İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2026: sömürülen ve yeni ciddi CVE kayıtları

3.408 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 10 / 35

  • CVE-2026-48173
    39İzleyin

    In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

    KritikCVSS 9,8İstismar yokEPSS %0

    samsung semiconductor · exynos 8506 gün önce

  • CVE-2026-48174
    39İzleyin

    In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condi

    KritikCVSS 9,8İstismar yokEPSS %0

    samsung semiconductor · exynos 12806 gün önce

  • CVE-2026-48176
    30İzleyin

    A memory corruption vulnerability caused by improper validation of messages

    YüksekCVSS 7,5İstismar yokEPSS %0

    samsung semiconductor · exynos 10806 gün önce

  • CVE-2026-48178
    35İzleyin

    Out of bound access in PPC due to race condition in global variable access

    YüksekCVSS 8,8İstismar yokEPSS %0

    samsung semiconductor · exynos 22006 gün önce

  • CVE-2026-48179
    30İzleyin

    In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service

    YüksekCVSS 7,5İstismar yokEPSS %0

    samsung semiconductor · exynos 10806 gün önce

  • CVE-2026-48183
    36İzleyin

    Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

    KritikCVSS 9,1İstismar yokEPSS %0

    samsung semiconductor · exynos 14806 gün önce

  • CVE-2026-48186
    36İzleyin

    Improper handling of messages before AS security activation can cause unexpected behavior

    KritikCVSS 9,1İstismar yokEPSS %0

    samsung semiconductor · exynos 12806 gün önce

  • CVE-2026-68984
    32İzleyin

    In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.

    YüksekCVSS 8,1İstismar yokEPSS %0

    samsung semiconductor · exynos 21006 gün önce

  • CVE-2026-68985
    30İzleyin

    In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a

    YüksekCVSS 7,5İstismar yokEPSS %0

    samsung semiconductor · exynos 12806 gün önce

  • CVE-2026-68990
    31İzleyin

    In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading

    YüksekCVSS 7,8İstismar yokEPSS %0

    samsung semiconductor · exynos 14806 gün önce

  • CVE-2026-68991
    39İzleyin

    In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a

    KritikCVSS 9,8İstismar yokEPSS %0

    samsung semiconductor · exynos 14806 gün önce

  • CVE-2026-68994
    29İzleyin

    A double free vulnerability in NPU driver due to improper pointer management (941)

    YüksekCVSS 7,3İstismar yokEPSS %0

    samsung semiconductor · exynos 14806 gün önce

  • CVE-2026-69002
    30İzleyin

    Incorrect authorization in Samsung framework services due to missing permission checks

    YüksekCVSS 7,5İstismar yokEPSS %0

    samsung semiconductor · exynos 15806 gün önce

  • CVE-2026-69005
    29İzleyin

    Integer overflow in NPU driver parameter processing due to insufficient bounds checking.

    YüksekCVSS 7,3İstismar yokEPSS %0

    samsung semiconductor · exynos 14806 gün önce

  • CVE-2026-69006
    36İzleyin

    Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

    KritikCVSS 9,1İstismar yokEPSS %0

    samsung semiconductor · exynos 8506 gün önce

  • CVE-2026-69025
    30İzleyin

    In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial o

    YüksekCVSS 7,5İstismar yokEPSS %0

    samsung semiconductor · exynos 14806 gün önce

  • CVE-2026-69043
    36İzleyin

    In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption

    KritikCVSS 9,1İstismar yokEPSS %0

    samsung semiconductor · exynos 22006 gün önce

  • CVE-2026-69044
    33İzleyin

    In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.

    YüksekCVSS 8,4İstismar yokEPSS %0

    samsung semiconductor · exynos 15806 gün önce

  • CVE-2026-69050
    39İzleyin

    Out-of-bounds memory access in a device driver due to improper resource state tracking.

    KritikCVSS 9,8İstismar yokEPSS %0

    samsung semiconductor · exynos 14806 gün önce

  • CVE-2026-69066
    33İzleyin

    Memory corruption in GPU driver due to improper validation of VMID reservation.

    YüksekCVSS 8,4İstismar yokEPSS %0

    samsung semiconductor · exynos 22006 gün önce

  • CVE-2026-69068
    36İzleyin

    Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.

    KritikCVSS 9,1İstismar yokEPSS %0

    samsung semiconductor · exynos modem 53006 gün önce

  • CVE-2026-116617
    32İzleyin

    Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameter

    YüksekCVSS 8,1İstismar yokEPSS %0

    stylemix · motors – car dealership & classified listings plugin6 gün önce

  • CVE-2026-118193
    35İzleyin

    GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    stellarwp · givewp – donation plugin and fundraising platform6 gün önce

  • CVE-2026-123010
    28İzleyin

    @twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim.

    YüksekCVSS 7,2İstismar yokEPSS %0

    twilio-labs · netlify-okta-auth6 gün önce

  • CVE-2026-123012
    28İzleyin

    In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only read access was intended, a di

    YüksekCVSS 7,1İstismar yokEPSS %0

    gogs · gogs6 gün önce

  • CVE-2026-93389
    32İzleyin

    LiteSpeed Cache <= 7.9.1 - Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) via Public REST Caching

    YüksekCVSS 8,2İstismar yokEPSS %0

    litespeedtech · litespeed cache6 gün önce

  • CVE-2025-15702
    35İzleyin

    Cloud Blocks <= 1.1.8 - Unauthenticated Stored XSS

    YüksekCVSS 8,8İstismar yokEPSS %0

    unknown · cloud blocks6 gün önce

  • CVE-2026-100144
    37İzleyin

    IVPAY payments <= 1.0.8 - Unauthenticated SQLi via 'payment_id' Parameter

    KritikCVSS 9,3İstismar yokEPSS %0

    unknown · ivpay payments6 gün önce

  • CVE-2026-109150
    28İzleyin

    WP PageNavi Style <= 1.4 - Stored XSS via CSRF

    YüksekCVSS 7,1İstismar yokEPSS %0

    unknown · wp pagenavi style6 gün önce

  • CVE-2026-123014
    34İzleyin

    iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, allowing an attacker to execute arbitrary c

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    iterm2 · iterm26 gün önce

  • CVE-2026-16304
    32İzleyin

    WP Event Manager < 3.4.2 - Subscriber+ Arbitrary Post Takeover via event_organizer_ids

    YüksekCVSS 8,1İstismar yokEPSS %0

    unknown · wp event manager6 gün önce

  • CVE-2026-19256
    39İzleyin

    All In One Login 2.4.0 - 2.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force

    KritikCVSS 9,8İstismar yokEPSS %0

    unknown · all in one login6 gün önce

  • CVE-2026-86442
    32İzleyin

    WP Event Manager 3.4.0 - 3.4.1 - Unauthenticated Unpublished Post Overwrite via IDOR

    YüksekCVSS 8,2İstismar yokEPSS %0

    unknown · wp event manager6 gün önce

  • CVE-2026-123025
    37İzleyin

    An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    opnsense · os-acme-client6 gün önce

  • CVE-2026-123029
    30İzleyin

    Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges

    YüksekCVSS 7,5İstismar yokEPSS %0

    wowza · streaming engine6 gün önce

  • CVE-2026-123033
    33İzleyin

    Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 (and in release trains before their re

    YüksekCVSS 8,3İstismar yokEPSS %0

    ixsystems · truenas scale6 gün önce

  • CVE-2026-100109
    39İzleyin

    Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    unknown · security for woocommerce6 gün önce

  • CVE-2026-109408
    29İzleyin

    vault-java-driver: SslConfig silently disables requested TLS verification

    YüksekCVSS 7,4İstismar yokEPSS %0

    jopenlibs · vault-java-driver6 gün önce

  • CVE-2026-118869
    34İzleyin

    An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the

    YüksekCVSS 8,7İstismar yokEPSS %1

    shirasagi project · shirasagi6 gün önce

  • CVE-2026-121489
    40Planlayın

    Apache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directory

    KritikCVSS 10,0İstismar yokEPSS %0

    apache software foundation · apache juneau6 gün önce

  • CVE-2026-73095
    34İzleyin

    Apache Juneau: Denial of service via unbounded memory allocation in parsers and REST request handling

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache juneau6 gün önce

  • CVE-2026-73098
    40Planlayın

    Apache Juneau: Unsafe reflection allows attacker-controlled class initialization during parsing

    KritikCVSS 10,0İstismar yokEPSS %0

    apache software foundation · apache juneau6 gün önce

  • CVE-2026-73099
    40Planlayın

    Apache Juneau: Cross-site request forgery via default-enabled content query-parameter body override

    KritikCVSS 10,0İstismar yokEPSS %0

    apache software foundation · apache juneau6 gün önce

  • CVE-2026-73100
    40Planlayın

    Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors

    KritikCVSS 10,0İstismar yokEPSS %0

    apache software foundation · apache juneau6 gün önce

  • CVE-2026-73101
    40Planlayın

    Apache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaults

    KritikCVSS 10,0İstismar yokEPSS %0

    apache software foundation · apache juneau6 gün önce

  • CVE-2026-73116
    40Planlayın

    Apache Juneau: REST client forwards credentials to a different origin when following HTTP redirects

    KritikCVSS 10,0İstismar yokEPSS %0

    apache software foundation · apache juneau6 gün önce

  • CVE-2026-73117
    40Planlayın

    Apache Juneau: Response header CRLF injection and open redirect when applications set headers or redirect targets from request data

    KritikCVSS 10,0İstismar yokEPSS %0

    apache software foundation · apache juneau6 gün önce

  • CVE-2026-96677
    40Planlayın

    Apache Juneau: Cross-site scripting via unescaped request variables in HTML-doc chrome

    KritikCVSS 10,0İstismar yokEPSS %0

    apache software foundation · apache juneau6 gün önce

  • CVE-2026-103864
    30İzleyin

    Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache software foundation · apache sling engine6 gün önce

  • CVE-2026-103866
    30İzleyin

    Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache software foundation · apache sling engine6 gün önce

  • CVE-2026-123047
    30İzleyin

    Keycloak admin user password stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts

    YüksekCVSS 7,5İstismar yokEPSS %0

    eclipse foundation · eclipse basyx helm charts6 gün önce

  • CVE-2026-104720
    30İzleyin

    Path Traversal in Kobikom Telecommunications' Kobikom

    YüksekCVSS 7,5İstismar yokEPSS %0

    kobikom telecommunications and informatics services inc. · kobikom6 gün önce

  • CVE-2026-105321
    30İzleyin

    SQL Injection in Kobikom Telecommunications' Kobikom

    YüksekCVSS 7,5İstismar yokEPSS %0

    kobikom telecommunications and informatics services inc. · kobikom6 gün önce

  • CVE-2026-105325
    30İzleyin

    Apache OFBiz: Missing authorization in payment application services allows view-only users to modify payment allocations

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache software foundation · apache ofbiz6 gün önce

  • CVE-2026-105330
    39İzleyin

    Apache OFBiz: Use of Hard-coded Cryptographic Key in JWT Token Authentication Enables Unauthenticated Administrative Access

    KritikCVSS 9,8İstismar yokEPSS %0

    apache software foundation · apache ofbiz6 gün önce

  • CVE-2026-105461
    30İzleyin

    Apache OFBiz: Missing authorization in updateOrderItems allows view-only users to modify order prices and quantities

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache software foundation · apache ofbiz6 gün önce

  • CVE-2026-107912
    30İzleyin

    Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw

    YüksekCVSS 7,7İstismar yokEPSS %0

    red hat · exploit intelligence6 gün önce

  • CVE-2026-109928
    29İzleyin

    Apache OFBiz: Incorrect Authentication Algorithm Implementation in Password Reset Enables Full Account Takeover

    YüksekCVSS 7,4İstismar yokEPSS %0

    apache · ofbiz6 gün önce

  • CVE-2026-114233
    32İzleyin

    Apache OFBiz: Incorrect Privilege Assignment in Order Manager Enables Unauthorized Modification of Approved Orders

    YüksekCVSS 8,1İstismar yokEPSS %0

    apache · ofbiz6 gün önce

  • CVE-2026-117691
    36İzleyin

    Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter names

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    red hat · red hat build of keycloak6 gün önce

  • CVE-2026-123059
    30İzleyin

    Keycloak admin client secret stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts

    YüksekCVSS 7,5İstismar yokEPSS %0

    eclipse foundation · eclipse basyx helm charts6 gün önce

  • CVE-2026-82904
    30İzleyin

    Apache OFBiz: Unbounded multi-form row count from a parameter name

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache · ofbiz6 gün önce

  • CVE-2026-82907
    39İzleyin

    Apache OFBiz: externalLoginKey honoured pre-auth, reusable and unbound

    KritikCVSS 9,8İstismar yokEPSS %0

    apache · ofbiz6 gün önce

  • CVE-2026-82910
    35İzleyin

    Apache OFBiz: renderLink compiles link parameters as FreeMarker source

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · ofbiz6 gün önce

  • CVE-2026-82912
    35İzleyin

    Apache OFBiz: Unsandboxed Groovy compiled from a service parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · ofbiz6 gün önce

  • CVE-2026-82916
    28İzleyin

    Apache OFBiz: webtools xmldsdump exports any entity to any path

    YüksekCVSS 7,1İstismar yokEPSS %0

    apache · ofbiz6 gün önce

  • CVE-2026-82960
    35İzleyin

    Apache OFBiz: Widget use-when Expression Injection Bypasses Groovy Sandbox for authenticated RCE

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · ofbiz6 gün önce

  • CVE-2026-83542
    39İzleyin

    Apache OFBiz: Unauthenticated RCE via login-page widget injection

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    apache · ofbiz6 gün önce

  • CVE-2026-84183
    35İzleyin

    Apache OFBiz: Content Manager VIEW-only RCE in updateLayout

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · ofbiz6 gün önce

  • CVE-2026-85627
    35İzleyin

    Apache OFBiz: Authenticated Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    apache · ofbiz6 gün önce

  • CVE-2026-92887
    29İzleyin

    Apache OFBiz: REST API authentication bypassed by default when the auth attribute is omitted from a .rest.xml operation

    YüksekCVSS 7,3İstismar yokEPSS %0

    apache · ofbiz6 gün önce

  • CVE-2026-106713
    30İzleyin

    An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the com.dramawave.feature.web.

    YüksekCVSS 7,5İstismar yokEPSS %0

    6 gün önce

  • CVE-2026-106714
    32İzleyin

    Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it in a Hybrid WebView

    YüksekCVSS 8,1İstismar yokEPSS %0

    6 gün önce

  • CVE-2026-115738
    28İzleyin

    SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacker to inject SQL queri

    YüksekCVSS 7,1İstismar yokEPSS %0

    trellix · dlp on-prem extensions6 gün önce

  • CVE-2026-119744
    30İzleyin

    Cendio ThinLinc Improper Authentication via Web Access

    YüksekCVSS 7,7İstismar yokEPSS %0

    cendio · thinlinc6 gün önce

  • CVE-2026-68524
    30İzleyin

    Apache OFBiz: Pre-Authentication Remote Code Execution via Attacker-Controlled Screen Definition Loading

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    apache software foundation · apache ofbiz6 gün önce

  • CVE-2026-71901
    32İzleyin

    Apache OFBiz: Dispatch arbitrary internal services on SFA component

    YüksekCVSS 8,1İstismar yokEPSS %0

    apache software foundation · apache ofbiz6 gün önce

  • CVE-2026-73577
    30İzleyin

    Apache OFBiz: Unauthenticated path-suffix view authorization bypass

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    apache software foundation · apache ofbiz6 gün önce

  • CVE-2026-73578
    30İzleyin

    Apache OFBiz: Unauthenticated saved-view authorization bypass with RCE impact

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache software foundation · apache ofbiz6 gün önce

  • CVE-2026-74841
    36İzleyin

    Apache OFBiz: Denial of Service via unauthenticated userTenantId in multitenant mode

    KritikCVSS 9,1İstismar yokEPSS %0

    apache software foundation · apache ofbiz6 gün önce

  • CVE-2026-81815
    39İzleyin

    Apache OFBiz: SQL injection - performFind ignore-case values, MySQL/MariaDB

    KritikCVSS 9,8İstismar yokEPSS %0

    apache software foundation · apache ofbiz6 gün önce

  • CVE-2026-81828
    32İzleyin

    Apache OFBiz: Server-side request forgery in SurveyWrapper

    YüksekCVSS 8,1İstismar yokEPSS %0

    apache software foundation · apache ofbiz6 gün önce

  • CVE-2026-82894
    30İzleyin

    Apache OFBiz: Content renderer runs a service name stored on the row

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache software foundation · apache ofbiz6 gün önce

  • CVE-2019-16447
    31İzleyin

    Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerability.

    YüksekCVSS 7,8İstismar yokEPSS %0

    adobe · adobe illustrator cc6 gün önce

  • CVE-2020-9709
    35İzleyin

    Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have a security bypass vulnerability.

    YüksekCVSS 8,8İstismar yokEPSS %0

    adobe · adobe photoshop6 gün önce

  • CVE-2026-102523
    32İzleyin

    MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION

    YüksekCVSS 8,0İstismar yokEPSS %0

    mariadb · server6 gün önce

  • CVE-2026-102615
    30İzleyin

    HeyForm: Uploaded HTML files are served as text/html on the app origin with no CSP — stored XSS

    YüksekCVSS 7,6İstismar yokEPSS %0

    heyform · heyform6 gün önce

  • CVE-2026-104269
    34İzleyin

    ModSecurity: RFC 2231 `filename*` Parameter Bypasses Multipart Filename Rules on RFC-Compliant Backends (Go, Python, Node, Java)

    YüksekCVSS 8,6İstismar yokEPSS %0

    owasp-modsecurity · modsecurity6 gün önce

  • CVE-2026-107891
    32İzleyin

    musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incor

    YüksekCVSS 8,1İstismar yokEPSS %0

    musl -libc · musl6 gün önce

  • CVE-2026-119344
    36İzleyin

    Cocos Intra-handshake attested TLS implementation is vulnerable to Diversion Attacks

    KritikCVSS 9,1İstismar yokEPSS %0

    ultravioletrs · cocos6 gün önce

  • CVE-2026-119345
    28İzleyin

    Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks

    YüksekCVSS 7,2İstismar yokEPSS %0

    ultravioletrs · cocos6 gün önce

  • CVE-2026-121139
    29İzleyin

    Rapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authentication

    YüksekCVSS 7,3İstismar yokEPSS %0

    rapid7 · metasploit framework6 gün önce

  • CVE-2026-122328
    34İzleyin

    SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in WAV Decoder

    YüksekCVSS 8,5İstismar yokEPSS %0

    libsdl-org · sdl_mixer6 gün önce

  • CVE-2026-122329
    34İzleyin

    SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in AIFF Decoder

    YüksekCVSS 8,5İstismar yokEPSS %0

    libsdl-org · sdl_mixer6 gün önce

  • CVE-2026-123095
    30İzleyin

    mpv 0.29.0 before 0.42.0 Playlist Entry Injection via ytdl_hook Newlines

    YüksekCVSS 7,7İstismar yokEPSS %0

    mpv-player · mpv6 gün önce

  • CVE-2026-123096
    28İzleyin

    anacrolix/torrent through 1.61.0 Memory Exhaustion via Unbounded HTTP Tracker Response

    YüksekCVSS 7,1İstismar yokEPSS %0

    anacrolix · torrent6 gün önce

  • CVE-2026-123158
    67Bu hafta

    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %16

    openbsd · openssh6 gün önce

  • CVE-2026-70659
    31İzleyin

    stable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (`load_imatrix`) via a duplicate tensor name

    YüksekCVSS 7,8İstismar yokEPSS %0

    leejet · stable-diffusion.cpp6 gün önce

  • CVE-2026-73856
    34İzleyin

    ModSecurity: Response Body Inspection Bypass

    YüksekCVSS 8,6İstismar yokEPSS %0

    owasp-modsecurity · modsecurity6 gün önce

  • CVE-2026-102739
    31İzleyin

    ESPectre: Unsafe Deserialization on .npz dataset leads to Code Execution

    YüksekCVSS 7,8İstismar yokEPSS %0

    francescopace · espectre6 gün önce