İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

8.249 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 76 / 83

  • CVE-2013-20008
    28İzleyin

    Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password

    YüksekCVSS 7,0İstismar yokEPSS %0

    linksys · wag200g2 gün önce

  • CVE-2014-125136
    32İzleyin

    C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backup

    YüksekCVSS 8,2İstismar yokEPSS %0

    c97net · qengine cms2 gün önce

  • CVE-2014-125137
    28İzleyin

    C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Local File Inclusion via admin/task.php

    YüksekCVSS 7,1İstismar yokEPSS %0

    c97net · qengine cms2 gün önce

  • CVE-2014-125138
    34İzleyin

    C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image Fields

    YüksekCVSS 8,7İstismar yokEPSS %0

    c97net · qengine cms2 gün önce

  • CVE-2015-20129
    34İzleyin

    CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/

    YüksekCVSS 8,6İstismar yokEPSS %0

    crushftp · crushftp2 gün önce

  • CVE-2026-109999
    28İzleyin

    AI Marketing Expert <= 1.2.8 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'name' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    nalam-1 · ai marketing expert — ai email marketing, ai content generator, seo analyzer, ai workflow automation, social media & ai chatbot2 gün önce

  • CVE-2026-111314
    28İzleyin

    affiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cross-Site Scripting via 'atkp_product_producturl' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    cservit · affiliate-toolkit – multi-network affiliate & amazon product display2 gün önce

  • CVE-2026-117607
    34İzleyin

    Xerte Online Toolkits through 3.15.5 RCE via Language Pack Import

    YüksekCVSS 8,6İstismar yokEPSS %0

    thexerteproject · xerteonlinetoolkits2 gün önce

  • CVE-2026-117609
    28İzleyin

    rtl_433 through 25.12 Stack-Based Buffer Overflow via Proflame 2 Decoder

    YüksekCVSS 7,1İstismar yokEPSS %0

    merbanan · rtl_4332 gün önce

  • CVE-2026-117610
    32İzleyin

    libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser

    YüksekCVSS 8,2İstismar yokEPSS %0

    libexpat · libexpat2 gün önce

  • CVE-2026-118370
    32İzleyin

    libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes

    YüksekCVSS 8,2İstismar yokEPSS %0

    libexpat · libexpat2 gün önce

  • CVE-2026-118374
    32İzleyin

    LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response

    YüksekCVSS 8,2İstismar yokEPSS %0

    openbsd · libressl2 gün önce

  • CVE-2026-118375
    36İzleyin

    llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()

    KritikCVSS 9,2İstismar yokEPSS %0

    ggml-org · llama.cpp2 gün önce

  • CVE-2026-118377
    34İzleyin

    mews/pos through 2.0.0 Missing Hash Verification in 3D Pay and 3D Host Callbacks

    YüksekCVSS 8,7İstismar yokEPSS %0

    mewebstudio · pos2 gün önce

  • CVE-2026-118378
    34İzleyin

    Tabularis before 0.28.0 SQL Injection via MCP describe_table table_name

    YüksekCVSS 8,5İstismar yokEPSS %0

    tabularisdb · tabularis2 gün önce

  • CVE-2026-84999
    39İzleyin

    Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbitrary File Upload via piereg_file_upload AJAX Handler

    KritikCVSS 9,8İstismar yokEPSS %0

    pie register · pie register premium2 gün önce

  • CVE-2026-97019
    28İzleyin

    AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute

    YüksekCVSS 7,2İstismar yokEPSS %0

    mohammed_kaludi · amp for wp – accelerated mobile pages2 gün önce

  • CVE-2026-111255
    30İzleyin

    affiliate-toolkit <= 3.9.2 - Authenticated (Contributor+) Arbitrary File Upload via 'atkp_product_largeimageurl' Parameter

    YüksekCVSS 7,5İstismar yokEPSS %0

    cservit · affiliate-toolkit – multi-network affiliate & amazon product display2 gün önce

  • CVE-2026-116613
    30İzleyin

    Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute

    YüksekCVSS 7,5İstismar yokEPSS %0

    bplugins · animated text block – add typing and looping text effects2 gün önce

  • CVE-2026-1928
    35İzleyin

    Rank Math SEO <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution

    YüksekCVSS 8,8İstismar yokEPSS %0

    rankmath · rank math seo – ai seo tools to dominate seo rankings2 gün önce

  • CVE-2026-104383
    37İzleyin

    Code injection in EagleCloud Aquila on-premises version

    KritikCVSS 9,4İstismar yokEPSS %0

    eaglecloud · aquila2 gün önce

  • CVE-2026-104384
    34İzleyin

    Insufficiently protected credentials in EagleCloud Aquila on-premises version

    YüksekCVSS 8,7İstismar yokEPSS %0

    eaglecloud · aquila2 gün önce

  • CVE-2026-103688
    39İzleyin

    Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · checkout files upload for woocommerce2 gün önce

  • CVE-2026-105972
    30İzleyin

    WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation Attribute

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · menu cart for woocommerce2 gün önce

  • CVE-2026-111021
    28İzleyin

    Persian WooCommerce SMS 7.2.0 - 7.3.1 - Reflected XSS via 'pwsms_mobiles' Parameter

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · افزونه پیامک ووکامرس | persian woocommerce sms2 gün önce

  • CVE-2026-111577
    28İzleyin

    GoSMTP < 1.2.5 - Plugin Activator+ Privilege Escalation via SMTP Settings

    YüksekCVSS 7,2İstismar yokEPSS %0

    unknown · gosmtp2 gün önce

  • CVE-2026-15323
    30İzleyin

    Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON Upload

    YüksekCVSS 7,5İstismar yokEPSS %0

    king-theme · product designer for woocommerce wordpress | lumise2 gün önce

  • CVE-2026-109218
    39İzleyin

    Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass

    KritikCVSS 9,8İstismar yokEPSS %0

    kleor · contact manager2 gün önce

  • CVE-2026-109381
    28İzleyin

    Event Booking Manager for WooCommerce <= 5.7.8 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    magepeopleteam · event booking manager for woocommerce – sell tickets, event registration, rsvp & event calendar2 gün önce

  • CVE-2026-109384
    35İzleyin

    The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multip

    YüksekCVSS 8,8İstismar yokEPSS %0

    melograno · the innovative form builder – ivyforms2 gün önce

  • CVE-2026-110662
    28İzleyin

    MxChat <= 3.2.25 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'feedback' Parameter via mxchat_save_rating

    YüksekCVSS 7,2İstismar yokEPSS %0

    mxchat · mxchat – ai chatbot & content generation for wordpress2 gün önce

  • CVE-2026-111111
    28İzleyin

    Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape

    YüksekCVSS 7,2İstismar yokEPSS %0

    bdthemes · prime slider – hero slider, carousel, woocommerce & post slider elementor addons2 gün önce

  • CVE-2026-111120
    35İzleyin

    VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task

    YüksekCVSS 8,8İstismar yokEPSS %0

    e4jvikwp · vikrentcar car rental management system2 gün önce

  • CVE-2026-63286
    28İzleyin

    Database backups are vulnerable to offline attacks.

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    axis communications ab · axis camera station pro2 gün önce

  • CVE-2026-92797
    35İzleyin

    Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    memberpress · memberpress2 gün önce

  • CVE-2026-86395
    29İzleyin

    Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.

    YüksekCVSS 7,2İstismar yokEPSS %2

    dell · powerprotect data domain virtual edition2 gün önce

  • CVE-2026-86396
    36İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 8,8İstismar yokEPSS %2

    dell · powerprotect data domain2 gün önce

  • CVE-2026-86397
    39İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    KritikCVSS 9,8İstismar yokEPSS %0

    dell · powerprotect data domain2 gün önce

  • CVE-2026-86398
    35İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 8,8İstismar yokEPSS %0

    dell · powerprotect data domain2 gün önce

  • CVE-2026-86399
    29İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 7,2İstismar yokEPSS %2

    dell · powerprotect data domain2 gün önce

  • CVE-2026-86400
    39İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    KritikCVSS 9,8İstismar yokEPSS %0

    dell · powerprotect data domain2 gün önce

  • CVE-2026-90717
    36İzleyin

    Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1

    KritikCVSS 9,1İstismar yokEPSS %0

    dell · powerprotect data domain management center2 gün önce

  • CVE-2026-14571
    36İzleyin

    SQL injection (SQLi) in the user authentication module of Futurum Software

    KritikCVSS 9,1İstismar yokEPSS %0

    futurum software · futurum software user authentication module2 gün önce

  • CVE-2026-86379
    29İzleyin

    Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1

    YüksekCVSS 7,2İstismar yokEPSS %2

    dell · powerprotect data domain management center2 gün önce

  • CVE-2026-86380
    28İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 7,2İstismar yokEPSS %0

    dell · powerprotect data domain2 gün önce

  • CVE-2026-86384
    39İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    KritikCVSS 9,8İstismar yokEPSS %0

    dell · powerprotect data domain2 gün önce

  • CVE-2026-86385
    35İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability.

    YüksekCVSS 8,8İstismar yokEPSS %0

    dell · powerprotect data domain2 gün önce

  • CVE-2026-86389
    28İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 7,2İstismar yokEPSS %0

    dell · powerprotect data domain2 gün önce

  • CVE-2026-86393
    28İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 7,2İstismar yokEPSS %0

    dell · powerprotect data domain2 gün önce

  • CVE-2026-86394
    29İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 7,2İstismar yokEPSS %2

    dell · powerprotect data domain2 gün önce

  • CVE-2025-30414
    28İzleyin

    Local privilege escalation due to improper authentication.

    YüksekCVSS 7,1İstismar yokEPSS %0

    acronis · acronis cyber protect cloud agent2 gün önce

  • CVE-2026-103779
    33İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 8,3İstismar yokEPSS %0

    dell · powerprotect data domain2 gün önce

  • CVE-2026-103780
    39İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    KritikCVSS 9,8İstismar yokEPSS %0

    dell · powerprotect data domain2 gün önce

  • CVE-2026-103792
    38İzleyin

    Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1

    KritikCVSS 9,6İstismar yokEPSS %0

    dell · powerprotect data domain management center2 gün önce

  • CVE-2026-103799
    38İzleyin

    Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1

    KritikCVSS 9,6İstismar yokEPSS %0

    dell · powerprotect data domain management center2 gün önce

  • CVE-2026-110540
    28İzleyin

    Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1

    YüksekCVSS 7,1İstismar yokEPSS %0

    dell · powerprotect data domain management center2 gün önce

  • CVE-2026-110541
    29İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 7,2İstismar yokEPSS %1

    dell · powerprotect data domain2 gün önce

  • CVE-2026-112197
    37İzleyin

    Missing Authentication for Critical Function in Tactis' NoviGest Desktop App

    KritikCVSS 9,4İstismar yokEPSS %0

    tactis · novigest desktop app2 gün önce

  • CVE-2026-112198
    33İzleyin

    Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App

    YüksekCVSS 8,3İstismar yokEPSS %0

    tactis · novigest desktop app2 gün önce

  • CVE-2026-6064
    29İzleyin

    Norton, Avast, and AVG local privilege escalation via link following in Data Shredder

    YüksekCVSS 7,3İstismar yokEPSS %0

    gen digital · norton antivirus2 gün önce

  • CVE-2026-86377
    30İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 7,6İstismar yokEPSS %0

    dell · powerprotect data domain2 gün önce

  • CVE-2026-86378
    35İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 8,8İstismar yokEPSS %0

    dell · powerprotect data domain2 gün önce

  • CVE-2026-87102
    29İzleyin

    Sensitive information disclosure and manipulation due to improper token validation.

    YüksekCVSS 7,4İstismar yokEPSS %0

    acronis · acronis cyber protect 172 gün önce

  • CVE-2026-87103
    29İzleyin

    Sensitive information disclosure and manipulation due to improper token validation.

    YüksekCVSS 7,4İstismar yokEPSS %0

    acronis · acronis cyber protect 172 gün önce

  • GHSA-34cw-x8g7-rcv5
    30İzleyin

    Stack overflow on deeply nested GraphQL documents

    YüksekCVSS 7,5İstismar yok

    2 gün önce

  • GHSA-36rq-8957-mjrx
    30İzleyin

    Excessive CPU and memory use on crafted GraphQL documents

    YüksekCVSS 7,5İstismar yok

    2 gün önce

  • GHSA-pfrg-qg4f-grmv
    30İzleyin

    Unbounded memory use on large request bodies

    YüksekCVSS 7,5İstismar yok

    2 gün önce

  • CVE-2026-102790
    34İzleyin

    Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12

    YüksekCVSS 8,6İstismar yokEPSS %0

    icagenda.com · icagenda extension for joomla2 gün önce

  • CVE-2026-114278
    39İzleyin

    Unauthenticated Command Injection via kubeconfig Username in che-machine-exec

    KritikCVSS 9,8İstismar yokEPSS %0

    eclipse foundation · eclipse che2 gün önce

  • CVE-2026-118477
    34İzleyin

    KaliFast Project Management Platform ei_git_repo_url OS Command Injection

    YüksekCVSS 8,7İstismar yokEPSS %1

    eisge · kalifast2 gün önce

  • CVE-2026-118485
    28İzleyin

    Axel Download Accelerator Path Traversal via URL Filename Decoding

    YüksekCVSS 7,0İstismar yokEPSS %0

    axel download accelerator · axel2 gün önce

  • CVE-2026-111411
    37İzleyin

    WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    aman · funnelkit automations2 gün önce

  • CVE-2026-111850
    34İzleyin

    WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    buddypress · buddypress2 gün önce

  • CVE-2026-115591
    30İzleyin

    WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    supsystic · contact form by supsystic2 gün önce

  • CVE-2026-115593
    28İzleyin

    WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    unlimited elements · unlimited elements for elementor (free widgets, addons, templates)2 gün önce

  • CVE-2026-115596
    28İzleyin

    WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    implecode · ecommerce product catalog2 gün önce

  • CVE-2026-115606
    28İzleyin

    WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    crowd favorite · dxp toolkit2 gün önce

  • CVE-2026-115607
    37İzleyin

    WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    crowd favorite · dxp toolkit2 gün önce

  • CVE-2026-115609
    28İzleyin

    WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    stiofan · getpaid2 gün önce

  • CVE-2026-115612
    28İzleyin

    WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    iova.mihai · slicewp2 gün önce

  • CVE-2026-115904
    38İzleyin

    Topluyo Desktop for Linux has an OS Command Injection issue

    KritikCVSS 9,6İstismar yokEPSS %0

    topluyo · app2 gün önce

  • CVE-2026-116391
    35İzleyin

    WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    gs plugins · gs logo slider2 gün önce

  • CVE-2026-116392
    28İzleyin

    WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    pickplugins · accordion2 gün önce

  • CVE-2026-116393
    30İzleyin

    WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    ihomefinder, inc. · optima express2 gün önce

  • CVE-2026-118035
    30İzleyin

    Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing

    YüksekCVSS 7,5İstismar yokEPSS %0

    progress software · telerik document processing libraries2 gün önce

  • CVE-2026-118036
    30İzleyin

    Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering

    YüksekCVSS 7,5İstismar yokEPSS %0

    progress software · telerik document processing libraries2 gün önce

  • CVE-2026-118037
    30İzleyin

    Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing

    YüksekCVSS 7,5İstismar yokEPSS %0

    progress software · telerik document processing libraries2 gün önce

  • CVE-2026-118038
    28İzleyin

    Path Traversal in Telerik Document Processing Libraries AI Agent Tools

    YüksekCVSS 7,1İstismar yokEPSS %0

    progress software · telerik document processing libraries2 gün önce

  • CVE-2026-118039
    30İzleyin

    XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing

    YüksekCVSS 7,5İstismar yokEPSS %0

    progress software · telerik document processing libraries2 gün önce

  • CVE-2026-118040
    30İzleyin

    Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing

    YüksekCVSS 7,5İstismar yokEPSS %0

    progress software · telerik document processing libraries2 gün önce

  • CVE-2026-67073
    34İzleyin

    HCL BigFix AEX is affected by multiple security vulnerabilities.

    YüksekCVSS 8,6İstismar yokEPSS %0

    hcl software · bigfix aex2 gün önce

  • CVE-2026-67074
    36İzleyin

    HCL BigFix AEX is affected by multiple security vulnerabilities.

    KritikCVSS 9,1İstismar yokEPSS %0

    hcl software · bigfix aex2 gün önce

  • CVE-2026-105420
    37İzleyin

    Path Traversal in Wing WFTP Server leading to Remote Code Execution

    KritikCVSS 9,4İstismar yokEPSS %0

    wing soft technology · wing ftp server2 gün önce

  • CVE-2026-115590
    28İzleyin

    WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    wedevs · dokan2 gün önce

  • CVE-2026-115603
    34İzleyin

    WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    advanced ads gmbh · advanced ads – tracking2 gün önce

  • CVE-2026-115968
    39İzleyin

    WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ultimate member · ultimate member2 gün önce

  • CVE-2026-116078
    34İzleyin

    HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit

    YüksekCVSS 8,7İstismar yokEPSS %0

    mtrudel · bandit2 gün önce

  • CVE-2026-116389
    35İzleyin

    WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    crossi72 · phoenix media rename2 gün önce

  • CVE-2026-116390
    28İzleyin

    WordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    stepasyuk · filter everything&nbsp;— wordpress &amp; woocommerce filters2 gün önce

  • CVE-2026-52729
    28İzleyin

    Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletion

    YüksekCVSS 7,1İstismar yokEPSS %0

    xibosignage · xibo-cms2 gün önce