSS %0

    the libreswan project · libreswan13 Eki 2026

  • CVE-2026-95632
    30İzleyin

    CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-95633
    30İzleyin

    CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)

    YüksekCVSS 7,5İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-95634
    34İzleyin

    CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)

    YüksekCVSS 8,6İstismar yokEPSS %0

    adobe · c2pa13 Eki 2026

  • CVE-2026-97381
    39İzleyin

    Legacy Update ActiveX control accepts unauthorized hosting origins

    KritikCVSS 9,9İstismar yokEPSS %0

    legacyupdate · legacyupdate13 Eki 2026

  • CVE-2026-88964
    28İzleyin

    An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denia

    YüksekCVSS 7,1İstismar yokEPSS %0

    openvpn · openvpn13 Eki 2026

  • CVE-2026-92817
    34İzleyin

    Inductive Automation Ignition Software Incorrect Authorization

    YüksekCVSS 8,7İstismar yokEPSS %0

    inductive automation · ignition14 Eki 2026

  • CVE-2026-108473
    34İzleyin

    Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices

    YüksekCVSS 8,7İstismar yokEPSS %0

    tp-link systems inc. · hs103 v514 Eki 2026

  • CVE-2026-110359
    31İzleyin

    Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation.

    YüksekCVSS 7,8İstismar yokEPSS %0

    hyland · desktop host14 Eki 2026

  • CVE-2026-110385
    34İzleyin

    A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbo

    YüksekCVSS 8,7İstismar yokEPSS %1

    onlyoffice · document server14 Eki 2026

  • CVE-2026-103423
    30İzleyin

    Booking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'pub

    YüksekCVSS 7,5İstismar yokEPSS %0

    masaakitanaka · booking package14 Eki 2026

  • CVE-2026-104749
    30İzleyin

    Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-C

    YüksekCVSS 7,5İstismar yokEPSS %0

    bitpressadmin · bit integrations – form integration, webhook, spreadsheets, crm, lms & email automation14 Eki 2026

  • CVE-2026-104767
    30İzleyin

    Membership & User Roles for WooCommerce (Automatic Role Changer) <= 20260828 - Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cache

    YüksekCVSS 7,5İstismar yokEPSS %0

    davefx · membership & user roles for woocommerce (automatic role changer)14 Eki 2026

  • CVE-2026-104995
    32İzleyin

    BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value

    YüksekCVSS 8,1İstismar yokEPSS %0

    dontdream · bp profile search14 Eki 2026

  • CVE-2026-110392
    39İzleyin

    Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning

    KritikCVSS 9,8İstismar yokEPSS %1

    samsung open source · qa-board14 Eki 2026

  • CVE-2026-17092
    32İzleyin

    Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Delet

    YüksekCVSS 8,1İstismar yokEPSS %0

    wpwax · directorist: ai-powered business directory, listings & classified ads14 Eki 2026

  • CVE-2026-82715
    31İzleyin

    Insecure Temporary File Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O Server

    YüksekCVSS 7,9İstismar yokEPSS %0

    hitachi · hitachi disk array driver for aix14 Eki 2026

  • CVE-2026-92097
    36İzleyin

    Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder

    KritikCVSS 9,1İstismar yokEPSS %0

    holithemes · click to chat – holithemes14 Eki 2026

  • CVE-2026-93388
    39İzleyin

    Printcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdes

    KritikCVSS 9,8İstismar yokEPSS %0

    printcart · printcart store – web to print product designer for woocommerce14 Eki 2026