Yayın tarihine göre
Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları
7.976 kayıt · 19 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 74 / 80
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
29İzleyin | CVE-2026-111582İstismar yok | Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windowsteamviewer · remote management - monitoring · CWE-269 | Yüksek7,3 | — | %0,0 | 2 gün önce |
29İzleyin | CVE-2026-111583İstismar yok | Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windowsteamviewer · full client · CWE-269 | Yüksek7,3 | — | %0,1 | 2 gün önce |
29İzleyin | CVE-2026-111584İstismar yok | Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windowsteamviewer · teamviewer remote - patch management · CWE-269 | Yüksek7,3 | — | %0,1 | 2 gün önce |
35İzleyin | CVE-2026-111585İstismar yok | Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflowteamviewer · full client · CWE-190 | Yüksek8,8 | — | %0,2 | 2 gün önce |
36İzleyin | CVE-2026-112709İstismar yok | Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Executionwatchguard · fireware os · CWE-122 | Kritik9,2 | — | %0,4 | 2 gün önce |
36İzleyin | CVE-2026-112710İstismar yok | Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Executionwatchguard · fireware os · CWE-122 | Kritik9,2 | — | %0,4 | 2 gün önce |
38İzleyin | CVE-2026-116863İstismar yok | WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerabilitytribulant software · newsletters · CWE-352 | Kritik9,6 | — | %0,1 | 2 gün önce |
34İzleyin | CVE-2026-90442İstismar yok | Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Servicewatchguard · fireware os · CWE-121 | Yüksek8,6 | — | %0,2 | 2 gün önce |
28İzleyin | CVE-2026-90464İstismar yok | Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Rootwatchguard · fireware os · CWE-59 | Yüksek7,2 | — | %0,3 | 2 gün önce |
37İzleyin | CVE-2026-90465İstismar yok | Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalationwatchguard · fireware os · CWE-77 | Kritik9,4 | — | %0,2 | 2 gün önce |
35İzleyin | CVE-2026-92372İstismar yok | Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Executionteamviewer · full client · CWE-123 | Yüksek8,8 | — | %0,4 | 2 gün önce |
31İzleyin | CVE-2026-92374İstismar yok | Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOSteamviewer · full client · CWE-367 | Yüksek7,8 | — | %0,0 | 2 gün önce |
31İzleyin | CVE-2026-92375İstismar yok | Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoringteamviewer · full client · CWE-284 | Yüksek7,8 | — | %0,1 | 2 gün önce |
31İzleyin | CVE-2026-92376İstismar yok | Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windowsteamviewer · remote management - monitoring · CWE-287 | Yüksek7,8 | — | %0,1 | 2 gün önce |
31İzleyin | CVE-2026-92377İstismar yok | Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windowsteamviewer · full client · CWE-732 | Yüksek7,8 | — | %0,1 | 2 gün önce |
34İzleyin | CVE-2026-93434İstismar yok | Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secretswatchguard · fireware os · CWE-20 | Yüksek8,7 | — | %0,4 | 2 gün önce |
36İzleyin | CVE-2026-93857İstismar yok | Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Executionwatchguard · fireware os · CWE-120 | Kritik9,2 | — | %0,4 | 2 gün önce |
28İzleyin | CVE-2026-93862İstismar yok | Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Servicewatchguard · fireware os · CWE-125 | Yüksek7,2 | — | %0,1 | 2 gün önce |
28İzleyin | CVE-2026-93864İstismar yok | Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Rootwatchguard · fireware os · CWE-22 | Yüksek7,1 | — | %0,1 | 2 gün önce |
36İzleyin | CVE-2026-93865İstismar yok | Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injectionwatchguard · fireware os · CWE-77 | Kritik9,2 | — | %0,4 | 2 gün önce |
36İzleyin | CVE-2026-93866İstismar yok | Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Writewatchguard · fireware os · CWE-190 | Kritik9,2 | — | %0,4 | 2 gün önce |
31İzleyin | GHSA-wf6j-7hvr-gr93İstismar yok | Hydra legacy target blacklist permits unsafe PyYAML loadingCWE-184 | Yüksek7,8 | — | — | 2 gün önce |
28İzleyin | CVE-2026-102636İstismar yok | Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktopautodesk · fusion · CWE-79 | Yüksek7,1 | — | %0,1 | 2 gün önce |
28İzleyin | CVE-2026-102637İstismar yok | Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktopautodesk · fusion · CWE-79 | Yüksek7,1 | — | %0,1 | 2 gün önce |
28İzleyin | CVE-2026-102638İstismar yok | Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktopautodesk · fusion · CWE-79 | Yüksek7,1 | — | %0,1 | 2 gün önce |
29İzleyin | CVE-2026-104349İstismar yok | Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)adobe · creative cloud desktop application · CWE-427 | Yüksek7,3 | — | %0,1 | 2 gün önce |
37İzleyin | CVE-2026-104350İstismar yok | Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)adobe · adobe campaign classic · CWE-79 | Kritik9,3 | — | %0,6 | 2 gün önce |
39İzleyin | CVE-2026-104351İstismar yok | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · adobe campaign classic · CWE-94 | Kritik9,9 | — | %0,5 | 2 gün önce |
39İzleyin | CVE-2026-104353İstismar yok | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)adobe · adobe campaign classic · CWE-78 | Kritik9,9 | — | %1,3 | 2 gün önce |
36İzleyin | CVE-2026-104354İstismar yok | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · adobe campaign classic · CWE-89 | Kritik9,1 | — | %0,4 | 2 gün önce |
29İzleyin | CVE-2026-105477İstismar yok | A vulnerability in Veeam Agent for Linux allows for local privilege escalation.veeam · agent for linux · CWE-426 | Yüksek7,3 | — | %0,1 | 2 gün önce |
39İzleyin | CVE-2026-105489İstismar yok | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · adobe campaign classic · CWE-89 | Kritik9,9 | — | %0,4 | 2 gün önce |
36İzleyin | CVE-2026-105779İstismar yok | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · adobe campaign classic · CWE-89 | Kritik9,1 | — | %0,2 | 2 gün önce |
39İzleyin | CVE-2026-105780İstismar yok | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)adobe · adobe campaign classic · CWE-863 | Kritik9,9 | — | %0,4 | 2 gün önce |
40Planlayın | CVE-2026-105781İstismar yok | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · adobe campaign classic · CWE-89 | Kritik10,0 | — | %0,5 | 2 gün önce |
36İzleyin | CVE-2026-106076İstismar yok | A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backuveeam · backup for microsoft 365 · CWE-89 | Kritik9,0 | — | %0,3 | 2 gün önce |
33İzleyin | CVE-2026-106077İstismar yok | A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server withveeam · backup for microsoft 365 · CWE-863 | Yüksek8,3 | — | %0,2 | 2 gün önce |
34İzleyin | CVE-2026-107671İstismar yok | A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally befveeam · one · CWE-288 | Yüksek8,5 | — | %0,3 | 2 gün önce |
36İzleyin | CVE-2026-108014İstismar yok | eMudhra Compromised Certificate vulnerability impacts HCL Domino Serverhclsoftware · domino server · CWE-327 | Kritik9,1 | — | %0,1 | 2 gün önce |
36İzleyin | CVE-2026-108015İstismar yok | eMudhra Compromised Certificate vulnerability impacts HCL Notes Clienthclsoftware · notes client · CWE-327 | Kritik9,1 | — | %0,1 | 2 gün önce |
36İzleyin | CVE-2026-108142İstismar yok | A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.veeam · backup and replication · CWE-636 | Kritik9,1 | — | %0,4 | 2 gün önce |
30İzleyin | CVE-2026-109089İstismar yok | libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflowx.org · libxi · CWE-122 | Yüksek7,5 | — | %0,2 | 2 gün önce |
30İzleyin | CVE-2026-109090İstismar yok | libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflowx.org · libxi · CWE-122 | Yüksek7,5 | — | %0,2 | 2 gün önce |
31İzleyin | CVE-2026-113775İstismar yok | Dynamic Library Loading Process Control in Autodesk Fusion Desktopautodesk · fusion · CWE-749 | Yüksek7,8 | — | %0,1 | 2 gün önce |
37İzleyin | CVE-2026-114595Kavram kanıtı | Integer overflow or wraparound in EPICS Basethe epics community · epics base · CWE-190 | Kritik9,3 | — | %0,5 | 2 gün önce |
35İzleyin | CVE-2026-114596İstismar yok | Integer overflow or wraparound in EPICS Basethe epics community · epics base · CWE-190 | Yüksek8,8 | — | %0,2 | 2 gün önce |
34İzleyin | CVE-2026-114597İstismar yok | Improper handling of length parameter inconsistency in EPICS Basethe epics community · epics base · CWE-130 | Yüksek8,7 | — | %0,2 | 2 gün önce |
34İzleyin | CVE-2026-114598İstismar yok | Access of resource using incompatible type ('type confusion') in EPICS Basethe epics community · epics base · CWE-843 | Yüksek8,7 | — | %0,2 | 2 gün önce |
35İzleyin | CVE-2026-116672İstismar yok | Authlib RFC 7592 examples omit registration-access-token client bindingauthlib · authlib · CWE-639 | Yüksek8,8 | — | %0,2 | 2 gün önce |
34İzleyin | CVE-2026-116675İstismar yok | TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serializationtinymce · tinymce · CWE-79 | Yüksek8,5 | — | %0,3 | 2 gün önce |
38İzleyin | CVE-2026-48360İstismar yok | Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · adobe connect desktop app · CWE-94 | Kritik9,6 | — | %0,4 | 2 gün önce |
31İzleyin | CVE-2026-48379İstismar yok | Substance3D - Painter | Stack-based Buffer Overflow (CWE-121)adobe · adobe substance 3d painter · CWE-121 | Yüksek7,8 | — | %0,1 | 2 gün önce |
30İzleyin | CVE-2026-57197İstismar yok | Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)asterisk · asterisk · CWE-122 | Yüksek7,7 | — | %0,5 | 2 gün önce |
30İzleyin | CVE-2026-57201İstismar yok | Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Bufferasterisk · asterisk · CWE-787 | Yüksek7,5 | — | %0,7 | 2 gün önce |
30İzleyin | CVE-2026-77167İstismar yok | Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table.nextcloud · server · CWE-400 | Yüksek7,5 | — | %0,3 | 2 gün önce |
34İzleyin | CVE-2026-102814İstismar yok | Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305tp-link systems inc. · re305 v3 · CWE-78 | Yüksek8,7 | — | %0,3 | 2 gün önce |
35İzleyin | CVE-2026-108303İstismar yok | Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.tanium · certificate manager · CWE-77 | Yüksek8,8 | — | %0,2 | 2 gün önce |
31İzleyin | CVE-2026-108304İstismar yok | Tanium addressed a local privilege escalation vulnerability in End-User Notifications.tanium · endpoint configuration toolset solution · CWE-59 | Yüksek7,8 | — | %0,1 | 2 gün önce |
31İzleyin | CVE-2026-108305İstismar yok | Tanium addressed a local privilege escalation vulnerability in End-User Notifications.tanium · endpoint configuration toolset solution · CWE-59 | Yüksek7,8 | — | %0,1 | 2 gün önce |
31İzleyin | CVE-2026-108306İstismar yok | Tanium addressed a local privilege escalation vulnerability in End-User Notifications.tanium · endpoint configuration toolset solution · CWE-59 | Yüksek7,8 | — | %0,1 | 2 gün önce |
31İzleyin | CVE-2026-108307İstismar yok | Tanium addressed a heap-based buffer overflow vulnerability in Index.tanium · endpoint configuration toolset solution · CWE-122 | Yüksek7,8 | — | %0,1 | 2 gün önce |
35İzleyin | CVE-2026-108329İstismar yok | Tanium addressed an unauthorized code execution vulnerability in Threat Response.tanium · threat response · CWE-77 | Yüksek8,8 | — | %0,4 | 2 gün önce |
28İzleyin | CVE-2026-116647İstismar yok | Tanium addressed an improper output sanitization vulnerability in Comply.tanium · comply · CWE-1236 | Yüksek7,1 | — | %0,2 | 2 gün önce |
28İzleyin | CVE-2026-116649İstismar yok | Tanium addressed an improper output sanitization vulnerability in Enforce.tanium · enforce · CWE-1236 | Yüksek7,1 | — | %0,2 | 2 gün önce |
30İzleyin | CVE-2026-116656İstismar yok | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.tanium · enforce · CWE-400 | Yüksek7,5 | — | %0,3 | 2 gün önce |
30İzleyin | CVE-2026-116662İstismar yok | Tanium addressed a compression bomb vulnerability in Enforce.tanium · enforce · CWE-409 | Yüksek7,5 | — | %0,3 | 2 gün önce |
35İzleyin | CVE-2026-116676İstismar yok | Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during planrunatlantis · atlantis · CWE-78 | Yüksek8,8 | — | %0,4 | 2 gün önce |
34İzleyin | CVE-2026-116682İstismar yok | FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directorygtsteffaniak · filebrowser · CWE-22 | Yüksek8,6 | — | %0,5 | 2 gün önce |
28İzleyin | CVE-2026-57188İstismar yok | Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handlingasterisk · asterisk · CWE-787 | Yüksek7,1 | — | %0,5 | 2 gün önce |
32İzleyin | CVE-2026-57202İstismar yok | Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writesasterisk · asterisk · CWE-267 | Yüksek8,1 | — | %0,4 | 2 gün önce |
30İzleyin | CVE-2026-87086İstismar yok | Tanium addressed a denial of service vulnerability in Provision.tanium · provision · CWE-690 | Yüksek7,5 | — | %0,3 | 2 gün önce |
31İzleyin | CVE-2026-88812İstismar yok | X.Org Server XKB SetGeometry TextDoodad Double Freex.org · xorg-x11-server · CWE-415 | Yüksek7,8 | — | %0,1 | 2 gün önce |
30İzleyin | GHSA-f897-62hf-6gxqİstismar yok | MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch lengthCWE-770 | Yüksek7,5 | — | — | 2 gün önce |
29İzleyin | CVE-2026-115413İstismar yok | AWS API MCP Server OAuth Token Audience Validation Bypassaws · aws-api-mcp-server · CWE-346 | Yüksek7,3 | — | %0,0 | 2 gün önce |
28İzleyin | CVE-2026-116683İstismar yok | CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive valuesctfer-io · terraform-provider-ctfd · CWE-522 | Yüksek7,1 | — | %0,3 | 2 gün önce |
34İzleyin | CVE-2026-112350İstismar yok | Sunhillo SureLine Path Traversal via radarUpdater.cgisunhillo corporation · sureline · CWE-22 | Yüksek8,7 | — | %0,9 | 2 gün önce |
35İzleyin | CVE-2026-112351İstismar yok | Sunhillo SureLine OS Command Injection via networkDiag.cgisunhillo corporation · sureline · CWE-78 | Yüksek8,7 | — | %2,6 | 2 gün önce |
36İzleyin | CVE-2026-112352İstismar yok | Sunhillo SureLine Authentication Bypass via Session Cookiesunhillo corporation · sureline · CWE-565 | Kritik9,1 | — | %1,3 | 2 gün önce |
34İzleyin | CVE-2026-112355İstismar yok | MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST APImembershipworks · membershipworks · CWE-862 | Yüksek8,7 | — | %0,2 | 2 gün önce |
32İzleyin | CVE-2026-116688İstismar yok | CKEditor: Cross-site scripting (XSS) in the engine packageckeditor · ckeditor5 · CWE-79 | Yüksek8,1 | — | %0,4 | 2 gün önce |
30İzleyin | CVE-2026-116690İstismar yok | MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version sourcemlflow · mlflow · CWE-22 | Yüksek7,5 | — | %0,5 | 2 gün önce |
39İzleyin | CVE-2026-116692Kavram kanıtı | MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modulesmlflow · mlflow · CWE-94 | Kritik9,8 | — | %0,7 | 2 gün önce |
34İzleyin | CVE-2026-116693İstismar yok | dd-trace: ReDOS in URL query string obfuscationdatadog · dd-trace-js · CWE-1333 | Yüksek8,7 | — | %0,4 | 2 gün önce |
30İzleyin | CVE-2026-57195İstismar yok | Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authenticationasterisk · asterisk · CWE-476 | Yüksek7,5 | — | %0,5 | 2 gün önce |
30İzleyin | CVE-2026-57200İstismar yok | Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCEasterisk · asterisk · CWE-22 | Yüksek7,5 | — | %0,8 | 2 gün önce |
35İzleyin | CVE-2026-83831İstismar yok | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerabilitymicrosoft · microsoft edge (chromium-based) · CWE-415 | Yüksek8,8 | — | %0,7 | 2 gün önce |
35İzleyin | CVE-2026-85898İstismar yok | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerabilitymicrosoft · microsoft edge (chromium-based) · CWE-843 | Yüksek8,8 | — | %0,7 | 2 gün önce |
30İzleyin | CVE-2026-57186İstismar yok | Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parserasterisk · asterisk · CWE-839 | Yüksek7,5 | — | %0,6 | 2 gün önce |
28İzleyin | CVE-2026-57190İstismar yok | Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Fieldasterisk · asterisk · CWE-89 | Yüksek7,0 | — | %0,6 | 2 gün önce |
32İzleyin | CVE-2026-57191İstismar yok | Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsingasterisk · asterisk · CWE-120 | Yüksek8,2 | — | %0,5 | 2 gün önce |
30İzleyin | CVE-2026-62765İstismar yok | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerabilitymicrosoft · microsoft edge (chromium-based) · CWE-843 | Yüksek7,5 | — | %0,4 | 2 gün önce |
35İzleyin | CVE-2026-118304İstismar yok | Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code insgoogle · chrome · CWE-20 | Yüksek8,8 | — | %0,2 | 2 gün önce |
38İzleyin | CVE-2026-118305İstismar yok | Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsidgoogle · chrome · CWE-119 | Kritik9,6 | — | %0,3 | 2 gün önce |
38İzleyin | CVE-2026-118306İstismar yok | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsgoogle · chrome · CWE-119 | Kritik9,6 | — | %0,3 | 2 gün önce |
35İzleyin | CVE-2026-118307İstismar yok | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sgoogle · chrome · CWE-416 | Yüksek8,8 | — | %0,2 | 2 gün önce |
38İzleyin | CVE-2026-118308İstismar yok | Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sagoogle · chrome · CWE-416 | Kritik9,6 | — | %0,2 | 2 gün önce |
38İzleyin | CVE-2026-118309İstismar yok | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitgoogle · chrome · CWE-20 | Kritik9,6 | — | %0,2 | 2 gün önce |
38İzleyin | CVE-2026-118310İstismar yok | Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute argoogle · chrome · CWE-20 | Kritik9,6 | — | %0,2 | 2 gün önce |
35İzleyin | CVE-2026-118311İstismar yok | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside thgoogle · chrome · CWE-119 | Yüksek8,8 | — | %0,2 | 2 gün önce |
38İzleyin | CVE-2026-118312İstismar yok | Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside tgoogle · chrome · CWE-119 | Kritik9,6 | — | %0,2 | 2 gün önce |
- CVE-2026-11158229İzleyin
Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows
YüksekCVSS 7,3İstismar yokEPSS %0teamviewer · remote management - monitoring2 gün önce
- CVE-2026-11158329İzleyin
Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows
YüksekCVSS 7,3İstismar yokEPSS %0teamviewer · full client2 gün önce
- CVE-2026-11158429İzleyin
Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows
YüksekCVSS 7,3İstismar yokEPSS %0teamviewer · teamviewer remote - patch management2 gün önce
- CVE-2026-11158535İzleyin
Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow
YüksekCVSS 8,8İstismar yokEPSS %0teamviewer · full client2 gün önce
- CVE-2026-11270936İzleyin
Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
KritikCVSS 9,2İstismar yokEPSS %0watchguard · fireware os2 gün önce
- CVE-2026-11271036İzleyin
Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
KritikCVSS 9,2İstismar yokEPSS %0watchguard · fireware os2 gün önce
- CVE-2026-11686338İzleyin
WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability
KritikCVSS 9,6İstismar yokEPSS %0tribulant software · newsletters2 gün önce
- CVE-2026-9044234İzleyin
Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service
YüksekCVSS 8,6İstismar yokEPSS %0watchguard · fireware os2 gün önce
- CVE-2026-9046428İzleyin
Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root
YüksekCVSS 7,2İstismar yokEPSS %0watchguard · fireware os2 gün önce
- CVE-2026-9046537İzleyin
Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation
KritikCVSS 9,4İstismar yokEPSS %0watchguard · fireware os2 gün önce
- CVE-2026-9237235İzleyin
Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution
YüksekCVSS 8,8İstismar yokEPSS %0teamviewer · full client2 gün önce
- CVE-2026-9237431İzleyin
Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS
YüksekCVSS 7,8İstismar yokEPSS %0teamviewer · full client2 gün önce
- CVE-2026-9237531İzleyin
Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
YüksekCVSS 7,8İstismar yokEPSS %0teamviewer · full client2 gün önce
- CVE-2026-9237631İzleyin
Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows
YüksekCVSS 7,8İstismar yokEPSS %0teamviewer · remote management - monitoring2 gün önce
- CVE-2026-9237731İzleyin
Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows
YüksekCVSS 7,8İstismar yokEPSS %0teamviewer · full client2 gün önce
- CVE-2026-9343434İzleyin
Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets
YüksekCVSS 8,7İstismar yokEPSS %0watchguard · fireware os2 gün önce
- CVE-2026-9385736İzleyin
Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution
KritikCVSS 9,2İstismar yokEPSS %0watchguard · fireware os2 gün önce
- CVE-2026-9386228İzleyin
Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service
YüksekCVSS 7,2İstismar yokEPSS %0watchguard · fireware os2 gün önce
- CVE-2026-9386428İzleyin
Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root
YüksekCVSS 7,1İstismar yokEPSS %0watchguard · fireware os2 gün önce
- CVE-2026-9386536İzleyin
Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection
KritikCVSS 9,2İstismar yokEPSS %0watchguard · fireware os2 gün önce
- CVE-2026-9386636İzleyin
Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write
KritikCVSS 9,2İstismar yokEPSS %0watchguard · fireware os2 gün önce
- GHSA-wf6j-7hvr-gr9331İzleyin
Hydra legacy target blacklist permits unsafe PyYAML loading
YüksekCVSS 7,8İstismar yok2 gün önce
- CVE-2026-10263628İzleyin
Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
YüksekCVSS 7,1İstismar yokEPSS %0autodesk · fusion2 gün önce
- CVE-2026-10263728İzleyin
Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
YüksekCVSS 7,1İstismar yokEPSS %0autodesk · fusion2 gün önce
- CVE-2026-10263828İzleyin
Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
YüksekCVSS 7,1İstismar yokEPSS %0autodesk · fusion2 gün önce
- CVE-2026-10434929İzleyin
Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
YüksekCVSS 7,3İstismar yokEPSS %0adobe · creative cloud desktop application2 gün önce
- CVE-2026-10435037İzleyin
Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)
KritikCVSS 9,3İstismar yokEPSS %0adobe · adobe campaign classic2 gün önce
- CVE-2026-10435139İzleyin
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
KritikCVSS 9,9İstismar yokEPSS %0adobe · adobe campaign classic2 gün önce
- CVE-2026-10435339İzleyin
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
KritikCVSS 9,9İstismar yokEPSS %1adobe · adobe campaign classic2 gün önce
- CVE-2026-10435436İzleyin
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
KritikCVSS 9,1İstismar yokEPSS %0adobe · adobe campaign classic2 gün önce
- CVE-2026-10547729İzleyin
A vulnerability in Veeam Agent for Linux allows for local privilege escalation.
YüksekCVSS 7,3İstismar yokEPSS %0veeam · agent for linux2 gün önce
- CVE-2026-10548939İzleyin
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
KritikCVSS 9,9İstismar yokEPSS %0adobe · adobe campaign classic2 gün önce
- CVE-2026-10577936İzleyin
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
KritikCVSS 9,1İstismar yokEPSS %0adobe · adobe campaign classic2 gün önce
- CVE-2026-10578039İzleyin
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
KritikCVSS 9,9İstismar yokEPSS %0adobe · adobe campaign classic2 gün önce
- CVE-2026-10578140Planlayın
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
KritikCVSS 10,0İstismar yokEPSS %0adobe · adobe campaign classic2 gün önce
- CVE-2026-10607636İzleyin
A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backu
KritikCVSS 9,0İstismar yokEPSS %0veeam · backup for microsoft 3652 gün önce
- CVE-2026-10607733İzleyin
A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with
YüksekCVSS 8,3İstismar yokEPSS %0veeam · backup for microsoft 3652 gün önce
- CVE-2026-10767134İzleyin
A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally bef
YüksekCVSS 8,5İstismar yokEPSS %0veeam · one2 gün önce
- CVE-2026-10801436İzleyin
eMudhra Compromised Certificate vulnerability impacts HCL Domino Server
KritikCVSS 9,1İstismar yokEPSS %0hclsoftware · domino server2 gün önce
- CVE-2026-10801536İzleyin
eMudhra Compromised Certificate vulnerability impacts HCL Notes Client
KritikCVSS 9,1İstismar yokEPSS %0hclsoftware · notes client2 gün önce
- CVE-2026-10814236İzleyin
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
KritikCVSS 9,1İstismar yokEPSS %0veeam · backup and replication2 gün önce
- CVE-2026-10908930İzleyin
libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow
YüksekCVSS 7,5İstismar yokEPSS %0x.org · libxi2 gün önce
- CVE-2026-10909030İzleyin
libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow
YüksekCVSS 7,5İstismar yokEPSS %0x.org · libxi2 gün önce
- CVE-2026-11377531İzleyin
Dynamic Library Loading Process Control in Autodesk Fusion Desktop
YüksekCVSS 7,8İstismar yokEPSS %0autodesk · fusion2 gün önce
- CVE-2026-11459537İzleyin
Integer overflow or wraparound in EPICS Base
KritikCVSS 9,3Kavram kanıtıEPSS %0the epics community · epics base2 gün önce
- CVE-2026-11459635İzleyin
Integer overflow or wraparound in EPICS Base
YüksekCVSS 8,8İstismar yokEPSS %0the epics community · epics base2 gün önce
- CVE-2026-11459734İzleyin
Improper handling of length parameter inconsistency in EPICS Base
YüksekCVSS 8,7İstismar yokEPSS %0the epics community · epics base2 gün önce
- CVE-2026-11459834İzleyin
Access of resource using incompatible type ('type confusion') in EPICS Base
YüksekCVSS 8,7İstismar yokEPSS %0the epics community · epics base2 gün önce
- CVE-2026-11667235İzleyin
Authlib RFC 7592 examples omit registration-access-token client binding
YüksekCVSS 8,8İstismar yokEPSS %0authlib · authlib2 gün önce
- CVE-2026-11667534İzleyin
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization
YüksekCVSS 8,5İstismar yokEPSS %0tinymce · tinymce2 gün önce
- CVE-2026-4836038İzleyin
Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)
KritikCVSS 9,6İstismar yokEPSS %0adobe · adobe connect desktop app2 gün önce
- CVE-2026-4837931İzleyin
Substance3D - Painter | Stack-based Buffer Overflow (CWE-121)
YüksekCVSS 7,8İstismar yokEPSS %0adobe · adobe substance 3d painter2 gün önce
- CVE-2026-5719730İzleyin
Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)
YüksekCVSS 7,7İstismar yokEPSS %0asterisk · asterisk2 gün önce
- CVE-2026-5720130İzleyin
Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
YüksekCVSS 7,5İstismar yokEPSS %0asterisk · asterisk2 gün önce
- CVE-2026-7716730İzleyin
Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table.
YüksekCVSS 7,5İstismar yokEPSS %0nextcloud · server2 gün önce
- CVE-2026-10281434İzleyin
Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305
YüksekCVSS 8,7İstismar yokEPSS %0tp-link systems inc. · re305 v32 gün önce
- CVE-2026-10830335İzleyin
Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
YüksekCVSS 8,8İstismar yokEPSS %0tanium · certificate manager2 gün önce
- CVE-2026-10830431İzleyin
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
YüksekCVSS 7,8İstismar yokEPSS %0tanium · endpoint configuration toolset solution2 gün önce
- CVE-2026-10830531İzleyin
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
YüksekCVSS 7,8İstismar yokEPSS %0tanium · endpoint configuration toolset solution2 gün önce
- CVE-2026-10830631İzleyin
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
YüksekCVSS 7,8İstismar yokEPSS %0tanium · endpoint configuration toolset solution2 gün önce
- CVE-2026-10830731İzleyin
Tanium addressed a heap-based buffer overflow vulnerability in Index.
YüksekCVSS 7,8İstismar yokEPSS %0tanium · endpoint configuration toolset solution2 gün önce
- CVE-2026-10832935İzleyin
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
YüksekCVSS 8,8İstismar yokEPSS %0tanium · threat response2 gün önce
- CVE-2026-11664728İzleyin
Tanium addressed an improper output sanitization vulnerability in Comply.
YüksekCVSS 7,1İstismar yokEPSS %0tanium · comply2 gün önce
- CVE-2026-11664928İzleyin
Tanium addressed an improper output sanitization vulnerability in Enforce.
YüksekCVSS 7,1İstismar yokEPSS %0tanium · enforce2 gün önce
- CVE-2026-11665630İzleyin
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
YüksekCVSS 7,5İstismar yokEPSS %0tanium · enforce2 gün önce
- CVE-2026-11666230İzleyin
Tanium addressed a compression bomb vulnerability in Enforce.
YüksekCVSS 7,5İstismar yokEPSS %0tanium · enforce2 gün önce
- CVE-2026-11667635İzleyin
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
YüksekCVSS 8,8İstismar yokEPSS %0runatlantis · atlantis2 gün önce
- CVE-2026-11668234İzleyin
FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory
YüksekCVSS 8,6İstismar yokEPSS %0gtsteffaniak · filebrowser2 gün önce
- CVE-2026-5718828İzleyin
Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling
YüksekCVSS 7,1İstismar yokEPSS %0asterisk · asterisk2 gün önce
- CVE-2026-5720232İzleyin
Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
YüksekCVSS 8,1İstismar yokEPSS %0asterisk · asterisk2 gün önce
- CVE-2026-8708630İzleyin
Tanium addressed a denial of service vulnerability in Provision.
YüksekCVSS 7,5İstismar yokEPSS %0tanium · provision2 gün önce
- CVE-2026-8881231İzleyin
X.Org Server XKB SetGeometry TextDoodad Double Free
YüksekCVSS 7,8İstismar yokEPSS %0x.org · xorg-x11-server2 gün önce
- GHSA-f897-62hf-6gxq30İzleyin
MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length
YüksekCVSS 7,5İstismar yok2 gün önce
- CVE-2026-11541329İzleyin
AWS API MCP Server OAuth Token Audience Validation Bypass
YüksekCVSS 7,3İstismar yokEPSS %0aws · aws-api-mcp-server2 gün önce
- CVE-2026-11668328İzleyin
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
YüksekCVSS 7,1İstismar yokEPSS %0ctfer-io · terraform-provider-ctfd2 gün önce
- CVE-2026-11235034İzleyin
Sunhillo SureLine Path Traversal via radarUpdater.cgi
YüksekCVSS 8,7İstismar yokEPSS %0sunhillo corporation · sureline2 gün önce
- CVE-2026-11235135İzleyin
Sunhillo SureLine OS Command Injection via networkDiag.cgi
YüksekCVSS 8,7İstismar yokEPSS %2sunhillo corporation · sureline2 gün önce
- CVE-2026-11235236İzleyin
Sunhillo SureLine Authentication Bypass via Session Cookie
KritikCVSS 9,1İstismar yokEPSS %1sunhillo corporation · sureline2 gün önce
- CVE-2026-11235534İzleyin
MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API
YüksekCVSS 8,7İstismar yokEPSS %0membershipworks · membershipworks2 gün önce
- CVE-2026-11668832İzleyin
CKEditor: Cross-site scripting (XSS) in the engine package
YüksekCVSS 8,1İstismar yokEPSS %0ckeditor · ckeditor52 gün önce
- CVE-2026-11669030İzleyin
MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source
YüksekCVSS 7,5İstismar yokEPSS %0mlflow · mlflow2 gün önce
- CVE-2026-11669239İzleyin
MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules
KritikCVSS 9,8Kavram kanıtıEPSS %0mlflow · mlflow2 gün önce
- CVE-2026-11669334İzleyin
dd-trace: ReDOS in URL query string obfuscation
YüksekCVSS 8,7İstismar yokEPSS %0datadog · dd-trace-js2 gün önce
- CVE-2026-5719530İzleyin
Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication
YüksekCVSS 7,5İstismar yokEPSS %0asterisk · asterisk2 gün önce
- CVE-2026-5720030İzleyin
Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE
YüksekCVSS 7,5İstismar yokEPSS %0asterisk · asterisk2 gün önce
- CVE-2026-8383135İzleyin
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · microsoft edge (chromium-based)2 gün önce
- CVE-2026-8589835İzleyin
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · microsoft edge (chromium-based)2 gün önce
- CVE-2026-5718630İzleyin
Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
YüksekCVSS 7,5İstismar yokEPSS %0asterisk · asterisk2 gün önce
- CVE-2026-5719028İzleyin
Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field
YüksekCVSS 7,0İstismar yokEPSS %0asterisk · asterisk2 gün önce
- CVE-2026-5719132İzleyin
Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
YüksekCVSS 8,2İstismar yokEPSS %0asterisk · asterisk2 gün önce
- CVE-2026-6276530İzleyin
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0microsoft · microsoft edge (chromium-based)2 gün önce
- CVE-2026-11830435İzleyin
Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code ins
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome2 gün önce
- CVE-2026-11830538İzleyin
Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsid
KritikCVSS 9,6İstismar yokEPSS %0google · chrome2 gün önce
- CVE-2026-11830638İzleyin
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outs
KritikCVSS 9,6İstismar yokEPSS %0google · chrome2 gün önce
- CVE-2026-11830735İzleyin
Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the s
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome2 gün önce
- CVE-2026-11830838İzleyin
Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sa
KritikCVSS 9,6İstismar yokEPSS %0google · chrome2 gün önce
- CVE-2026-11830938İzleyin
Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit
KritikCVSS 9,6İstismar yokEPSS %0google · chrome2 gün önce
- CVE-2026-11831038İzleyin
Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute ar
KritikCVSS 9,6İstismar yokEPSS %0google · chrome2 gün önce
- CVE-2026-11831135İzleyin
Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside th
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome2 gün önce
- CVE-2026-11831238İzleyin
Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside t
KritikCVSS 9,6İstismar yokEPSS %0google · chrome2 gün önce