İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2026: sömürülen ve yeni ciddi CVE kayıtları

8.599 kayıt · 21 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 85 / 86

  • CVE-2026-119716
    37İzleyin

    pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments

    KritikCVSS 9,3İstismar yokEPSS %0

    wbond · pybars35 gün önce

  • CVE-2026-119718
    34İzleyin

    Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache

    YüksekCVSS 8,5İstismar yokEPSS %0

    blender · blender5 gün önce

  • CVE-2026-119719
    34İzleyin

    Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction

    YüksekCVSS 8,5İstismar yokEPSS %0

    blender · blender5 gün önce

  • CVE-2026-119722
    34İzleyin

    Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()

    YüksekCVSS 8,5İstismar yokEPSS %0

    blender · blender5 gün önce

  • CVE-2025-49602
    39İzleyin

    An issue was discovered in Keyfactor EJBCA 9.

    KritikCVSS 9,8İstismar yokEPSS %0

    5 gün önce

  • CVE-2026-104623
    25İzleyin

    Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    suse · rancher5 gün önce

  • CVE-2026-112816
    40Planlayın

    Improper certificate validation in the HTTPS listener in LXD

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    canonical · lxd5 gün önce

  • CVE-2026-115642
    33İzleyin

    In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-

    YüksekCVSS 8,3İstismar yokEPSS %0

    openstack · keystonemiddleware5 gün önce

  • CVE-2026-119116
    34İzleyin

    Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c

    YüksekCVSS 8,7İstismar yokEPSS %0

    aws · kmstool-enclave5 gün önce

  • CVE-2026-119148
    32İzleyin

    Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint

    YüksekCVSS 8,2İstismar yokEPSS %0

    aws · aws-nitro-enclaves-sdk-c5 gün önce

  • CVE-2026-61804
    32İzleyin

    myTinyWMS has Stored Cross-Site Scripting (XSS) in Product and Category Management

    YüksekCVSS 8,1İstismar yokEPSS %0

    mytinywms · mytinywms5 gün önce

  • CVE-2026-61826
    40Planlayın

    Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery

    KritikCVSS 10,0İstismar yokEPSS %0

    morpheus65535 · bazarr5 gün önce

  • CVE-2026-65566
    35İzleyin

    WordPress AI Engine plugin <= 3.8.8 - Cross Site Request Forgery (CSRF) vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    meow apps · ai engine5 gün önce

  • CVE-2025-8574
    34İzleyin

    Database Cleaner <= 1.4.7 - Authenticated (Administrator+) Arbitrary Table Deletion

    YüksekCVSS 8,7İstismar yokEPSS %0

    tigroumeow · database cleaner: cleanup, optimization & repair5 gün önce

  • CVE-2026-104744
    28İzleyin

    Independent Analytics Pro <= 2.15.5 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    independent analytics · independent analytics pro5 gün önce

  • CVE-2026-105894
    35İzleyin

    Ak Framework <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Update

    YüksekCVSS 8,8İstismar yokEPSS %0

    akbilisim · ak framework5 gün önce

  • CVE-2026-107630
    30İzleyin

    Email Templates Customizer and Designer for WordPress and WooCommerce <= 1.5.14 - Missing Authorization to Unauthenticated Order PII Disclosure via 'preview_ord

    YüksekCVSS 7,5İstismar yokEPSS %0

    saadiqbal · email templates customizer and designer for wordpress and woocommerce5 gün önce

  • CVE-2026-110305
    30İzleyin

    Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Sensitive Information Exposure in 'acf[<mapped_field>]' Parameter via {get_user} Template Tag Inje

    YüksekCVSS 7,5İstismar yokEPSS %0

    hwk-fr · advanced custom fields: extended5 gün önce

  • CVE-2026-112365
    28İzleyin

    easy.jobs <= 2.8.4 - Unauthenticated Stored Cross-Site Scripting via 'cover_letter' Parameter

    YüksekCVSS 7,2İstismar yokEPSS %0

    wpdevteam · easy.jobs – ai powered job listing, job board, career page, recruitment & hiring solution5 gün önce

  • CVE-2026-115346
    32İzleyin

    Avada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload Field

    YüksekCVSS 8,1İstismar yokEPSS %0

    themefusion · avada | website builder for wordpress & woocommerce5 gün önce

  • CVE-2026-118205
    29İzleyin

    Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revision

    YüksekCVSS 7,4İstismar yokEPSS %0

    wpdevteam · essential addons for elementor – popular elementor templates & widgets5 gün önce

  • CVE-2026-118696
    32İzleyin

    In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026

    YüksekCVSS 8,0İstismar yokEPSS %0

    jetbrains · intellij idea5 gün önce

  • CVE-2026-118697
    36İzleyin

    In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 20

    KritikCVSS 9,0İstismar yokEPSS %0

    jetbrains · toolbox app5 gün önce

  • CVE-2026-119086
    32İzleyin

    Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

    YüksekCVSS 8,2İstismar yokEPSS %0

    freertos · freertos-kernel5 gün önce

  • CVE-2026-119760
    34İzleyin

    sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel()

    YüksekCVSS 8,7İstismar yokEPSS %0

    dlundquist · sniproxy5 gün önce

  • CVE-2026-119762
    34İzleyin

    Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2 Unauthenticated DoS via Nested Requests

    YüksekCVSS 8,7İstismar yokEPSS %0

    axigen · axigen mail server5 gün önce

  • CVE-2026-119764
    29İzleyin

    Mythic 3.2.16 through 3.4.0.61 Stored XSS via Agent-Downloaded File Preview

    YüksekCVSS 7,4İstismar yokEPSS %0

    its-a-feature · mythic5 gün önce

  • CVE-2026-119777
    35İzleyin

    Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser

    YüksekCVSS 8,8İstismar yokEPSS %0

    red hat · red hat enterprise linux 105 gün önce

  • CVE-2026-119978
    36İzleyin

    Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore

    KritikCVSS 9,0İstismar yokEPSS %0

    flowiseai · flowise5 gün önce

  • CVE-2026-119979
    34İzleyin

    LM Studio before 0.4.22+1 Path Traversal via Model Downloader

    YüksekCVSS 8,7İstismar yokEPSS %0

    element labs · lm studio5 gün önce

  • CVE-2026-76012
    30İzleyin

    Photo Gallery, Sliders, Proofing and Themes <= 4.4.1 - Authenticated (Custom+) Local File Inclusion via Lightroom 'gallery_edit' Task property_list + Image Uplo

    YüksekCVSS 7,5İstismar yokEPSS %0

    smub · photo gallery, sliders, proofing and themes – nextgen gallery5 gün önce

  • CVE-2026-84243
    28İzleyin

    gettext: Directory traversal via the LANGUAGE environment variable

    YüksekCVSS 7,0İstismar yokEPSS %0

    the gnu c library · glibc5 gün önce

  • CVE-2026-96894
    28İzleyin

    ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.10 - Unauthenticated Stored Cross-Site Scripting via Inbound Email Body

    YüksekCVSS 7,2İstismar yokEPSS %0

    wedevs · erp: complete hr, accounting & crm suite built for woocommerce5 gün önce

  • CVE-2026-97638
    30İzleyin

    Forminator Forms <= 1.57.3.1 - Insecure Direct Object Reference to Unauthenticated Arbitrary Draft Deletion and Takeover via 'previous_draft_id' Parameter

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpmudev · forminator forms – contact form, payment form & custom form builder5 gün önce

  • CVE-2026-105077
    28İzleyin

    WordPress Ad Inserter plugin <= 2.8.19 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    spacetime · ad inserter5 gün önce

  • CVE-2026-116386
    39İzleyin

    WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    cozy vision technologies pvt. ltd. · sms alert order notifications5 gün önce

  • CVE-2026-116401
    30İzleyin

    WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    realmag777 · husky5 gün önce

  • CVE-2026-116405
    28İzleyin

    WordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    e4jvikwp · vikrentcar5 gün önce

  • CVE-2026-116847
    28İzleyin

    WordPress Mang Board WP plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    kitae park · mang board wp5 gün önce

  • CVE-2026-116851
    28İzleyin

    WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    implecode · ecommerce product catalog5 gün önce

  • CVE-2026-116852
    36İzleyin

    WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability

    KritikCVSS 9,1İstismar yokEPSS %0

    marketing fire · widget options5 gün önce

  • CVE-2026-116861
    30İzleyin

    WordPress Flexible Chat plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    wpdesk · flexible chat5 gün önce

  • CVE-2026-116862
    30İzleyin

    WordPress WP REST Cache plugin <= 2026.3.1 - Broken Access Control vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    acato · wp rest cache5 gün önce

  • CVE-2026-118086
    35İzleyin

    WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    hakan ozevin · wp base booking5 gün önce

  • CVE-2026-118089
    28İzleyin

    WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %0

    rextheme · product feed manager5 gün önce

  • CVE-2026-118090
    35İzleyin

    WordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    stylemix · masterstudy lms5 gün önce

  • CVE-2026-119117
    32İzleyin

    Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    YüksekCVSS 8,2İstismar yokEPSS %0

    aws · amazon-kinesis-producer5 gün önce

  • CVE-2026-119526
    39İzleyin

    WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    themerex · royal event5 gün önce

  • CVE-2026-28160
    28İzleyin

    WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    e4jvikwp · vikrentcar5 gün önce

  • CVE-2026-39732
    37İzleyin

    WordPress Transliterator plugin <= 2.5.13 - SQL Injection vulnerability

    KritikCVSS 9,3İstismar yokEPSS %0

    ivijan-stefan stipic · transliterator5 gün önce

  • CVE-2026-39734
    30İzleyin

    WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %0

    saad iqbal · wp easypay5 gün önce

  • CVE-2026-39738
    39İzleyin

    WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    funnelkit · funnelkit automations5 gün önce

  • CVE-2026-39786
    28İzleyin

    WordPress BA Book Everything plugin <= 1.8.33 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    bookingalgorithms · ba book everything5 gün önce

  • CVE-2026-46560
    30İzleyin

    OpenAM Authentication Bypass via RADIUS Spoofing

    YüksekCVSS 7,5İstismar yokEPSS %0

    openidentityplatform · openam5 gün önce

  • CVE-2026-48201
    28İzleyin

    WordPress Fast Velocity Minify plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    raul p. · fast velocity minify5 gün önce

  • CVE-2026-54855
    28İzleyin

    WordPress Profile Builder plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    cozmoslabs · profile builder5 gün önce

  • CVE-2026-59978
    30İzleyin

    AdminNeo: version-cache array injection causes persistent denial of service

    YüksekCVSS 7,5İstismar yokEPSS %0

    adminneo-org · adminneo5 gün önce

  • CVE-2026-61586
    32İzleyin

    Copernik XML Factory: Improper restriction of XInclude resource resolution in Copernik XML Factory (stock JDK provider)

    YüksekCVSS 8,2İstismar yokEPSS %0

    copernik-eu · copernik-xml-factory5 gün önce

  • CVE-2026-61845
    35İzleyin

    Crass: Large numeric exponents cause CPU and memory denial of service

    YüksekCVSS 8,9İstismar yokEPSS %0

    rgrove · crass5 gün önce

  • CVE-2026-61854
    32İzleyin

    VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth

    YüksekCVSS 8,2İstismar yokEPSS %0

    jackh54 · voicesentinel5 gün önce

  • CVE-2026-62160
    34İzleyin

    Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware

    YüksekCVSS 8,7İstismar yokEPSS %0

    daptin · daptin5 gün önce

  • CVE-2026-62162
    32İzleyin

    Hydra: Deposit Claim omits Head state-token spending requirement

    YüksekCVSS 8,2İstismar yokEPSS %0

    cardano-scaling · hydra5 gün önce

  • CVE-2026-62264
    30İzleyin

    PDF Reader MCP: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY

    YüksekCVSS 7,5İstismar yokEPSS %0

    sylphxai · pdf-reader-mcp5 gün önce

  • CVE-2026-62331
    32İzleyin

    praktor: Telegram upload traversal permits persistent agent instruction injection

    YüksekCVSS 8,2İstismar yokEPSS %0

    mtzanidakis · praktor5 gün önce

  • CVE-2026-73186
    35İzleyin

    WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    shortpixel · enable media replace5 gün önce

  • CVE-2026-78527
    35İzleyin

    WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    gs plugins · gs testimonial slider5 gün önce

  • CVE-2026-90888
    39İzleyin

    WordPress LeadSnap plugin <= 1.25 - PHP Object Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    leadsnap · leadsnap5 gün önce

  • CVE-2026-94175
    28İzleyin

    WordPress All In One Login plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    saad iqbal · all in one login5 gün önce

  • CVE-2026-115829
    34İzleyin

    Secret Server partial login bypass

    YüksekCVSS 8,7İstismar yokEPSS %0

    delinea · secret server5 gün önce

  • CVE-2026-115830
    34İzleyin

    Secret Server JWT issuance error

    YüksekCVSS 8,7İstismar yokEPSS %0

    delinea · secret server5 gün önce

  • CVE-2026-116238
    36İzleyin

    pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checks

    KritikCVSS 9,2İstismar yokEPSS %0

    pgadmin.org · pgadmin 45 gün önce

  • CVE-2026-116239
    35İzleyin

    pgAdmin 4: An LDAP or Kerberos login is logged in to another account with the same username

    YüksekCVSS 8,9İstismar yokEPSS %0

    pgadmin · pgadmin 45 gün önce

  • CVE-2026-116240
    28İzleyin

    pgAdmin 4: File Manager and storage-path tools act on a different path from the one checked

    YüksekCVSS 7,1İstismar yokEPSS %0

    pgadmin · pgadmin 45 gün önce

  • CVE-2026-116241
    37İzleyin

    pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier

    KritikCVSS 9,4İstismar yokEPSS %0

    pgadmin · pgadmin 45 gün önce

  • CVE-2026-116242
    28İzleyin

    pgAdmin 4: SSH tunnels use the pgAdmin service account's own SSH identity

    YüksekCVSS 7,1İstismar yokEPSS %0

    pgadmin · pgadmin 45 gün önce

  • CVE-2026-116243
    30İzleyin

    pgAdmin 4: Utility binary path can point at a shared storage directory

    YüksekCVSS 7,7İstismar yokEPSS %0

    pgadmin · pgadmin 45 gün önce

  • CVE-2026-116244
    28İzleyin

    pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentials

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    pgadmin · pgadmin 45 gün önce

  • CVE-2026-116245
    28İzleyin

    pgAdmin 4: Connection services are not restricted in server mode

    YüksekCVSS 7,1İstismar yokEPSS %0

    pgadmin · pgadmin 45 gün önce

  • CVE-2026-116246
    28İzleyin

    pgAdmin 4: Server passwords are left in pgAdmin's process environment

    YüksekCVSS 7,0İstismar yokEPSS %0

    pgadmin · pgadmin 45 gün önce

  • CVE-2026-116247
    28İzleyin

    pgAdmin 4: libpq uses the pgAdmin service account's own password file and client certificate

    YüksekCVSS 7,1İstismar yokEPSS %0

    pgadmin · pgadmin 45 gün önce

  • CVE-2026-116249
    28İzleyin

    pgAdmin 4: Connection file paths and parameter keys escape the user's storage directory

    YüksekCVSS 7,2İstismar yokEPSS %0

    pgadmin.org · pgadmin 45 gün önce

  • CVE-2026-116250
    29İzleyin

    pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check

    YüksekCVSS 7,3İstismar yokEPSS %0

    pgadmin.org · pgadmin 45 gün önce

  • CVE-2026-116252
    28İzleyin

    pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name

    YüksekCVSS 7,1İstismar yokEPSS %0

    pgadmin · pgadmin 45 gün önce

  • CVE-2026-119331
    28İzleyin

    Ladybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutation

    YüksekCVSS 7,1İstismar yokEPSS %0

    ladybirdbrowser · ladybird5 gün önce

  • CVE-2026-119332
    35İzleyin

    Ladybird: FinalizationRegistry::cleanup() heap use-after-free via reentrant unregister()

    YüksekCVSS 8,8İstismar yokEPSS %0

    ladybirdbrowser · ladybird5 gün önce

  • CVE-2026-119333
    31İzleyin

    draw.io Desktop allows Windows executable search-path hijacking

    YüksekCVSS 7,8İstismar yokEPSS %0

    jgraph · drawio-desktop5 gün önce

  • CVE-2026-119335
    31İzleyin

    Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypass

    YüksekCVSS 7,8İstismar yokEPSS %0

    pi-hole · pi-hole5 gün önce

  • CVE-2026-119336
    31İzleyin

    Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink

    YüksekCVSS 7,8İstismar yokEPSS %0

    pi-hole · pi-hole5 gün önce

  • CVE-2026-119337
    28İzleyin

    RAGFlow: OpenAI-compatible agent completion bypasses private canvas authorization

    YüksekCVSS 7,1İstismar yokEPSS %0

    infiniflow · ragflow5 gün önce

  • CVE-2026-55598
    36İzleyin

    PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)

    KritikCVSS 9,1İstismar yokEPSS %0

    madeofpendletonwool · pinepods5 gün önce

  • CVE-2026-61620
    39İzleyin

    HoneySQL unchecked entity names can lead to SQL injection results

    KritikCVSS 9,8İstismar yokEPSS %0

    seancorfield · honeysql5 gün önce

  • CVE-2026-61850
    37İzleyin

    Kargo: Privilege escalation via Project RBAC management in the Kargo API

    KritikCVSS 9,3İstismar yokEPSS %0

    akuity · kargo5 gün önce

  • CVE-2026-62284
    34İzleyin

    OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy

    YüksekCVSS 8,6İstismar yokEPSS %0

    osac-project · osac-operator5 gün önce

  • CVE-2026-62301
    28İzleyin

    MyTube: Visitor Can Access Hidden Video Metadata and Content

    YüksekCVSS 7,1İstismar yokEPSS %0

    franklioxygen · mytube5 gün önce

  • CVE-2026-62302
    34İzleyin

    MyTube: Unauthenticated Media Access via Static Routes Bypassing Login

    YüksekCVSS 8,7İstismar yokEPSS %0

    franklioxygen · mytube5 gün önce

  • CVE-2026-62333
    34İzleyin

    OpenVM: MemoryMerkleAir allows below-leaf rows to alter memory roots

    YüksekCVSS 8,7İstismar yokEPSS %0

    openvm-org · openvm5 gün önce

  • CVE-2026-62334
    34İzleyin

    OpenVM's OpenVmHalo2Verifier self-call can bypass proof verification

    YüksekCVSS 8,7İstismar yokEPSS %0

    openvm-org · openvm5 gün önce

  • CVE-2026-78402
    29İzleyin

    Stack Buffer Overflow in Sentinel Keys Server

    YüksekCVSS 7,3İstismar yokEPSS %0

    thalesgroup · sentinel keys server5 gün önce

  • CVE-2026-78403
    37İzleyin

    Unauthenticated Stack Buffer Overflow in Sentinel Keys Server

    KritikCVSS 9,3İstismar yokEPSS %0

    thalesgroup · sentinel keys server5 gün önce

  • CVE-2026-117666
    36İzleyin

    ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary

    KritikCVSS 9,1İstismar yokEPSS %0

    deadtrickster · ssl_verify_fun5 gün önce