İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

5.213 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 46 / 53

  • CVE-2026-44084
    34İzleyin

    Access Code Forgery in Video Station leading to unauthorized media access

    YüksekCVSS 8,7İstismar yokEPSS %0

    qnap · video station5 gün önce

  • CVE-2026-47786
    37İzleyin

    Pre-Authentication Command Injection

    KritikCVSS 9,3İstismar yokEPSS %1

    qnap systems inc. · hybriddesk station5 gün önce

  • CVE-2026-50612
    37İzleyin

    Import Symlink Following Remote Code Execution Vulnerability in QuMagie

    KritikCVSS 9,4İstismar yokEPSS %0

    qnap systems inc. · qumagie5 gün önce

  • CVE-2026-50619
    37İzleyin

    Unauthenticated remote code execution vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    qnap systems inc. · qsirch5 gün önce

  • CVE-2026-53882
    34İzleyin

    Path Traversal in Virtualization Station VM Import

    YüksekCVSS 8,7İstismar yokEPSS %0

    qnap systems inc. · virtualization station5 gün önce

  • CVE-2026-79824
    32İzleyin

    HPE NonStop Python 3.x - Directory traversal vulnerability

    YüksekCVSS 8,0İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop python 3.x5 gün önce

  • CVE-2026-79825
    28İzleyin

    HPE NonStop NDSREST - Heap buffer overflow vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop ndsrest5 gün önce

  • CVE-2026-79826
    28İzleyin

    HPE NonStop OCAX - Heap buffer overflow vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop ocax5 gün önce

  • CVE-2026-79827
    28İzleyin

    HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop inspect subsystem5 gün önce

  • CVE-2026-79828
    28İzleyin

    HPE NonStop Debug Utilities - Heap buffer overflow vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop debug utilities5 gün önce

  • CVE-2026-79829
    32İzleyin

    HPE NonStop HTTP WEBSERVER - Memory corruption vulnerability

    YüksekCVSS 8,2İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop http webserver5 gün önce

  • CVE-2026-108491
    28İzleyin

    WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    everest forms · everest forms5 gün önce

  • CVE-2026-108497
    37İzleyin

    WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    tms · amelia5 gün önce

  • CVE-2026-108498
    28İzleyin

    WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    bannersky · bsk pdf manager5 gün önce

  • CVE-2026-109694
    39İzleyin

    WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    wp manageninja llc · fluent crm5 gün önce

  • CVE-2026-109695
    30İzleyin

    WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpmanageninja · fluentcart5 gün önce

  • CVE-2026-79832
    30İzleyin

    HPE NonStop SQL/MX Executor - Buffer overflow vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop sql/mx executor5 gün önce

  • CVE-2026-79833
    30İzleyin

    HPE NonStop ANSI SQLUTIL - Denial of Service vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop ansi sqlutil5 gün önce

  • CVE-2026-79834
    29İzleyin

    HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability

    YüksekCVSS 7,4İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop sql/mx sqlcat5 gün önce

  • CVE-2026-104025
    33İzleyin

    Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name

    YüksekCVSS 8,4İstismar yokEPSS %0

    peazip · peazip4 gün önce

  • CVE-2026-107416
    30İzleyin

    WordPress Webba Booking plugin <= 6.5.2 - Insecure Direct Object References (IDOR) vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    webba plugins · webba booking4 gün önce

  • CVE-2026-109685
    28İzleyin

    WordPress Link Whisper Free plugin <= 0.9.7 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    link whisper inc · link whisper free4 gün önce

  • CVE-2026-109686
    39İzleyin

    WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    link whisper inc · link whisper free4 gün önce

  • CVE-2026-109688
    37İzleyin

    WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    link whisper inc · link whisper free4 gün önce

  • CVE-2026-109692
    28İzleyin

    WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    themegrill · user registration4 gün önce

  • CVE-2026-109693
    35İzleyin

    WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    wp manageninja llc · fluent crm4 gün önce

  • CVE-2026-109698
    37İzleyin

    WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    kitae park · mang board wp4 gün önce

  • CVE-2026-109702
    28İzleyin

    WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    maxfoundry · social share buttons4 gün önce

  • CVE-2026-109892
    39İzleyin

    WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    shabti kaplan · frontend admin by dynamiapps4 gün önce

  • CVE-2026-110723
    30İzleyin

    In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from t

    YüksekCVSS 7,5İstismar yokEPSS %0

    eclipse foundation · eclipse connected services platform4 gün önce

  • CVE-2026-110724
    30İzleyin

    In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from t

    YüksekCVSS 7,5İstismar yokEPSS %0

    eclipse foundation · eclipse connected services platform4 gün önce

  • CVE-2026-79837
    29İzleyin

    HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop sql/mx udr server4 gün önce

  • CVE-2026-88794
    32İzleyin

    XML External Entity injection in Sparx Enterprise Architect

    YüksekCVSS 8,2İstismar yokEPSS %0

    sparx systems · enterprise architect4 gün önce

  • CVE-2026-99999
    37İzleyin

    ipv4: validate checksum_start before completing checksum

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    linux · linux4 gün önce

  • CVE-2026-93649
    30İzleyin

    In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (

    YüksekCVSS 7,5İstismar yokEPSS %0

    eclipse foundation · adoptium temurin4 gün önce

  • CVE-2026-103508
    29İzleyin

    Path traversal via logging configuration in P4Search

    YüksekCVSS 7,3İstismar yokEPSS %0

    perforce · p4 (helix core)4 gün önce

  • CVE-2026-103509
    34İzleyin

    Credential Disclosure in P4 Search Configuration API

    YüksekCVSS 8,5İstismar yokEPSS %0

    perforce · p4 (helix core)4 gün önce

  • CVE-2026-104586
    39İzleyin

    AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    4 gün önce

  • CVE-2026-108082
    34İzleyin

    Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

    YüksekCVSS 8,7İstismar yokEPSS %0

    sensiolabs · symfony4 gün önce

  • CVE-2026-108116
    30İzleyin

    MDX and SOAP Injection in Kendo UI for jQuery

    YüksekCVSS 7,5İstismar yokEPSS %0

    progress software · kendo ui for jquery4 gün önce

  • CVE-2026-109413
    34İzleyin

    Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process

    YüksekCVSS 8,7İstismar yokEPSS %0

    sensiolabs · symfony4 gün önce

  • CVE-2026-110746
    31İzleyin

    A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through

    YüksekCVSS 7,8İstismar yokEPSS %0

    totalsecurity · totalav4 gün önce

  • CVE-2026-110936
    33İzleyin

    A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8).

    YüksekCVSS 8,4İstismar yokEPSS %0

    siemens · siemens software center4 gün önce

  • CVE-2026-110957
    38İzleyin

    Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection

    KritikCVSS 9,3İstismar yokEPSS %3

    wavlink · wl-wn530be2-a4 gün önce

  • CVE-2026-47168
    36İzleyin

    EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params

    KritikCVSS 9,1İstismar yokEPSS %0

    espocrm · espocrm4 gün önce

  • CVE-2026-53574
    30İzleyin

    EspoCRM: Blind SQL injection via streamAttachments where-clause complex expression

    YüksekCVSS 7,6İstismar yokEPSS %0

    espocrm · espocrm4 gün önce

  • CVE-2026-79838
    29İzleyin

    HPE NonStop ODBC/MX Services - Memory corruption vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop odbc/mx services4 gün önce

  • CVE-2026-79839
    29İzleyin

    HPE NonStop ODBC/MX Server - Memory corruption vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop odbc/mx server4 gün önce

  • CVE-2026-79840
    29İzleyin

    HPE NonStop XABroker - Memory corruption vulnerability

    YüksekCVSS 7,3İstismar yokEPSS %0

    hewlett packard enterprise · hpe nonstop xabroker4 gün önce

  • CVE-2026-95179
    30İzleyin

    An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animati

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-9703
    28İzleyin

    Viewer role can create, modify and delete Loki alerting rules

    YüksekCVSS 7,1İstismar yokEPSS %0

    grafana · grafana enterprise4 gün önce

  • CVE-2026-100349
    32İzleyin

    kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content

    YüksekCVSS 8,2İstismar yokEPSS %0

    getkin · kin-openapi4 gün önce

  • CVE-2026-100351
    29İzleyin

    kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

    YüksekCVSS 7,4İstismar yokEPSS %0

    getkin · kin-openapi4 gün önce

  • CVE-2026-100352
    30İzleyin

    kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path

    YüksekCVSS 7,5İstismar yokEPSS %0

    getkin · kin-openapi4 gün önce

  • CVE-2026-105474
    37İzleyin

    A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary c

    KritikCVSS 9,4İstismar yokEPSS %0

    webpros · solusvm 24 gün önce

  • CVE-2026-109449
    34İzleyin

    Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process

    YüksekCVSS 8,7İstismar yokEPSS %0

    sensiolabs · symfony4 gün önce

  • CVE-2026-110958
    37İzleyin

    Wavlink WN530HG4B api.cgi heap-based overflow

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    wavlink · wn530hg4b4 gün önce

  • CVE-2026-111091
    31İzleyin

    In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration

    YüksekCVSS 7,8İstismar yokEPSS %0

    jetbrains · junie cli4 gün önce

  • CVE-2026-111093
    30İzleyin

    In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files

    YüksekCVSS 7,5İstismar yokEPSS %0

    jetbrains · datalore4 gün önce

  • CVE-2026-111094
    39İzleyin

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was p

    KritikCVSS 9,8İstismar yokEPSS %0

    jetbrains · teamcity4 gün önce

  • CVE-2026-45449
    33İzleyin

    Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

    YüksekCVSS 8,3İstismar yokEPSS %0

    unitronics · unitronics unistream pro/unilogic4 gün önce

  • CVE-2026-45450
    33İzleyin

    Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

    YüksekCVSS 8,3İstismar yokEPSS %0

    unitronics · unitronics unistream pro/unilogic4 gün önce

  • CVE-2026-45451
    33İzleyin

    Unitronics - CWE-287: Improper Authentication

    YüksekCVSS 8,3İstismar yokEPSS %0

    unitronics · unitronics unistream pro/unilogic4 gün önce

  • CVE-2026-45452
    33İzleyin

    Unitronics - CWE-134 Use of Externally-Controlled format string

    YüksekCVSS 8,3İstismar yokEPSS %0

    unitronics · unitronics unistream pro/unilogic4 gün önce

  • CVE-2026-53582
    28İzleyin

    OPNsense: XPATH Injection can disclose any secret in config.xml

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    opnsense · core4 gün önce

  • CVE-2026-57155
    39İzleyin

    OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    opnsense · core4 gün önce

  • CVE-2026-58390
    32İzleyin

    OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views

    YüksekCVSS 8,0İstismar yokEPSS %0

    opnsense · core4 gün önce

  • CVE-2026-63442
    32İzleyin

    OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking

    YüksekCVSS 8,1İstismar yokEPSS %0

    opnsense · core4 gün önce

  • CVE-2026-71490
    28İzleyin

    OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection

    YüksekCVSS 7,1İstismar yokEPSS %0

    opnsense · core4 gün önce

  • CVE-2026-88753
    30İzleyin

    A Regular-Expression Denial of Service (ReDoS) in the Markdown2.

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-92982
    34İzleyin

    Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection

    YüksekCVSS 8,5İstismar yokEPSS %0

    red hat · migration toolkit for applications 84 gün önce

  • CVE-2026-95155
    30İzleyin

    FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-97394
    30İzleyin

    kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items

    YüksekCVSS 7,5İstismar yokEPSS %0

    getkin · kin-openapi4 gün önce

  • CVE-2026-97665
    28İzleyin

    Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload

    YüksekCVSS 7,1İstismar yokEPSS %0

    sonatype · nexus repository 34 gün önce

  • CVE-2026-97712
    34İzleyin

    Nexus Repository 3 - Privilege Escalation via Role Management

    YüksekCVSS 8,7İstismar yokEPSS %0

    sonatype · nexus repository 34 gün önce

  • CVE-2026-100353
    30İzleyin

    kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter

    YüksekCVSS 7,5İstismar yokEPSS %0

    getkin · kin-openapi4 gün önce

  • CVE-2026-100354
    30İzleyin

    kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash

    YüksekCVSS 7,5İstismar yokEPSS %0

    getkin · kin-openapi4 gün önce

  • CVE-2026-100409
    30İzleyin

    OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths

    YüksekCVSS 7,5İstismar yokEPSS %0

    opennextjs · opennextjs-cloudflare4 gün önce

  • CVE-2026-105065
    28İzleyin

    WordPress XStore theme < 9.7.9 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    8theme.com · xstore4 gün önce

  • CVE-2026-110812
    37İzleyin

    Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune

    KritikCVSS 9,4İstismar yokEPSS %0

    aws · amazon neptune engine4 gün önce

  • CVE-2026-61611
    30İzleyin

    Lychee: Missing rate limiting on album password unlock endpoint allows brute-force attacks

    YüksekCVSS 7,5İstismar yokEPSS %0

    lycheeorg · lychee4 gün önce

  • CVE-2026-61838
    32İzleyin

    Lychee: Album password bypass in ZIP downloads

    YüksekCVSS 8,2İstismar yokEPSS %0

    lycheeorg · lychee4 gün önce

  • CVE-2026-62679
    35İzleyin

    Lychee: Path traversal in `SecurePathController` allows authenticated arbitrary file read

    YüksekCVSS 8,9İstismar yokEPSS %0

    lycheeorg · lychee4 gün önce

  • CVE-2026-77466
    33İzleyin

    Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection

    YüksekCVSS 8,3İstismar yokEPSS %0

    lycheeorg · lychee4 gün önce

  • CVE-2026-77467
    28İzleyin

    Lychee: A single 383-byte PDF causes ~184 seconds of CPU consumption in the real processing path

    YüksekCVSS 7,1İstismar yokEPSS %0

    lycheeorg · lychee4 gün önce

  • CVE-2026-77470
    33İzleyin

    Lychee: Webshop checkout lets the client override the payment `amount` sent to the gateway via malicious crafted POST request

    YüksekCVSS 8,3İstismar yokEPSS %0

    lycheeorg · lychee4 gün önce

  • CVE-2026-78850
    20İzleyin

    An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component

    OrtaCVSS 5,0Kavram kanıtıEPSS %0

    4 gün önce

  • CVE-2026-78851
    26İzleyin

    Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExten

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    4 gün önce

  • CVE-2026-85634
    35İzleyin

    Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat fuse 74 gün önce

  • CVE-2026-103936
    30İzleyin

    libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners

    YüksekCVSS 7,5İstismar yokEPSS %0

    libp2p · js-libp2p4 gün önce

  • CVE-2026-111105
    28İzleyin

    Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability

    YüksekCVSS 7,0İstismar yokEPSS %0

    telegram · telegram4 gün önce

  • CVE-2026-55103
    34İzleyin

    Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardening

    YüksekCVSS 8,6İstismar yokEPSS %0

    discourse · discourse-activity-pub4 gün önce

  • CVE-2026-55246
    31İzleyin

    bincookie: Heap buffer overflow via unvalidated `num_pages` when parsing a `.binarycookies` file

    YüksekCVSS 7,8İstismar yokEPSS %0

    tatsh · bincookie4 gün önce

  • CVE-2026-84731
    37İzleyin

    Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS

    KritikCVSS 9,3İstismar yokEPSS %1

    nutanix · acropolis operating system (aos)4 gün önce

  • CVE-2026-102946
    36İzleyin

    joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json

    KritikCVSS 9,1İstismar yokEPSS %0

    authlib · joserfc4 gün önce

  • CVE-2026-104150
    34İzleyin

    AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity

    YüksekCVSS 8,7İstismar yokEPSS %0

    adonisjs · http-server4 gün önce

  • CVE-2026-104827
    30İzleyin

    react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS

    YüksekCVSS 7,5İstismar yokEPSS %0

    reactphp · http4 gün önce

  • CVE-2026-104828
    28İzleyin

    HtmlUnit Neko: Mutation XSS (mXSS) in HTMLWriterFilter - TEXTAREA/TITLE entity decode without re-encode

    YüksekCVSS 7,2İstismar yokEPSS %0

    htmlunit · htmlunit-neko4 gün önce

  • CVE-2026-108334
    29İzleyin

    Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted http

    YüksekCVSS 7,4İstismar yokEPSS %0

    red hat · red hat connectivity link 14 gün önce

  • CVE-2026-109383
    36İzleyin

    undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

    KritikCVSS 9,1İstismar yokEPSS %0

    nodejs · undici4 gün önce