Yayın tarihine göre
Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları
6.475 kayıt · 12 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 63 / 65
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
28İzleyin | CVE-2026-82819İstismar yok | Universal Naming Convention (UNC) Path Injection in Cerberus FTP Servercerberus · cerberus ftp server · CWE-40 | Yüksek7,1 | — | %0,4 | 1 gün önce |
30İzleyin | CVE-2026-102499İstismar yok | Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_attendees AJAX Actionunknown · modern events calendar lite · CWE-89 | Yüksek7,7 | — | %0,1 | 1 gün önce |
32İzleyin | CVE-2026-105262İstismar yok | Falang multilanguage for WordPress < 1.4.6 - Subscriber+ Stored XSS via Term Translationunknown · falang multilanguage for wordpress · CWE-79 | Yüksek8,0 | — | %0,1 | 1 gün önce |
30İzleyin | CVE-2026-107127İstismar yok | Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRFunknown · uncanny toolkit for learndash · CWE-352 | Yüksek7,5 | — | %0,1 | 1 gün önce |
32İzleyin | CVE-2026-107237İstismar yok | Backup and Staging by WP Time Capsule < 1.22.28 - Subscriber+ Staging-to-Live Deployment via wptc_copy_stage_to_liveunknown · backup and staging by wp time capsule · CWE-862 | Yüksek8,2 | — | %0,1 | 1 gün önce |
30İzleyin | CVE-2026-107506İstismar yok | Simple Banner < 3.3.3 - Authenticated Privilege Escalation via User Permissions Settingunknown · simple banner · CWE-269 | Yüksek7,5 | — | %0,1 | 1 gün önce |
28İzleyin | CVE-2026-109147İstismar yok | WP Booking System < 2.1.0.3 - Reflected XSS via 'booking_id' Parameterunknown · wp booking system · CWE-79 | Yüksek7,1 | — | %0,1 | 1 gün önce |
32İzleyin | CVE-2026-110523İstismar yok | WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe Disconnectunknown · wp user manager · CWE-269 | Yüksek8,1 | — | %0,1 | 1 gün önce |
30İzleyin | CVE-2026-111574İstismar yok | Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored XSS via Lead Debug Metaboxunknown · redirection for contact form 7 · CWE-79 | Yüksek7,5 | — | %0,1 | 1 gün önce |
28İzleyin | CVE-2026-111948İstismar yok | Profile Builder < 4.0.1 - Reflected XSS via Unconfirmed Emails Row Actionsunknown · user profile builder · CWE-79 | Yüksek7,1 | — | %0,1 | 1 gün önce |
30İzleyin | CVE-2026-111949İstismar yok | miniOrange 2FA 6.2.9 - 6.3.0 - 2FA Bypass via Passkey Second-Factor Rebindingunknown · miniorange 2fa · CWE-287 | Yüksek7,5 | — | %0,1 | 1 gün önce |
39İzleyin | CVE-2026-71195İstismar yok | In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share.openstack · manila · CWE-863 | Kritik9,9 | — | %0,4 | 1 gün önce |
28İzleyin | CVE-2026-79627İstismar yok | Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypassunknown · advanced file manager · CWE-79 | Yüksek7,1 | — | %0,1 | 1 gün önce |
30İzleyin | CVE-2026-85642İstismar yok | Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoSunknown · formidable forms · CWE-400 | Yüksek7,5 | — | %0,1 | 1 gün önce |
30İzleyin | CVE-2026-88784İstismar yok | Weglot < 6.4.3 - Unauthenticated Stored XSS via Translated Page Link Rewritingunknown · translate wordpress with weglot 2.0 · CWE-79 | Yüksek7,5 | — | %0,1 | 1 gün önce |
34İzleyin | CVE-2026-92997İstismar yok | Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameterunknown · click n chat (chat widget integration) · CWE-89 | Yüksek8,6 | — | %0,1 | 1 gün önce |
34İzleyin | CVE-2026-92998İstismar yok | Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort_by'/'sort_order' Parametersunknown · click n chat (chat widget integration) · CWE-89 | Yüksek8,6 | — | %0,1 | 1 gün önce |
28İzleyin | CVE-2026-107435İstismar yok | WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerabilitywp chill · strong testimonials · CWE-79 | Yüksek7,1 | — | %0,1 | 1 gün önce |
28İzleyin | CVE-2026-110899Kavram kanıtı | WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerabilitykevin stover · ninja forms · CWE-79 | Yüksek7,1 | — | %0,1 | 1 gün önce |
34İzleyin | CVE-2026-111074İstismar yok | JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()eclipse foundation · eclipse openj9 · CWE-190 | Yüksek8,7 | — | %0,4 | 1 gün önce |
34İzleyin | CVE-2026-111075İstismar yok | JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserializationeclipse foundation · eclipse openj9 · CWE-125 | Yüksek8,7 | — | %0,3 | 1 gün önce |
34İzleyin | CVE-2026-110938İstismar yok | JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsingeclipse foundation · eclipse openj9 · CWE-20 | Yüksek8,7 | — | %0,4 | 1 gün önce |
34İzleyin | CVE-2026-70386İstismar yok | OnePlus OxygenOS improper neutralization of special elements vulnerabilityoneplus · oxygenos · CWE-78 | Yüksek8,5 | — | %1,2 | 1 gün önce |
33İzleyin | CVE-2026-70387İstismar yok | OnePlus OxygenOS exposed dangerous method vulnerabilityoneplus · oxygenos · CWE-749 | Yüksek8,4 | — | %0,1 | 1 gün önce |
35İzleyin | CVE-2026-85683İstismar yok | Jane Menu < 1.5.1 - Unauthenticated Stored XSS via Store Config Proxy URLunknown · jane menu · CWE-79 | Yüksek8,8 | — | %0,2 | 1 gün önce |
30İzleyin | CVE-2026-97206İstismar yok | DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.nlnet labs · unbound · CWE-416 | Yüksek7,5 | — | %0,2 | 1 gün önce |
35İzleyin | CVE-2026-110369İstismar yok | WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerabilitygs plugins · wordpress team members – gs plugins · CWE-502 | Yüksek8,8 | — | %0,5 | 1 gün önce |
35İzleyin | CVE-2026-110370İstismar yok | WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerabilitygs plugins · gs pins for pinterest · CWE-502 | Yüksek8,8 | — | %0,5 | 1 gün önce |
28İzleyin | CVE-2026-110884İstismar yok | WordPress Live Summary for Gravity Forms plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerabilitygeekontheroad · live summary for gravity forms · CWE-79 | Yüksek7,1 | — | %0,2 | 1 gün önce |
36İzleyin | CVE-2026-87095İstismar yok | Sensitive information disclosure and manipulation due to improper authorization checks.acronis · acronis cyber infrastructure · CWE-863 | Kritik9,1 | — | — | 1 gün önce |
30İzleyin | CVE-2026-56386İstismar yok | Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parserapache software foundation · apache brpc · CWE-125 | Yüksek7,5 | — | — | 1 gün önce |
34İzleyin | CVE-2026-114387İstismar yok | Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Componentsshopperlabs · shopper · CWE-862 | Yüksek8,7 | — | — | 1 gün önce |
28İzleyin | CVE-2026-114391İstismar yok | ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methodseasysoft · zentaopms · CWE-863 | Yüksek7,1 | — | — | 1 gün önce |
28İzleyin | CVE-2026-114396İstismar yok | Trudesk through 1.2.11 MongoDB $where Injection via tickets search APIpolonel · trudesk · CWE-943 | Yüksek7,1 | — | — | 1 gün önce |
33İzleyin | CVE-2026-114397İstismar yok | Trudesk through 1.2.11 Missing Authentication on Debug Routespolonel · trudesk · CWE-1188 | Yüksek8,3 | — | — | 1 gün önce |
28İzleyin | CVE-2026-114399İstismar yok | Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore APIpolonel · trudesk · CWE-22 | Yüksek7,0 | — | — | 1 gün önce |
32İzleyin | CVE-2026-114400İstismar yok | Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploadspolonel · trudesk · CWE-552 | Yüksek8,2 | — | — | 1 gün önce |
36İzleyin | CVE-2026-114403İstismar yok | PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\Serialized::loadphpoffice · phppresentation · CWE-502 | Kritik9,2 | — | — | 1 gün önce |
34İzleyin | CVE-2026-114405İstismar yok | Denial of Service via Malformed VATP Packet in Velneo vServervelneo · vserver · CWE-129 | Yüksek8,7 | — | — | 1 gün önce |
30İzleyin | CVE-2026-19630İstismar yok | Amplified resource exhaustion in inbound message processingisc · bind 9 · CWE-407 | Yüksek7,5 | — | — | 1 gün önce |
30İzleyin | CVE-2026-82230İstismar yok | Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb Parserapache software foundation · apache brpc · CWE-674 | Yüksek7,5 | — | — | 1 gün önce |
32İzleyin | CVE-2026-94300İstismar yok | Concurrent GSS-TSIG messages corrupt memoryisc · bind 9 · CWE-362 | Yüksek8,1 | — | — | 1 gün önce |
30İzleyin | CVE-2026-96888İstismar yok | Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimizationisc · bind 9 · CWE-476 | Yüksek7,5 | — | — | 1 gün önce |
30İzleyin | CVE-2026-97313İstismar yok | Specific RPZ configurations and query patterns may result in an unexpected exitisc · bind 9 · CWE-617 | Yüksek7,5 | — | — | 1 gün önce |
28İzleyin | CVE-2026-104948İstismar yok | WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the builenterprisedb · warehousepg · CWE-862 | Yüksek7,1 | — | — | 1 gün önce |
36İzleyin | CVE-2026-109618Kavram kanıtı | RCE via OOM corruptionphp · php · CWE-416 | Kritik9,2 | — | — | 1 gün önce |
36İzleyin | CVE-2026-109619Kavram kanıtı | RCE via stale global statephp · php · CWE-416 | Kritik9,2 | — | — | 1 gün önce |
40Planlayın | CVE-2026-111832İstismar yok | WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerabilitywp mailster · wp mailster · CWE-434 | Kritik10,0 | — | — | 1 gün önce |
30İzleyin | CVE-2026-111833İstismar yok | WordPress weForms plugin <= 1.6.28 - Arbitrary File Deletion vulnerabilitybold grid · weforms · CWE-22 | Yüksek7,5 | — | — | 1 gün önce |
39İzleyin | CVE-2026-111834İstismar yok | WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerabilitykitae park · mang board wp · CWE-434 | Kritik9,9 | — | — | 1 gün önce |
28İzleyin | CVE-2026-111838İstismar yok | WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerabilitythemehunk · themehunk customizer · CWE-79 | Yüksek7,1 | — | — | 1 gün önce |
28İzleyin | CVE-2026-111840İstismar yok | WordPress Paid Videochat Turnkey Site plugin <= 7.5.14 - Cross Site Scripting (XSS) vulnerabilityvideowhisper.com · paid videochat turnkey site · CWE-79 | Yüksek7,1 | — | — | 1 gün önce |
28İzleyin | CVE-2026-111848İstismar yok | WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerabilitydylan kuhn · geo mashup · CWE-79 | Yüksek7,1 | — | — | 1 gün önce |
37İzleyin | CVE-2026-111852İstismar yok | WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerabilitywpdreams · ajax search lite · CWE-89 | Kritik9,3 | — | — | 1 gün önce |
28İzleyin | CVE-2026-112221İstismar yok | WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerabilitybrainstorm force · surecart · CWE-79 | Yüksek7,1 | — | — | 1 gün önce |
35İzleyin | CVE-2026-113779İstismar yok | pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permissionpfrest · pfsense-pkg-restapi · CWE-502 | Yüksek8,8 | — | — | 1 gün önce |
30İzleyin | CVE-2026-102483İstismar yok | Reachable Assertion in ntpsecntpsec · ntpsec · CWE-617 | Yüksek7,5 | — | — | 1 gün önce |
30İzleyin | CVE-2026-102486İstismar yok | Out-of-bounds Read in ntpsecntpsec · ntpsec · CWE-125 | Yüksek7,5 | — | — | 1 gün önce |
37İzleyin | CVE-2026-113788İstismar yok | Lagoon core ssh service vulnerable to remote code executionuselagoon · lagoon · CWE-78 | Kritik9,4 | — | — | 1 gün önce |
30İzleyin | CVE-2026-114476İstismar yok | Incorrect Authorization in hMailServerprogressive robot ltd · hmailserver · CWE-863 | Yüksek7,5 | — | — | 1 gün önce |
32İzleyin | CVE-2026-114489İstismar yok | Missing Authorization in hMailServerprogressive robot ltd · hmailserver · CWE-862 | Yüksek8,1 | — | — | 1 gün önce |
31İzleyin | CVE-2026-114490İstismar yok | Incorrect Authorization in hMailServerprogressive robot ltd · hmailserver · CWE-863 | Yüksek7,8 | — | — | 1 gün önce |
30İzleyin | CVE-2026-114123İstismar yok | D365 F&O MCP Server: Official Azure one-click deployment ships with authentication disabled by default, exposing proprietary X++ source over the public internetdynamics365ninja · d365fo-mcp-server · CWE-306 | Yüksek7,5 | — | — | 1 gün önce |
36İzleyin | CVE-2026-20043İstismar yok | Multiple Cisco Products Snort 3 Software Hardening Release: October 2026cisco · cisco cyber vision · CWE-787 | Kritik9,0 | — | — | 1 gün önce |
30İzleyin | CVE-2026-20236İstismar yok | Multiple Cisco Products Snort 3 Software Hardening Release: October 2026cisco · cisco cyber vision · CWE-682 | Yüksek7,5 | — | — | 1 gün önce |
31İzleyin | CVE-2026-20291İstismar yok | Multiple Cisco Products Snort 3 Software Hardening Release: October 2026cisco · cisco cyber vision · CWE-269 | Yüksek7,8 | — | — | 1 gün önce |
30İzleyin | CVE-2026-20356İstismar yok | Multiple Cisco Products Snort 3 Software Hardening Release: October 2026cisco · cisco cyber vision · CWE-400 | Yüksek7,5 | — | — | 1 gün önce |
39İzleyin | CVE-2026-76466İstismar yok | Cisco Expressway Series Remote Code Execution Vulnerabilitycisco · cisco telepresence video communication server (vcs) expressway · CWE-798 | Kritik9,8 | — | — | 1 gün önce |
39İzleyin | CVE-2026-76473İstismar yok | Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.cisco · cisco emergency responder · CWE-74 | Kritik9,8 | — | — | 1 gün önce |
39İzleyin | CVE-2026-76474İstismar yok | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilitiescisco · cisco emergency responder · CWE-287 | Kritik9,8 | — | — | 1 gün önce |
37İzleyin | CVE-2026-76475İstismar yok | Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilitiescisco · cisco emergency responder · CWE-79 | Kritik9,3 | — | — | 1 gün önce |
35İzleyin | CVE-2026-76476İstismar yok | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilitiescisco · cisco emergency responder · CWE-20 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-76477İstismar yok | Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilitiescisco · cisco emergency responder · CWE-89 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-76478İstismar yok | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilitiescisco · cisco emergency responder · CWE-284 | Yüksek8,8 | — | — | 1 gün önce |
31İzleyin | CVE-2026-76479İstismar yok | Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilitiescisco · cisco emergency responder · CWE-22 | Yüksek7,8 | — | — | 1 gün önce |
30İzleyin | CVE-2026-76481İstismar yok | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilitiescisco · cisco emergency responder · CWE-703 | Yüksek7,5 | — | — | 1 gün önce |
34İzleyin | CVE-2026-76490İstismar yok | Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilitiescisco · cisco telepresence video communication server (vcs) expressway · CWE-787 | Yüksek8,6 | — | — | 1 gün önce |
30İzleyin | CVE-2026-76491İstismar yok | Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilitiescisco · cisco telepresence video communication server (vcs) expressway · CWE-617 | Yüksek7,5 | — | — | 1 gün önce |
30İzleyin | CVE-2026-76492İstismar yok | Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilitiescisco · cisco telepresence video communication server (vcs) expressway · CWE-476 | Yüksek7,5 | — | — | 1 gün önce |
30İzleyin | CVE-2026-76493İstismar yok | Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilitiescisco · cisco telepresence video communication server (vcs) expressway · CWE-248 | Yüksek7,5 | — | — | 1 gün önce |
31İzleyin | CVE-2026-76494İstismar yok | Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilitiescisco · cisco telepresence video communication server (vcs) expressway · CWE-94 | Yüksek7,8 | — | — | 1 gün önce |
31İzleyin | CVE-2026-76495İstismar yok | Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilitiescisco · cisco telepresence video communication server (vcs) expressway · CWE-732 | Yüksek7,8 | — | — | 1 gün önce |
28İzleyin | CVE-2026-76496İstismar yok | Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilitiescisco · cisco telepresence video communication server (vcs) expressway · CWE-59 | Yüksek7,0 | — | — | 1 gün önce |
30İzleyin | CVE-2026-76505İstismar yok | Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerabilitycisco · cisco ios xr software · CWE-20 | Yüksek7,5 | — | — | 1 gün önce |
31İzleyin | CVE-2026-76524İstismar yok | Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerabilitycisco · cisco open source snort3 · CWE-306 | Yüksek7,8 | — | — | 1 gün önce |
36İzleyin | CVE-2026-105869İstismar yok | Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous user roleapache software foundation · apache pulsar · CWE-347 | Kritik9,2 | — | — | 1 gün önce |
28İzleyin | CVE-2026-110744İstismar yok | Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-widered hat · multicluster global hub · CWE-269 | Yüksek7,2 | — | — | 1 gün önce |
39İzleyin | CVE-2026-111183İstismar yok | GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerabilitygstreamer · gstreamer · CWE-122 | Kritik9,8 | — | — | 1 gün önce |
31İzleyin | CVE-2026-111184İstismar yok | NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerabilitynomachine · nomachine · CWE-732 | Yüksek7,8 | — | — | 1 gün önce |
34İzleyin | CVE-2026-114125İstismar yok | Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitesstorybookjs · storybook · CWE-94 | Yüksek8,6 | — | — | 1 gün önce |
34İzleyin | CVE-2026-114126İstismar yok | Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story filesstorybookjs · storybook · CWE-22 | Yüksek8,7 | — | — | 1 gün önce |
28İzleyin | CVE-2026-114492İstismar yok | gin-vue-admin through 2.9.2 Path Traversal via removePlugin Endpointflipped-aurora · gin-vue-admin · CWE-22 | Yüksek7,0 | — | — | 1 gün önce |
36İzleyin | CVE-2026-114493İstismar yok | LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirectslocalai · localai · CWE-918 | Kritik9,2 | — | — | 1 gün önce |
36İzleyin | CVE-2026-89035İstismar yok | MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypassmikrotik · routeros · CWE-613 | Kritik9,1 | — | — | 1 gün önce |
31İzleyin | CVE-2026-92183İstismar yok | GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-121 | Yüksek7,8 | — | — | 1 gün önce |
31İzleyin | CVE-2026-92202İstismar yok | Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerabilityluxion · keyshot · CWE-427 | Yüksek7,8 | — | — | 1 gün önce |
30İzleyin | CVE-2026-92203İstismar yok | Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerabilityairbyte · airbyte · CWE-918 | Yüksek7,7 | — | — | 1 gün önce |
30İzleyin | CVE-2026-92204İstismar yok | Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerabilityairbyte · airbyte · CWE-918 | Yüksek7,7 | — | — | 1 gün önce |
35İzleyin | CVE-2026-92206İstismar yok | CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerabilitycrewai · crewai · CWE-470 | Yüksek8,8 | — | — | 1 gün önce |
35İzleyin | CVE-2026-92207İstismar yok | MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerabilitymindsdb · mindsdb · CWE-94 | Yüksek8,8 | — | — | 1 gün önce |
- CVE-2026-8281928İzleyin
Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server
YüksekCVSS 7,1İstismar yokEPSS %0cerberus · cerberus ftp server1 gün önce
- CVE-2026-10249930İzleyin
Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_attendees AJAX Action
YüksekCVSS 7,7İstismar yokEPSS %0unknown · modern events calendar lite1 gün önce
- CVE-2026-10526232İzleyin
Falang multilanguage for WordPress < 1.4.6 - Subscriber+ Stored XSS via Term Translation
YüksekCVSS 8,0İstismar yokEPSS %0unknown · falang multilanguage for wordpress1 gün önce
- CVE-2026-10712730İzleyin
Uncanny Toolkit for LearnDash < 3.8.2 - Account Takeover via Password Reset CSRF
YüksekCVSS 7,5İstismar yokEPSS %0unknown · uncanny toolkit for learndash1 gün önce
- CVE-2026-10723732İzleyin
Backup and Staging by WP Time Capsule < 1.22.28 - Subscriber+ Staging-to-Live Deployment via wptc_copy_stage_to_live
YüksekCVSS 8,2İstismar yokEPSS %0unknown · backup and staging by wp time capsule1 gün önce
- CVE-2026-10750630İzleyin
Simple Banner < 3.3.3 - Authenticated Privilege Escalation via User Permissions Setting
YüksekCVSS 7,5İstismar yokEPSS %0unknown · simple banner1 gün önce
- CVE-2026-10914728İzleyin
WP Booking System < 2.1.0.3 - Reflected XSS via 'booking_id' Parameter
YüksekCVSS 7,1İstismar yokEPSS %0unknown · wp booking system1 gün önce
- CVE-2026-11052332İzleyin
WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe Disconnect
YüksekCVSS 8,1İstismar yokEPSS %0unknown · wp user manager1 gün önce
- CVE-2026-11157430İzleyin
Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored XSS via Lead Debug Metabox
YüksekCVSS 7,5İstismar yokEPSS %0unknown · redirection for contact form 71 gün önce
- CVE-2026-11194828İzleyin
Profile Builder < 4.0.1 - Reflected XSS via Unconfirmed Emails Row Actions
YüksekCVSS 7,1İstismar yokEPSS %0unknown · user profile builder1 gün önce
- CVE-2026-11194930İzleyin
miniOrange 2FA 6.2.9 - 6.3.0 - 2FA Bypass via Passkey Second-Factor Rebinding
YüksekCVSS 7,5İstismar yokEPSS %0unknown · miniorange 2fa1 gün önce
- CVE-2026-7119539İzleyin
In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share.
KritikCVSS 9,9İstismar yokEPSS %0openstack · manila1 gün önce
- CVE-2026-7962728İzleyin
Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass
YüksekCVSS 7,1İstismar yokEPSS %0unknown · advanced file manager1 gün önce
- CVE-2026-8564230İzleyin
Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS
YüksekCVSS 7,5İstismar yokEPSS %0unknown · formidable forms1 gün önce
- CVE-2026-8878430İzleyin
Weglot < 6.4.3 - Unauthenticated Stored XSS via Translated Page Link Rewriting
YüksekCVSS 7,5İstismar yokEPSS %0unknown · translate wordpress with weglot 2.01 gün önce
- CVE-2026-9299734İzleyin
Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter
YüksekCVSS 8,6İstismar yokEPSS %0unknown · click n chat (chat widget integration)1 gün önce
- CVE-2026-9299834İzleyin
Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort_by'/'sort_order' Parameters
YüksekCVSS 8,6İstismar yokEPSS %0unknown · click n chat (chat widget integration)1 gün önce
- CVE-2026-10743528İzleyin
WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0wp chill · strong testimonials1 gün önce
- CVE-2026-11089928İzleyin
WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1Kavram kanıtıEPSS %0kevin stover · ninja forms1 gün önce
- CVE-2026-11107434İzleyin
JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()
YüksekCVSS 8,7İstismar yokEPSS %0eclipse foundation · eclipse openj91 gün önce
- CVE-2026-11107534İzleyin
JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization
YüksekCVSS 8,7İstismar yokEPSS %0eclipse foundation · eclipse openj91 gün önce
- CVE-2026-11093834İzleyin
JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing
YüksekCVSS 8,7İstismar yokEPSS %0eclipse foundation · eclipse openj91 gün önce
- CVE-2026-7038634İzleyin
OnePlus OxygenOS improper neutralization of special elements vulnerability
YüksekCVSS 8,5İstismar yokEPSS %1oneplus · oxygenos1 gün önce
- CVE-2026-7038733İzleyin
OnePlus OxygenOS exposed dangerous method vulnerability
YüksekCVSS 8,4İstismar yokEPSS %0oneplus · oxygenos1 gün önce
- CVE-2026-8568335İzleyin
Jane Menu < 1.5.1 - Unauthenticated Stored XSS via Store Config Proxy URL
YüksekCVSS 8,8İstismar yokEPSS %0unknown · jane menu1 gün önce
- CVE-2026-9720630İzleyin
DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments.
YüksekCVSS 7,5İstismar yokEPSS %0nlnet labs · unbound1 gün önce
- CVE-2026-11036935İzleyin
WordPress WordPress Team Members – GS Plugins plugin <= 2.8.2 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0gs plugins · wordpress team members – gs plugins1 gün önce
- CVE-2026-11037035İzleyin
WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0gs plugins · gs pins for pinterest1 gün önce
- CVE-2026-11088428İzleyin
WordPress Live Summary for Gravity Forms plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0geekontheroad · live summary for gravity forms1 gün önce
- CVE-2026-8709536İzleyin
Sensitive information disclosure and manipulation due to improper authorization checks.
KritikCVSS 9,1İstismar yokacronis · acronis cyber infrastructure1 gün önce
- CVE-2026-5638630İzleyin
Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser
YüksekCVSS 7,5İstismar yokapache software foundation · apache brpc1 gün önce
- CVE-2026-11438734İzleyin
Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components
YüksekCVSS 8,7İstismar yokshopperlabs · shopper1 gün önce
- CVE-2026-11439128İzleyin
ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methods
YüksekCVSS 7,1İstismar yokeasysoft · zentaopms1 gün önce
- CVE-2026-11439628İzleyin
Trudesk through 1.2.11 MongoDB $where Injection via tickets search API
YüksekCVSS 7,1İstismar yokpolonel · trudesk1 gün önce
- CVE-2026-11439733İzleyin
Trudesk through 1.2.11 Missing Authentication on Debug Routes
YüksekCVSS 8,3İstismar yokpolonel · trudesk1 gün önce
- CVE-2026-11439928İzleyin
Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API
YüksekCVSS 7,0İstismar yokpolonel · trudesk1 gün önce
- CVE-2026-11440032İzleyin
Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads
YüksekCVSS 8,2İstismar yokpolonel · trudesk1 gün önce
- CVE-2026-11440336İzleyin
PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\Serialized::load
KritikCVSS 9,2İstismar yokphpoffice · phppresentation1 gün önce
- CVE-2026-11440534İzleyin
Denial of Service via Malformed VATP Packet in Velneo vServer
YüksekCVSS 8,7İstismar yokvelneo · vserver1 gün önce
- CVE-2026-1963030İzleyin
Amplified resource exhaustion in inbound message processing
YüksekCVSS 7,5İstismar yokisc · bind 91 gün önce
- CVE-2026-8223030İzleyin
Apache bRPC: Stack Exhaustion via Unbounded Recursion in mcpack2pb Parser
YüksekCVSS 7,5İstismar yokapache software foundation · apache brpc1 gün önce
- CVE-2026-9430032İzleyin
Concurrent GSS-TSIG messages corrupt memory
YüksekCVSS 8,1İstismar yokisc · bind 91 gün önce
- CVE-2026-9688830İzleyin
Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization
YüksekCVSS 7,5İstismar yokisc · bind 91 gün önce
- CVE-2026-9731330İzleyin
Specific RPZ configurations and query patterns may result in an unexpected exit
YüksekCVSS 7,5İstismar yokisc · bind 91 gün önce
- CVE-2026-10494828İzleyin
WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the buil
YüksekCVSS 7,1İstismar yokenterprisedb · warehousepg1 gün önce
- CVE-2026-10961836İzleyin
RCE via OOM corruption
KritikCVSS 9,2Kavram kanıtıphp · php1 gün önce
- CVE-2026-10961936İzleyin
RCE via stale global state
KritikCVSS 9,2Kavram kanıtıphp · php1 gün önce
- CVE-2026-11183240Planlayın
WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability
KritikCVSS 10,0İstismar yokwp mailster · wp mailster1 gün önce
- CVE-2026-11183330İzleyin
WordPress weForms plugin <= 1.6.28 - Arbitrary File Deletion vulnerability
YüksekCVSS 7,5İstismar yokbold grid · weforms1 gün önce
- CVE-2026-11183439İzleyin
WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability
KritikCVSS 9,9İstismar yokkitae park · mang board wp1 gün önce
- CVE-2026-11183828İzleyin
WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokthemehunk · themehunk customizer1 gün önce
- CVE-2026-11184028İzleyin
WordPress Paid Videochat Turnkey Site plugin <= 7.5.14 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokvideowhisper.com · paid videochat turnkey site1 gün önce
- CVE-2026-11184828İzleyin
WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokdylan kuhn · geo mashup1 gün önce
- CVE-2026-11185237İzleyin
WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability
KritikCVSS 9,3İstismar yokwpdreams · ajax search lite1 gün önce
- CVE-2026-11222128İzleyin
WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokbrainstorm force · surecart1 gün önce
- CVE-2026-11377935İzleyin
pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permission
YüksekCVSS 8,8İstismar yokpfrest · pfsense-pkg-restapi1 gün önce
- CVE-2026-10248330İzleyin
Reachable Assertion in ntpsec
YüksekCVSS 7,5İstismar yokntpsec · ntpsec1 gün önce
- CVE-2026-10248630İzleyin
Out-of-bounds Read in ntpsec
YüksekCVSS 7,5İstismar yokntpsec · ntpsec1 gün önce
- CVE-2026-11378837İzleyin
Lagoon core ssh service vulnerable to remote code execution
KritikCVSS 9,4İstismar yokuselagoon · lagoon1 gün önce
- CVE-2026-11447630İzleyin
Incorrect Authorization in hMailServer
YüksekCVSS 7,5İstismar yokprogressive robot ltd · hmailserver1 gün önce
- CVE-2026-11448932İzleyin
Missing Authorization in hMailServer
YüksekCVSS 8,1İstismar yokprogressive robot ltd · hmailserver1 gün önce
- CVE-2026-11449031İzleyin
Incorrect Authorization in hMailServer
YüksekCVSS 7,8İstismar yokprogressive robot ltd · hmailserver1 gün önce
- CVE-2026-11412330İzleyin
D365 F&O MCP Server: Official Azure one-click deployment ships with authentication disabled by default, exposing proprietary X++ source over the public internet
YüksekCVSS 7,5İstismar yokdynamics365ninja · d365fo-mcp-server1 gün önce
- CVE-2026-2004336İzleyin
Multiple Cisco Products Snort 3 Software Hardening Release: October 2026
KritikCVSS 9,0İstismar yokcisco · cisco cyber vision1 gün önce
- CVE-2026-2023630İzleyin
Multiple Cisco Products Snort 3 Software Hardening Release: October 2026
YüksekCVSS 7,5İstismar yokcisco · cisco cyber vision1 gün önce
- CVE-2026-2029131İzleyin
Multiple Cisco Products Snort 3 Software Hardening Release: October 2026
YüksekCVSS 7,8İstismar yokcisco · cisco cyber vision1 gün önce
- CVE-2026-2035630İzleyin
Multiple Cisco Products Snort 3 Software Hardening Release: October 2026
YüksekCVSS 7,5İstismar yokcisco · cisco cyber vision1 gün önce
- CVE-2026-7646639İzleyin
Cisco Expressway Series Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokcisco · cisco telepresence video communication server (vcs) expressway1 gün önce
- CVE-2026-7647339İzleyin
Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
KritikCVSS 9,8İstismar yokcisco · cisco emergency responder1 gün önce
- CVE-2026-7647439İzleyin
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
KritikCVSS 9,8İstismar yokcisco · cisco emergency responder1 gün önce
- CVE-2026-7647537İzleyin
Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
KritikCVSS 9,3İstismar yokcisco · cisco emergency responder1 gün önce
- CVE-2026-7647635İzleyin
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities
YüksekCVSS 8,8İstismar yokcisco · cisco emergency responder1 gün önce
- CVE-2026-7647735İzleyin
Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities
YüksekCVSS 8,8İstismar yokcisco · cisco emergency responder1 gün önce
- CVE-2026-7647835İzleyin
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities
YüksekCVSS 8,8İstismar yokcisco · cisco emergency responder1 gün önce
- CVE-2026-7647931İzleyin
Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities
YüksekCVSS 7,8İstismar yokcisco · cisco emergency responder1 gün önce
- CVE-2026-7648130İzleyin
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities
YüksekCVSS 7,5İstismar yokcisco · cisco emergency responder1 gün önce
- CVE-2026-7649034İzleyin
Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities
YüksekCVSS 8,6İstismar yokcisco · cisco telepresence video communication server (vcs) expressway1 gün önce
- CVE-2026-7649130İzleyin
Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities
YüksekCVSS 7,5İstismar yokcisco · cisco telepresence video communication server (vcs) expressway1 gün önce
- CVE-2026-7649230İzleyin
Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities
YüksekCVSS 7,5İstismar yokcisco · cisco telepresence video communication server (vcs) expressway1 gün önce
- CVE-2026-7649330İzleyin
Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities
YüksekCVSS 7,5İstismar yokcisco · cisco telepresence video communication server (vcs) expressway1 gün önce
- CVE-2026-7649431İzleyin
Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities
YüksekCVSS 7,8İstismar yokcisco · cisco telepresence video communication server (vcs) expressway1 gün önce
- CVE-2026-7649531İzleyin
Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities
YüksekCVSS 7,8İstismar yokcisco · cisco telepresence video communication server (vcs) expressway1 gün önce
- CVE-2026-7649628İzleyin
Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities
YüksekCVSS 7,0İstismar yokcisco · cisco telepresence video communication server (vcs) expressway1 gün önce
- CVE-2026-7650530İzleyin
Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability
YüksekCVSS 7,5İstismar yokcisco · cisco ios xr software1 gün önce
- CVE-2026-7652431İzleyin
Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability
YüksekCVSS 7,8İstismar yokcisco · cisco open source snort31 gün önce
- CVE-2026-10586936İzleyin
Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous user role
KritikCVSS 9,2İstismar yokapache software foundation · apache pulsar1 gün önce
- CVE-2026-11074428İzleyin
Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide
YüksekCVSS 7,2İstismar yokred hat · multicluster global hub1 gün önce
- CVE-2026-11118339İzleyin
GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokgstreamer · gstreamer1 gün önce
- CVE-2026-11118431İzleyin
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
YüksekCVSS 7,8İstismar yoknomachine · nomachine1 gün önce
- CVE-2026-11412534İzleyin
Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites
YüksekCVSS 8,6İstismar yokstorybookjs · storybook1 gün önce
- CVE-2026-11412634İzleyin
Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story files
YüksekCVSS 8,7İstismar yokstorybookjs · storybook1 gün önce
- CVE-2026-11449228İzleyin
gin-vue-admin through 2.9.2 Path Traversal via removePlugin Endpoint
YüksekCVSS 7,0İstismar yokflipped-aurora · gin-vue-admin1 gün önce
- CVE-2026-11449336İzleyin
LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects
KritikCVSS 9,2İstismar yoklocalai · localai1 gün önce
- CVE-2026-8903536İzleyin
MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass
KritikCVSS 9,1İstismar yokmikrotik · routeros1 gün önce
- CVE-2026-9218331İzleyin
GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokgimp · gimp1 gün önce
- CVE-2026-9220231İzleyin
Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokluxion · keyshot1 gün önce
- CVE-2026-9220330İzleyin
Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability
YüksekCVSS 7,7İstismar yokairbyte · airbyte1 gün önce
- CVE-2026-9220430İzleyin
Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability
YüksekCVSS 7,7İstismar yokairbyte · airbyte1 gün önce
- CVE-2026-9220635İzleyin
CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokcrewai · crewai1 gün önce
- CVE-2026-9220735İzleyin
MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokmindsdb · mindsdb1 gün önce