İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

8.412 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 77 / 85

  • CVE-2026-103792
    38İzleyin

    Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1

    KritikCVSS 9,6İstismar yokEPSS %0

    dell · powerprotect data domain management center5 gün önce

  • CVE-2026-103799
    38İzleyin

    Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1

    KritikCVSS 9,6İstismar yokEPSS %0

    dell · powerprotect data domain management center5 gün önce

  • CVE-2026-110540
    28İzleyin

    Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.1

    YüksekCVSS 7,1İstismar yokEPSS %0

    dell · powerprotect data domain management center5 gün önce

  • CVE-2026-110541
    29İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 7,2İstismar yokEPSS %1

    dell · powerprotect data domain5 gün önce

  • CVE-2026-112197
    37İzleyin

    Missing Authentication for Critical Function in Tactis' NoviGest Desktop App

    KritikCVSS 9,4İstismar yokEPSS %0

    tactis · novigest desktop app5 gün önce

  • CVE-2026-112198
    33İzleyin

    Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App

    YüksekCVSS 8,3İstismar yokEPSS %0

    tactis · novigest desktop app5 gün önce

  • CVE-2026-6064
    29İzleyin

    Norton, Avast, and AVG local privilege escalation via link following in Data Shredder

    YüksekCVSS 7,3İstismar yokEPSS %0

    gen digital · norton antivirus5 gün önce

  • CVE-2026-86377
    30İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 7,6İstismar yokEPSS %0

    dell · powerprotect data domain5 gün önce

  • CVE-2026-86378
    35İzleyin

    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re

    YüksekCVSS 8,8İstismar yokEPSS %0

    dell · powerprotect data domain5 gün önce

  • CVE-2026-87102
    29İzleyin

    Sensitive information disclosure and manipulation due to improper token validation.

    YüksekCVSS 7,4İstismar yokEPSS %0

    acronis · acronis cyber protect 175 gün önce

  • CVE-2026-87103
    29İzleyin

    Sensitive information disclosure and manipulation due to improper token validation.

    YüksekCVSS 7,4İstismar yokEPSS %0

    acronis · acronis cyber protect 175 gün önce

  • CVE-2026-99107
    31İzleyin

    ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99109
    31İzleyin

    smb: client: reject SetEA requests that do not fit the request buffer

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99110
    28İzleyin

    smb: client: fix heap overflow in cifs_do_set_acl()

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99112
    28İzleyin

    net/sched: cls_flower: validate mask pointer after nla_next()

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99116
    31İzleyin

    net: psp: do not inherit the Rx association on clone

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99117
    31İzleyin

    net: bridge: mcast: don't truncate the port group walk on teardown

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99122
    29İzleyin

    vsock/vmci: validate packet source for connected sockets

    YüksekCVSS 7,3İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99123
    28İzleyin

    vsock/virtio: validate packet source for connected sockets

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99131
    32İzleyin

    xfs: fix capability check in xfs

    YüksekCVSS 8,2İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99136
    28İzleyin

    dm-crypt: fix a tiny race condition in crypt_dec_pending

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99142
    28İzleyin

    tracing: Check operator stack capacity before pushing

    YüksekCVSS 7,1İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99143
    31İzleyin

    tracing: Keep the predicate limit separate from program capacity

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99148
    28İzleyin

    drm/amdgpu: keep the eviction fence until the last handle is closed

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99152
    30İzleyin

    scsi: libiscsi: Validate the task named by a management response

    YüksekCVSS 7,5İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99153
    39İzleyin

    scsi: libiscsi: Validate the ITT reflected in a Reject PDU

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99154
    39İzleyin

    scsi: libiscsi: Reject a negative task index from parse_pdu_itt

    KritikCVSS 9,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99156
    31İzleyin

    scsi: st: Fix use-after-free race between st_remove() and st_open()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99163
    31İzleyin

    tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99164
    31İzleyin

    spi: imx: fix slab corruption from undersized DMA bounce buffers

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99167
    31İzleyin

    net/sched: fix use-after-free in __tcf_action_put()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99170
    35İzleyin

    namespace: a mount that copy_tree() leaves out can't take over a lock

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99173
    31İzleyin

    eventfs: Free the eventfs_inode after an rcu grace period too

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99177
    31İzleyin

    KVM: SEV: Fix page dirtying in sev_gmem_post_populate()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99180
    31İzleyin

    unicode: free the map after a grace period

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99185
    35İzleyin

    firewire: core: fix race condition in split transaction handling

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99203
    31İzleyin

    pipe: preserve existing fasync readers on writer setup failure

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99212
    28İzleyin

    net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure

    YüksekCVSS 7,0İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99213
    31İzleyin

    vsock: treat TCP_CLOSING as once-established

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-99216
    33İzleyin

    Drivers: hv: Don't reset VMBus connection state on error/exit paths

    YüksekCVSS 8,4İstismar yokEPSS %0

    linux · linux5 gün önce

  • GHSA-34cw-x8g7-rcv5
    30İzleyin

    Stack overflow on deeply nested GraphQL documents

    YüksekCVSS 7,5İstismar yok

    5 gün önce

  • GHSA-36rq-8957-mjrx
    30İzleyin

    Excessive CPU and memory use on crafted GraphQL documents

    YüksekCVSS 7,5İstismar yok

    5 gün önce

  • GHSA-pfrg-qg4f-grmv
    30İzleyin

    Unbounded memory use on large request bodies

    YüksekCVSS 7,5İstismar yok

    5 gün önce

  • RUSTSEC-2026-0433
    30İzleyin

    Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS`

    YüksekCVSS 7,5İstismar yok

    5 gün önce

  • CVE-2026-102790
    34İzleyin

    Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12

    YüksekCVSS 8,6İstismar yokEPSS %0

    icagenda.com · icagenda extension for joomla5 gün önce

  • CVE-2026-114278
    39İzleyin

    Unauthenticated Command Injection via kubeconfig Username in che-machine-exec

    KritikCVSS 9,8İstismar yokEPSS %0

    eclipse foundation · eclipse che5 gün önce

  • CVE-2026-118477
    34İzleyin

    KaliFast Project Management Platform ei_git_repo_url OS Command Injection

    YüksekCVSS 8,7İstismar yokEPSS %1

    eisge · kalifast5 gün önce

  • CVE-2026-118485
    28İzleyin

    Axel Download Accelerator Path Traversal via URL Filename Decoding

    YüksekCVSS 7,0İstismar yokEPSS %0

    axel download accelerator · axel5 gün önce

  • CVE-2026-111411
    37İzleyin

    WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    aman · funnelkit automations5 gün önce

  • CVE-2026-111850
    34İzleyin

    WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    buddypress · buddypress5 gün önce

  • CVE-2026-115591
    30İzleyin

    WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    supsystic · contact form by supsystic5 gün önce

  • CVE-2026-115593
    28İzleyin

    WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    unlimited elements · unlimited elements for elementor (free widgets, addons, templates)5 gün önce

  • CVE-2026-115596
    28İzleyin

    WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    implecode · ecommerce product catalog5 gün önce

  • CVE-2026-115606
    28İzleyin

    WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    crowd favorite · dxp toolkit5 gün önce

  • CVE-2026-115607
    37İzleyin

    WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    crowd favorite · dxp toolkit5 gün önce

  • CVE-2026-115609
    28İzleyin

    WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    stiofan · getpaid5 gün önce

  • CVE-2026-115612
    28İzleyin

    WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    iova.mihai · slicewp5 gün önce

  • CVE-2026-115904
    38İzleyin

    Topluyo Desktop for Linux has an OS Command Injection issue

    KritikCVSS 9,6İstismar yokEPSS %0

    topluyo · app5 gün önce

  • CVE-2026-116391
    35İzleyin

    WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    gs plugins · gs logo slider5 gün önce

  • CVE-2026-116392
    28İzleyin

    WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    pickplugins · accordion5 gün önce

  • CVE-2026-116393
    30İzleyin

    WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    ihomefinder, inc. · optima express5 gün önce

  • CVE-2026-118035
    30İzleyin

    Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing

    YüksekCVSS 7,5İstismar yokEPSS %0

    progress software · telerik document processing libraries5 gün önce

  • CVE-2026-118036
    30İzleyin

    Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering

    YüksekCVSS 7,5İstismar yokEPSS %0

    progress software · telerik document processing libraries5 gün önce

  • CVE-2026-118037
    30İzleyin

    Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing

    YüksekCVSS 7,5İstismar yokEPSS %0

    progress software · telerik document processing libraries5 gün önce

  • CVE-2026-118038
    28İzleyin

    Path Traversal in Telerik Document Processing Libraries AI Agent Tools

    YüksekCVSS 7,1İstismar yokEPSS %0

    progress software · telerik document processing libraries5 gün önce

  • CVE-2026-118039
    30İzleyin

    XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing

    YüksekCVSS 7,5İstismar yokEPSS %0

    progress software · telerik document processing libraries5 gün önce

  • CVE-2026-118040
    30İzleyin

    Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing

    YüksekCVSS 7,5İstismar yokEPSS %0

    progress software · telerik document processing libraries5 gün önce

  • CVE-2026-67073
    34İzleyin

    HCL BigFix AEX is affected by multiple security vulnerabilities.

    YüksekCVSS 8,6İstismar yokEPSS %0

    hcl software · bigfix aex5 gün önce

  • CVE-2026-67074
    36İzleyin

    HCL BigFix AEX is affected by multiple security vulnerabilities.

    KritikCVSS 9,1İstismar yokEPSS %0

    hcl software · bigfix aex5 gün önce

  • CVE-2026-105420
    37İzleyin

    Path Traversal in Wing WFTP Server leading to Remote Code Execution

    KritikCVSS 9,4İstismar yokEPSS %0

    wing soft technology · wing ftp server5 gün önce

  • CVE-2026-115590
    28İzleyin

    WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    wedevs · dokan5 gün önce

  • CVE-2026-115603
    34İzleyin

    WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability

    YüksekCVSS 8,5İstismar yokEPSS %0

    advanced ads gmbh · advanced ads – tracking5 gün önce

  • CVE-2026-115968
    39İzleyin

    WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    ultimate member · ultimate member5 gün önce

  • CVE-2026-116078
    34İzleyin

    HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit

    YüksekCVSS 8,7İstismar yokEPSS %0

    mtrudel · bandit5 gün önce

  • CVE-2026-116389
    35İzleyin

    WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    crossi72 · phoenix media rename5 gün önce

  • CVE-2026-116390
    28İzleyin

    WordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    stepasyuk · filter everything&nbsp;— wordpress &amp; woocommerce filters5 gün önce

  • CVE-2026-52729
    28İzleyin

    Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletion

    YüksekCVSS 7,1İstismar yokEPSS %0

    xibosignage · xibo-cms5 gün önce

  • CVE-2026-59164
    28İzleyin

    NORA missing cross-user token-management authorization

    YüksekCVSS 7,1İstismar yokEPSS %0

    getnora-io · nora5 gün önce

  • CVE-2026-59172
    31İzleyin

    Joker linter executed project-local .jokerd/linter.* files during linting

    YüksekCVSS 7,8İstismar yokEPSS %0

    candid82 · joker5 gün önce

  • CVE-2026-59176
    31İzleyin

    Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import

    YüksekCVSS 7,8İstismar yokEPSS %0

    jordanburke · functype5 gün önce

  • CVE-2026-59177
    35İzleyin

    ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    esphome · device-builder5 gün önce

  • CVE-2026-59179
    33İzleyin

    OpenHop: Path Traversal in Flow ID File Operations

    YüksekCVSS 8,3İstismar yokEPSS %0

    naorsabag · openhop5 gün önce

  • CVE-2026-59185
    34İzleyin

    identrail: Cross-tenant GitHub installation binding without ownership verification

    YüksekCVSS 8,5İstismar yokEPSS %0

    identrail · identrail5 gün önce

  • CVE-2026-93517
    34İzleyin

    X.Org Server GLX RenderLarge Heap Buffer Overflow

    YüksekCVSS 8,5İstismar yokEPSS %0

    x.orgg · xorg-x11-server5 gün önce

  • CVE-2026-106972
    30İzleyin

    Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denia

    YüksekCVSS 7,5İstismar yokEPSS %0

    5 gün önce

  • CVE-2026-93518
    31İzleyin

    X.Org Server XKB ResizeKeyType Numeric Truncation

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · xorg-x11-server5 gün önce

  • CVE-2026-93519
    31İzleyin

    X.Org Server XFixes Pointer Barrier Event List Buffer Overflow

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · xorg-x11-server5 gün önce

  • CVE-2026-93520
    31İzleyin

    X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · xorg-x11-server5 gün önce

  • CVE-2026-112357
    34İzleyin

    GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation

    YüksekCVSS 8,5İstismar yokEPSS %0

    gfi usa, llc · gfi kerioconnect5 gün önce

  • CVE-2026-116776
    28İzleyin

    USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS

    YüksekCVSS 7,0İstismar yokEPSS %0

    n-romanovich · usb-test5 gün önce

  • CVE-2026-116778
    35İzleyin

    FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution

    YüksekCVSS 8,8İstismar yokEPSS %0

    fogproject · fogproject5 gün önce

  • CVE-2026-44179
    39İzleyin

    XWiki Pro Macros: excerpt-include title and content injection executes code

    KritikCVSS 9,9İstismar yokEPSS %0

    xwikisas · xwiki-pro-macros5 gün önce

  • CVE-2026-47235
    30İzleyin

    SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array

    YüksekCVSS 7,5İstismar yokEPSS %0

    simulationcraft · simc5 gün önce

  • CVE-2026-56828
    35İzleyin

    Shopper: read-only team permissions allow administrator creation and permission escalation

    YüksekCVSS 8,8İstismar yokEPSS %0

    shopperlabs · shopper5 gün önce

  • CVE-2026-59979
    33İzleyin

    YosemiteCrew: Missing organization authorization on service and PMS library/template routes

    YüksekCVSS 8,3İstismar yokEPSS %0

    yosemitecrew · yosemite-crew5 gün önce

  • CVE-2026-93521
    31İzleyin

    X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · xorg-x11-server5 gün önce

  • CVE-2026-93522
    31İzleyin

    X.Org Server Glamor CopyArea Heap Buffer Overflow

    YüksekCVSS 7,8İstismar yokEPSS %0

    x.org · xorg-x11-server5 gün önce

  • CVE-2026-100105
    30İzleyin

    Alerting contact point authorization bypass via schema downgrade

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    grafana · grafana enterprise5 gün önce

  • CVE-2026-103401
    35İzleyin

    Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root

    YüksekCVSS 8,8İstismar yokEPSS %0

    juniper networks · session smart router5 gün önce

  • CVE-2026-103402
    35İzleyin

    Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation

    YüksekCVSS 8,8İstismar yokEPSS %0

    juniper networks · session smart router5 gün önce