İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

8.342 kayıt · 20 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 78 / 84

  • CVE-2026-118260
    32İzleyin

    Echo: BodyDump captures request and response bodies without size limits in v4

    YüksekCVSS 8,2İstismar yokEPSS %0

    labstack · echo4 gün önce

  • CVE-2026-118261
    32İzleyin

    Echo: Decompress permits unbounded gzip expansion in v4

    YüksekCVSS 8,2İstismar yokEPSS %0

    labstack · echo4 gün önce

  • CVE-2026-118262
    32İzleyin

    Echo: WebSocket proxy can retain connections and handlers after client disconnect

    YüksekCVSS 8,2İstismar yokEPSS %0

    labstack · echo4 gün önce

  • CVE-2026-118264
    36İzleyin

    Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls

    KritikCVSS 9,1İstismar yokEPSS %0

    labstack · echo4 gün önce

  • CVE-2026-118633
    36İzleyin

    A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after

    KritikCVSS 9,2İstismar yokEPSS %0

    sophos · sg utm4 gün önce

  • CVE-2026-118645
    28İzleyin

    n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter

    YüksekCVSS 7,0İstismar yokEPSS %0

    n8n-io · n8n4 gün önce

  • CVE-2026-118646
    28İzleyin

    n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node

    YüksekCVSS 7,1İstismar yokEPSS %0

    n8n-io · n8n4 gün önce

  • CVE-2026-118648
    33İzleyin

    n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy

    YüksekCVSS 8,4İstismar yokEPSS %0

    n8n-io · n8n4 gün önce

  • CVE-2026-118649
    34İzleyin

    n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables

    YüksekCVSS 8,7İstismar yokEPSS %0

    n8n-io · n8n4 gün önce

  • CVE-2026-118678
    28İzleyin

    n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction

    YüksekCVSS 7,1İstismar yokEPSS %0

    n8n-io · n8n4 gün önce

  • CVE-2026-118683
    34İzleyin

    MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf

    YüksekCVSS 8,6İstismar yokEPSS %0

    project-monai · monai4 gün önce

  • CVE-2026-118684
    32İzleyin

    MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads

    YüksekCVSS 8,2İstismar yokEPSS %0

    project-monai · monai4 gün önce

  • CVE-2026-118686
    34İzleyin

    EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex

    YüksekCVSS 8,7İstismar yokEPSS %0

    espocrm · espocrm4 gün önce

  • CVE-2026-118687
    33İzleyin

    Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication

    YüksekCVSS 8,3İstismar yokEPSS %0

    coder · coder4 gün önce

  • CVE-2026-118688
    35İzleyin

    Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename

    YüksekCVSS 8,8İstismar yokEPSS %0

    bytecodealliance · wasmtime4 gün önce

  • GHSA-5j9r-fx4x-rpvg
    35İzleyin

    rucio has an Authorization Bypass on REST API endpoint for signing URLs

    YüksekCVSS 8,8İstismar yok

    4 gün önce

  • GHSA-7w82-6f9j-v9jp
    30İzleyin

    mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths

    YüksekCVSS 7,5İstismar yok

    4 gün önce

  • GHSA-4mfg-r38w-w8fg
    32İzleyin

    mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6

    YüksekCVSS 8,2İstismar yok

    4 gün önce

  • CVE-2025-14260
    33İzleyin

    Server Side Request Forgery in Multiple WSO2 Products Allows Access to Internal and External Resources

    YüksekCVSS 8,3İstismar yokEPSS %0

    wso2 · wso2 api manager4 gün önce

  • CVE-2026-109411
    32İzleyin

    Samba: access control bypass via vfs_ceph_rgw case-insensitive open

    YüksekCVSS 8,1İstismar yokEPSS %0

    samba · samba4 gün önce

  • CVE-2026-117574
    36İzleyin

    Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization

    KritikCVSS 9,1İstismar yokEPSS %0

    red hat · red hat openshift ai (rhoai)4 gün önce

  • CVE-2026-118650
    30İzleyin

    Echo: middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path

    YüksekCVSS 7,5İstismar yokEPSS %0

    labstack · echo4 gün önce

  • CVE-2026-13451
    30İzleyin

    Kserve: kserve: server-side request forgery via malicious storageuri

    YüksekCVSS 7,7İstismar yokEPSS %0

    red hat · red hat openshift ai (rhoai)4 gün önce

  • CVE-2026-61542
    34İzleyin

    Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools

    YüksekCVSS 8,6İstismar yokEPSS %0

    drhelius · gearboy4 gün önce

  • CVE-2026-63190
    37İzleyin

    FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS

    KritikCVSS 9,4İstismar yokEPSS %0

    fearlessgeekmedia · fearlesscms4 gün önce

  • CVE-2026-6647
    29İzleyin

    Incomplete OAuth Token Revocation via Case Mismatch in WSO2 Identity Server Allows Continued Access After Lifecycle Events

    YüksekCVSS 7,4İstismar yokEPSS %0

    wso2 · wso2 identity server4 gün önce

  • CVE-2026-76418
    64Bu hafta

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %0

    cisco · cisco secure firewall adaptive security appliance (asa) software4 gün önce

  • CVE-2026-78674
    35İzleyin

    Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution

    YüksekCVSS 8,8İstismar yokEPSS %0

    wso2 · enterprise integrator (bps profile)4 gün önce

  • CVE-2026-118659
    30İzleyin

    @happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxy

    YüksekCVSS 7,5İstismar yokEPSS %0

    capricorn86 · happy-dom4 gün önce

  • CVE-2026-118660
    34İzleyin

    Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML

    YüksekCVSS 8,6İstismar yokEPSS %0

    capricorn86 · happy-dom4 gün önce

  • CVE-2026-118664
    32İzleyin

    decode-uri-component: Denial of service via quadratic replacement of percent-encoded runs

    YüksekCVSS 8,2İstismar yokEPSS %0

    samverschueren · decode-uri-component4 gün önce

  • CVE-2026-118665
    32İzleyin

    GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications

    YüksekCVSS 8,2İstismar yokEPSS %0

    ardatan · graphql-tools4 gün önce

  • CVE-2026-118668
    34İzleyin

    LangGraph JavaScript custom authentication may permit cross-user Store access

    YüksekCVSS 8,6İstismar yokEPSS %0

    langchain-ai · langgraph-api4 gün önce

  • CVE-2026-116641
    30İzleyin

    The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs

    YüksekCVSS 7,6İstismar yokEPSS %0

    mongodb · database tools4 gün önce

  • CVE-2026-118669
    33İzleyin

    OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client

    YüksekCVSS 8,4İstismar yokEPSS %0

    oauthlib · oauthlib4 gün önce

  • CVE-2026-118682
    30İzleyin

    ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITM

    YüksekCVSS 7,7İstismar yokEPSS %0

    karingx · clashmi4 gün önce

  • CVE-2026-118689
    34İzleyin

    OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length

    YüksekCVSS 8,7İstismar yokEPSS %0

    ovenmedialabs · ovenmediaengine4 gün önce

  • CVE-2026-118690
    37İzleyin

    Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs

    KritikCVSS 9,3İstismar yokEPSS %0

    signalk · signalk-server4 gün önce

  • CVE-2026-118692
    28İzleyin

    CherryTree through 1.7.2 OS Command Injection via Custom Web Link Action

    YüksekCVSS 7,1İstismar yokEPSS %0

    giuspen · cherrytree4 gün önce

  • CVE-2026-118694
    34İzleyin

    python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinations

    YüksekCVSS 8,7İstismar yokEPSS %0

    trentm · python-markdown24 gün önce

  • CVE-2026-118752
    34İzleyin

    FreeImage before 3.19.22 Heap Buffer Overflow via IFF/LBM PBM RLE Decoder

    YüksekCVSS 8,5İstismar yokEPSS %0

    danoli3 · freeimage4 gün önce

  • CVE-2026-118753
    34İzleyin

    FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Overflow via GIF_PLAYBACK Compositing

    YüksekCVSS 8,5İstismar yokEPSS %0

    danoli3 · freeimage4 gün önce

  • CVE-2026-118755
    34İzleyin

    Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path

    YüksekCVSS 8,6İstismar yokEPSS %1

    volmarg · personal-management-system4 gün önce

  • CVE-2026-118803
    30İzleyin

    Bricks Theme Unauthenticated Dynamic Data Tag Injection via query_result

    YüksekCVSS 7,5İstismar yokEPSS %0

    bricks · bricks theme4 gün önce

  • CVE-2026-118804
    30İzleyin

    Bricks Broken Access Control via query_result Endpoint

    YüksekCVSS 7,5İstismar yokEPSS %0

    bricks · bricks builder4 gün önce

  • CVE-2026-54453
    28İzleyin

    OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)

    YüksekCVSS 7,2İstismar yokEPSS %0

    opencats · opencats4 gün önce

  • CVE-2026-54455
    30İzleyin

    OpenCATS: Authenticated SQL injection in activity DataGrid date filters

    YüksekCVSS 7,6İstismar yokEPSS %0

    opencats · opencats4 gün önce

  • CVE-2026-61546
    35İzleyin

    AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools

    YüksekCVSS 8,8İstismar yokEPSS %0

    ankimcp · anki-mcp-server-addon4 gün önce

  • CVE-2026-61564
    40Planlayın

    AVideo-Encoder: unauthenticated installer PHP code injection

    KritikCVSS 10,0İstismar yokEPSS %0

    wwbn · avideo-encoder4 gün önce

  • CVE-2026-61567
    40Planlayın

    AVideo-Encoder: unauthenticated command execution through streamer login trust

    KritikCVSS 10,0İstismar yokEPSS %0

    wwbn · avideo-encoder4 gün önce

  • CVE-2026-61569
    30İzleyin

    AVideo-Encoder: pre-authentication streamer-login SQL injection

    YüksekCVSS 7,5İstismar yokEPSS %0

    wwbn · avideo-encoder4 gün önce

  • CVE-2026-61571
    29İzleyin

    AVideo-Encoder: missing authentication on control and status endpoints

    YüksekCVSS 7,3İstismar yokEPSS %0

    wwbn · avideo-encoder4 gün önce

  • CVE-2026-61572
    34İzleyin

    AVideo-Encoder: unauthenticated full-response server-side request forgery

    YüksekCVSS 8,6İstismar yokEPSS %0

    wwbn · avideo-encoder4 gün önce

  • CVE-2026-93851
    32İzleyin

    Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted post

    YüksekCVSS 8,0İstismar yokEPSS %0

    mattermost · mattermost4 gün önce

  • CVE-2026-118579
    35İzleyin

    D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor

    YüksekCVSS 8,9İstismar yokEPSS %0

    d-link · dir-5054 gün önce

  • CVE-2026-85749
    32İzleyin

    MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail

    YüksekCVSS 8,1İstismar yokEPSS %0

    mailwatch · mailwatch4 gün önce

  • CVE-2026-107015
    36İzleyin

    Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note dat

    KritikCVSS 9,1İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107017
    36İzleyin

    Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigge

    KritikCVSS 9,1İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107020
    30İzleyin

    An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers to force victim user

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107026
    30İzleyin

    Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwrite another user's cl

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107028
    36İzleyin

    Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leadin

    KritikCVSS 9,1İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107032
    36İzleyin

    Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, l

    KritikCVSS 9,1İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107034
    36İzleyin

    Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note dat

    KritikCVSS 9,1İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107037
    30İzleyin

    Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attackers to write in ano

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107039
    30İzleyin

    Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName 2.33

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107042
    30İzleyin

    Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in a

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107044
    30İzleyin

    Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAX

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107047
    30İzleyin

    Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanis

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107049
    30İzleyin

    An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplying a crafted URI st

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107052
    30İzleyin

    Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily r

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107055
    30İzleyin

    Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary file

    YüksekCVSS 7,5İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107058
    39İzleyin

    An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service

    KritikCVSS 9,8İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-107060
    36İzleyin

    Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN config

    KritikCVSS 9,1İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-51905
    35İzleyin

    TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in superagi/controllers/a

    YüksekCVSS 8,8İstismar yokEPSS %0

    4 gün önce

  • CVE-2026-21157
    33İzleyin

    Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.

    YüksekCVSS 8,3İstismar yokEPSS %0

    samsung mobile · bixby4 gün önce

  • CVE-2026-113387
    34İzleyin

    The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public

    YüksekCVSS 8,6İstismar yokEPSS %0

    canva · ortto4 gün önce

  • CVE-2026-66088
    37İzleyin

    Unrestricted Command Execution via system.execute

    KritikCVSS 9,4İstismar yokEPSS %0

    apereo foundation · openequella4 gün önce

  • CVE-2026-66090
    28İzleyin

    XML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Read

    YüksekCVSS 7,1İstismar yokEPSS %0

    apereo foundation · openequella4 gün önce

  • CVE-2026-109516
    39İzleyin

    Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token

    KritikCVSS 9,8İstismar yokEPSS %0

    guruteam · bot for telegram on woocommerce4 gün önce

  • CVE-2026-42922
    39İzleyin

    A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809).

    KritikCVSS 9,8İstismar yokEPSS %0

    frangoteam · frangoteam4 gün önce

  • CVE-2026-93757
    30İzleyin

    Wild Apricot Login <= 1.0.18 - Authentication Bypass via SSO Email-Collision Account Binding on Multisite

    YüksekCVSS 7,5İstismar yokEPSS %0

    wild-apricot · wild apricot login4 gün önce

  • CVE-2026-93855
    30İzleyin

    SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter

    YüksekCVSS 7,5İstismar yokEPSS %0

    brewlabs · sendpress newsletters4 gün önce

  • CVE-2026-93904
    30İzleyin

    Social Web Suite <= 4.1.12 - Unauthenticated SQL Injection via 'exclude_posts' Parameter

    YüksekCVSS 7,5İstismar yokEPSS %0

    dejanmarkovic · social web suite – social media auto post, social media auto publish4 gün önce

  • CVE-2026-96228
    32İzleyin

    SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover

    YüksekCVSS 8,1İstismar yokEPSS %0

    sslplugins · ssl wireless sms notification4 gün önce

  • CVE-2026-96666
    28İzleyin

    Schema App Structured Data <= 2.3.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output Filter

    YüksekCVSS 7,2İstismar yokEPSS %0

    vberkel · schema app structured data4 gün önce

  • CVE-2026-96669
    28İzleyin

    Food Store <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service_type' Cookie

    YüksekCVSS 7,2İstismar yokEPSS %0

    wpscripts · food store – online food delivery & pickup4 gün önce

  • CVE-2026-96741
    28İzleyin

    DSGVO All in one for WP <= 5.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption

    YüksekCVSS 7,2İstismar yokEPSS %0

    mlfactory · dsgvo all in one for wp4 gün önce

  • CVE-2026-103693
    36İzleyin

    Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection

    KritikCVSS 9,0İstismar yokEPSS %0

    unknown · frontend dashboard3 gün önce

  • CVE-2026-111739
    30İzleyin

    Two Factor Authentication < 1.17.0 and All-In-One Security (AIOS) < 5.5.0 - Subscriber+ 2FA Bypass via 'creds_user_id' Parameter

    YüksekCVSS 7,5İstismar yokEPSS %0

    unknown · two factor authentication3 gün önce

  • CVE-2026-113616
    39İzleyin

    LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password Reset

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · logixfast auth3 gün önce

  • CVE-2026-113617
    39İzleyin

    Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal

    KritikCVSS 9,9İstismar yokEPSS %0

    unknown · automated import products to cart3 gün önce

  • CVE-2026-114488
    29İzleyin

    Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport binding

    YüksekCVSS 7,4İstismar yokEPSS %0

    red hat · red hat fuse 73 gün önce

  • CVE-2026-115245
    39İzleyin

    Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · chat ai with dispatcher3 gün önce

  • CVE-2026-115301
    28İzleyin

    Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block

    YüksekCVSS 7,2İstismar yokEPSS %0

    unknown · contact form by supsystic3 gün önce

  • CVE-2026-118905
    28İzleyin

    nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed

    YüksekCVSS 7,1İstismar yokEPSS %0

    nvm-sh · nvm3 gün önce

  • CVE-2026-15564
    29İzleyin

    Wildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserialization

    YüksekCVSS 7,4İstismar yokEPSS %0

    red hat · red hat jboss enterprise application platform 73 gün önce

  • CVE-2026-86794
    35İzleyin

    Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission Form

    YüksekCVSS 8,8İstismar yokEPSS %0

    unknown · community events3 gün önce

  • CVE-2026-89216
    34İzleyin

    vTables < 0.3 - Unauthenticated SQL Injection via orderby Parameter

    YüksekCVSS 8,6İstismar yokEPSS %0

    unknown · vtables3 gün önce

  • CVE-2025-62839
    34İzleyin

    Hard-coded Cryptographic Key #1

    YüksekCVSS 8,7İstismar yokEPSS %0

    qnap systems inc. · hbs 3 hybrid backup sync3 gün önce

  • CVE-2025-62841
    34İzleyin

    Hard-coded Cryptographic Key #2

    YüksekCVSS 8,7İstismar yokEPSS %0

    qnap systems inc. · hbs 3 hybrid backup sync3 gün önce